last executing test programs: 23m36.947920596s ago: executing program 32 (id=76): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r2, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 21m22.532256601s ago: executing program 33 (id=407): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe90527e4a1c2cb00e382b0936b1b000211bb3bda660", 0x8b, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000d00)=r8, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000004", 0x10, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 20m2.82300783s ago: executing program 34 (id=604): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m36.158449566s ago: executing program 35 (id=1865): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsopen(&(0x7f0000001080)='ufs\x00', 0x0) syz_read_part_table(0x107a, &(0x7f0000003f80)="$eJzs0DFKBEEQBdC/bvfMLoqYegIPaCzOgicwNfAopuZeRjQomV7BvYCavJfMUPTvX3T4V/uXfpOk7pN9tmO0S1qSOcnjyclt8l7JZ81VVdnk7SrJtOYyJhm56lU9dbvG755b3+X6UK2ORtNHtcyH7zunZf1enI/q1yx5mpKHJD2bk+az8bMct7v8War/zSsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO/6CgAA//82LCYK") setresuid(0x0, 0xee00, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setpgid(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = syz_open_dev$video(&(0x7f0000001f80), 0x3, 0x20000) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000001fc0)={0x8, 0x9, 0x4, {0xa, @pix_mp={0x32, 0xe, 0x30324c4a, 0x7, 0x4, [{0x0, 0x10000}, {0x10001}, {0x6c, 0x90000000}, {0x5, 0xa}, {0x5, 0x2}, {0x5, 0xab40000}, {0x40024d, 0x3}, {0x6, 0x100}], 0xb, 0x0, 0x7, 0x2, 0x1}}, 0x4f25}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$key(0xf, 0x3, 0x2) 9m25.611691785s ago: executing program 9 (id=2643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$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") ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m20.606551336s ago: executing program 8 (id=2651): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000340)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 9m20.536574665s ago: executing program 9 (id=2654): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300, 0x0, 0x84}, 0x0) 9m19.180249401s ago: executing program 9 (id=2659): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x2c, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xd, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 9m19.046588122s ago: executing program 8 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 9m18.61221076s ago: executing program 8 (id=2663): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 9m18.050449424s ago: executing program 8 (id=2665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 9m17.991398693s ago: executing program 9 (id=2666): removexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') 9m17.704970797s ago: executing program 9 (id=2669): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 9m17.523408709s ago: executing program 8 (id=2672): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 9m17.312318483s ago: executing program 9 (id=2674): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 9m16.906569863s ago: executing program 8 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setreuid(0xee01, 0xee01) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000000c0)=[{r4, 0x3023}], 0x1, 0x0, 0x0, 0x0) 7m9.139386322s ago: executing program 36 (id=2675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103e00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6m39.297526226s ago: executing program 37 (id=2673): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x42) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6m39.091951671s ago: executing program 38 (id=2670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m38.9075931s ago: executing program 39 (id=2677): syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 6m38.679908326s ago: executing program 40 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setreuid(0xee01, 0xee01) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000000c0)=[{r4, 0x3023}], 0x1, 0x0, 0x0, 0x0) 6m38.443827727s ago: executing program 41 (id=2674): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 3m4.151325897s ago: executing program 0 (id=3616): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "f59a0000000400000000000100"}}}]}, 0x48}}, 0x0) 3m2.937396855s ago: executing program 0 (id=3621): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 3m1.031375169s ago: executing program 0 (id=3631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m59.827610827s ago: executing program 0 (id=3633): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x10408, &(0x7f00000001c0)='\x00') 2m59.066636411s ago: executing program 0 (id=3641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) 2m58.097419052s ago: executing program 0 (id=3647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m57.14067299s ago: executing program 42 (id=3647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m35.691004062s ago: executing program 6 (id=4092): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 1m35.134173574s ago: executing program 6 (id=4096): syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.823211632s ago: executing program 6 (id=4098): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002cb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000056e000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.533337771s ago: executing program 6 (id=4100): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x414, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd19e030000ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036cc5c620d1cbf7966d61fdcf334063bd7a0abdc2542ded0b000000caef001d00000100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m33.558597692s ago: executing program 6 (id=4105): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e000000200000400"/33], 0x3c}}, 0x0) 1m32.726439258s ago: executing program 6 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f573", 0xc7}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x36a}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m31.275041564s ago: executing program 43 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f573", 0xc7}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7", 0x36a}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.34883939s ago: executing program 2 (id=4508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 7.319898168s ago: executing program 2 (id=4511): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.183649139s ago: executing program 5 (id=4514): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:'], 0xa) 7.152659864s ago: executing program 7 (id=4515): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x2) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000400)='[\v\xdbX\xae^\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa8\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\xf0', 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x10bd}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000880)='\"?', 0x2}], 0x1}, 0x4) 6.827537103s ago: executing program 5 (id=4518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.690574553s ago: executing program 4 (id=4519): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xfe) 5.390628058s ago: executing program 4 (id=4522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, 0x0, 0x0) 5.232209852s ago: executing program 7 (id=4524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 5.089188501s ago: executing program 4 (id=4526): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000033e3297882b128708419b01092000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a0101000000000000000005000000090001007379"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200030300004e224e23b62a919030a885be04"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x78) 4.94830345s ago: executing program 7 (id=4527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 4.903002457s ago: executing program 2 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204880, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x452, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4048000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05db", 0x2, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.885008373s ago: executing program 5 (id=4530): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4008054) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="610525"], 0x166) 4.62355879s ago: executing program 3 (id=4532): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7fff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3b}, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 4.467159165s ago: executing program 7 (id=4534): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) 4.337414104s ago: executing program 3 (id=4535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001300)="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", 0xb1e}], 0x1}}], 0x1, 0x80) 4.137552922s ago: executing program 1 (id=4537): r0 = memfd_create(&(0x7f0000000400)='[\v\xdbX\xae^\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa8\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\xf0', 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.669347611s ago: executing program 1 (id=4540): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x10bd}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000880)='\"?', 0x2}], 0x1}, 0x4) 3.431927378s ago: executing program 7 (id=4541): socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000f80)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000180)=0xb) 3.30709633s ago: executing program 3 (id=4542): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 1.606698772s ago: executing program 5 (id=4543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d000000", @ANYRES32=r2, @ANYBLOB="18002f"], 0x34}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 1.58345419s ago: executing program 2 (id=4544): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x283016, 0x0, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0) writev(r6, &(0x7f0000002a00), 0x0) sendfile(r1, r0, 0x0, 0xbc44) r9 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 1.513429588s ago: executing program 4 (id=4545): r0 = io_uring_setup(0x3326, &(0x7f00000001c0)={0x0, 0x1, 0x400, 0x0, 0x11c}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410eb) close_range(r0, 0xffffffffffffffff, 0x0) 1.475678483s ago: executing program 3 (id=4546): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7cc, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.288662056s ago: executing program 1 (id=4547): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000380)=""/96) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x2e) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.288012929s ago: executing program 5 (id=4548): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 1.082423244s ago: executing program 3 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91, 0x4}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) 1.080881781s ago: executing program 4 (id=4550): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9a9200", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @empty, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0xffd, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) 360.440822ms ago: executing program 2 (id=4551): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009}) 272.02729ms ago: executing program 5 (id=4552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7c6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 105.264782ms ago: executing program 1 (id=4553): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) 19.344388ms ago: executing program 7 (id=4554): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) 0s ago: executing program 3 (id=4555): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): ze too large [ 1273.774961][T17971] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1273.782470][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1273.798275][ C0] EXT4-fs (loop0): initial error at time 1781405522: ext4_iget_extra_inode:5127: inode 15 [ 1273.808363][ C0] EXT4-fs (loop0): last error at time 1781405522: ext4_iget_extra_inode:5127: inode 15 [ 1273.918269][T17971] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.3051: couldn't read orphan inode 15 (err -117) [ 1274.182938][T17971] loop0: lost filesystem error report for type 5 error -117 [ 1274.217813][T17971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.619786][T17991] loop4: detected capacity change from 0 to 1024 [ 1274.749424][T16203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.755319][T17991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1274.818392][T17999] loop1: detected capacity change from 0 to 128 [ 1274.829270][T17999] ext4: Unknown parameter 'fsmagic' [ 1275.965001][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3064'. [ 1276.174880][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1276.457644][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1276.606474][T18029] loop1: detected capacity change from 0 to 128 [ 1276.831557][ T30] audit: type=1804 audit(1781405526.016:73): pid=18029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3069" name="/newroot/80/file0/bus" dev="loop1" ino=1048740 res=1 errno=0 [ 1277.283889][T18021] tipc: Enabling of bearer rejected, failed to enable media [ 1278.819468][T18067] syzkaller0: entered promiscuous mode [ 1278.825173][T18067] syzkaller0: entered allmulticast mode [ 1279.007277][T18070] loop6: detected capacity change from 0 to 128 [ 1279.037193][T18070] ext4: Unknown parameter 'fsmagic' [ 1279.087909][T18073] loop4: detected capacity change from 0 to 512 [ 1279.135250][T18073] EXT4-fs: Ignoring removed bh option [ 1279.204537][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3079'. [ 1279.298841][T18073] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.3075: corrupted in-inode xattr: e_value size too large [ 1279.550343][T18073] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1279.563067][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1279.578810][ C0] EXT4-fs (loop4): initial error at time 1781405528: ext4_iget_extra_inode:5127: inode 15 [ 1279.588834][ C0] EXT4-fs (loop4): last error at time 1781405528: ext4_iget_extra_inode:5127: inode 15 [ 1279.805545][T18073] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3075: couldn't read orphan inode 15 (err -117) [ 1279.933727][T18073] loop4: lost filesystem error report for type 5 error -117 [ 1279.956531][T18073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.694471][T18104] loop1: detected capacity change from 0 to 128 [ 1280.780916][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.931869][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 1282.210781][T18147] loop5: detected capacity change from 0 to 128 [ 1282.276385][T18147] ext4: Unknown parameter 'fsmagic' [ 1283.452048][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3098'. [ 1283.831066][T18187] sg_write: data in/out 168924/146 bytes for SCSI command 0x0-- guessing data in; [ 1283.831066][T18187] program syz.3.3100 not setting count and/or reply_len properly [ 1284.846422][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1284.975275][T18216] loop1: detected capacity change from 0 to 128 [ 1285.015909][T18216] ext4: Unknown parameter 'fsmagic' [ 1285.873398][T18236] syz_tun: entered allmulticast mode [ 1286.195145][T18234] syz_tun: left allmulticast mode [ 1286.983549][T18245] syzkaller0: entered promiscuous mode [ 1287.002844][T18245] syzkaller0: entered allmulticast mode [ 1287.311612][T18254] loop4: detected capacity change from 0 to 2048 [ 1287.388790][T18254] Alternate GPT is invalid, using primary GPT. [ 1287.405448][T18254] loop4: p2 p3 p7 [ 1287.835251][ T7952] udevd[7952]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1287.845934][T11337] udevd[11337]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 1287.858858][T10039] udevd[10039]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1288.095246][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1288.631265][T18281] loop0: detected capacity change from 0 to 128 [ 1288.669632][T18281] ext4: Unknown parameter 'fsmagic' [ 1289.811718][T18301] syz_tun: entered allmulticast mode [ 1289.824025][T18300] syz_tun: left allmulticast mode [ 1291.256987][T18323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3140'. [ 1291.535086][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1291.901861][T18346] loop0: detected capacity change from 0 to 128 [ 1291.937432][T18346] ext4: Unknown parameter 'fsmagic' [ 1293.072171][T18353] syz_tun: entered allmulticast mode [ 1293.084143][T18353] syz_tun: left allmulticast mode [ 1293.766181][T18381] tipc: Enabling of bearer rejected, failed to enable media [ 1294.111469][T18393] tipc: Enabling of bearer rejected, failed to enable media [ 1294.801076][T18418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.006502][T18438] syz_tun: entered allmulticast mode [ 1296.038331][T18436] syz_tun: left allmulticast mode [ 1296.522809][T18413] Bluetooth: hci9: command 0x0406 tx timeout [ 1296.539230][T18413] Bluetooth: hci0: command 0x0406 tx timeout [ 1296.547588][T18413] Bluetooth: hci3: command 0x0406 tx timeout [ 1296.554384][T18413] Bluetooth: hci10: command 0x0406 tx timeout [ 1296.560669][T18412] Bluetooth: hci7: command 0x0406 tx timeout [ 1296.569140][T18413] Bluetooth: hci8: command 0x0406 tx timeout [ 1297.465344][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1297.530813][T18465] tipc: Enabling of bearer rejected, failed to enable media [ 1297.665303][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1298.438447][T18493] loop1: detected capacity change from 0 to 1024 [ 1298.566047][T18500] loop5: detected capacity change from 0 to 512 [ 1298.612794][T18500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1298.748638][T18500] EXT4-fs (loop5): 1 truncate cleaned up [ 1298.800857][T18500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.469138][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.567840][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.579286][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.670284][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1299.688201][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1300.358715][T18547] tipc: Enabling of bearer rejected, failed to enable media [ 1300.898522][T18563] loop4: detected capacity change from 0 to 512 [ 1301.164815][T18563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.411632][T18563] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.866717][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3209'. [ 1302.976147][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.975905][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 1305.308602][ T30] audit: type=1804 audit(1781405554.486:74): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3219" name="/newroot/105/file0" dev="tmpfs" ino=565 res=1 errno=0 [ 1305.709592][T18631] tipc: Enabling of bearer rejected, failed to enable media [ 1309.800961][T18697] loop4: detected capacity change from 0 to 4096 [ 1309.879405][T18697] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1309.933015][T18697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0002] [ 1309.961149][T18697] System zones: 0-5 [ 1309.994821][T18697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.156621][T18718] x_tables: duplicate underflow at hook 1 [ 1310.766174][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.925619][T18735] netlink: 'syz.6.3250': attribute type 1 has an invalid length. [ 1311.259872][T18735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1311.448115][T18751] loop4: detected capacity change from 0 to 736 [ 1312.871953][T18771] loop6: detected capacity change from 0 to 256 [ 1313.074148][T18771] FAT-fs (loop6): Directory bread(block 64) failed [ 1313.098509][T18771] FAT-fs (loop6): Directory bread(block 65) failed [ 1313.132944][T18771] FAT-fs (loop6): Directory bread(block 66) failed [ 1313.160449][T18771] FAT-fs (loop6): Directory bread(block 67) failed [ 1313.206722][T18771] FAT-fs (loop6): Directory bread(block 68) failed [ 1313.238396][T18771] FAT-fs (loop6): Directory bread(block 69) failed [ 1313.285864][T18771] FAT-fs (loop6): Directory bread(block 70) failed [ 1313.317818][T18771] FAT-fs (loop6): Directory bread(block 71) failed [ 1313.338419][T18771] FAT-fs (loop6): Directory bread(block 72) failed [ 1313.373126][T18771] FAT-fs (loop6): Directory bread(block 73) failed [ 1314.632774][T18791] loop5: detected capacity change from 0 to 512 [ 1314.737422][T18791] EXT4-fs: Invalid want_extra_isize 1 [ 1314.893374][T18791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.443590][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'. [ 1316.620373][ T30] audit: type=1326 audit(1781405565.806:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.4.3276" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ae599ce59 code=0x0 [ 1317.192607][T18852] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 1318.000677][T18852] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1318.750829][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 1323.188201][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 1324.747079][T18965] loop5: detected capacity change from 0 to 128 [ 1325.029192][T18974] loop3: detected capacity change from 0 to 164 [ 1325.399666][T18982] syz_tun: entered allmulticast mode [ 1327.415494][T19027] syz_tun: entered allmulticast mode [ 1327.447157][T19025] syz_tun: left allmulticast mode [ 1327.564674][T19030] loop4: detected capacity change from 0 to 128 [ 1327.620231][T19030] EXT4-fs: Ignoring removed bh option [ 1327.687983][T19030] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1327.819243][T19030] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.279521][T16190] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1328.409326][ T30] audit: type=1804 audit(1781405577.596:76): pid=19053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3338" name="/newroot/88/file0" dev="tmpfs" ino=472 res=1 errno=0 [ 1329.173054][T19066] loop0: detected capacity change from 0 to 512 [ 1329.232240][T19066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.699676][T19090] loop6: detected capacity change from 0 to 128 [ 1329.775627][T19090] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1329.916989][T19090] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.141811][T16209] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1330.675749][T16203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.226743][ T30] audit: type=1804 audit(1781405581.406:77): pid=19140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3359" name="/newroot/128/file0" dev="tmpfs" ino=684 res=1 errno=0 [ 1332.982521][T19159] loop6: detected capacity change from 0 to 128 [ 1333.839801][T19166] loop0: detected capacity change from 0 to 512 [ 1333.911722][T19166] EXT4-fs: Ignoring removed bh option [ 1334.008996][T19166] EXT4-fs error (device loop0): ext4_iget_extra_inode:5127: inode #15: comm syz.0.3369: corrupted in-inode xattr: e_value size too large [ 1334.047381][T19166] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1334.052464][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1334.068176][ C0] EXT4-fs (loop0): initial error at time 1781405583: ext4_iget_extra_inode:5127: inode 15 [ 1334.078244][ C0] EXT4-fs (loop0): last error at time 1781405583: ext4_iget_extra_inode:5127: inode 15 [ 1334.142685][T19166] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.3369: couldn't read orphan inode 15 (err -117) [ 1334.253658][T19166] loop0: lost filesystem error report for type 5 error -117 [ 1334.296660][T19166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.991594][T16203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.601333][ T30] audit: type=1804 audit(1781405584.786:78): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3379" name="/newroot/118/file0" dev="tmpfs" ino=623 res=1 errno=0 [ 1339.741107][T19293] loop3: detected capacity change from 0 to 512 [ 1339.770852][T19293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1339.862362][T19293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.969817][T19293] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.164999][ T30] audit: type=1800 audit(1781405589.346:79): pid=19293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3400" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1340.677460][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.415986][T19374] netlink: 'syz.4.3421': attribute type 1 has an invalid length. [ 1344.689598][T19374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1345.122202][T19397] netlink: 'syz.0.3430': attribute type 4 has an invalid length. [ 1345.195301][T19397] netlink: 'syz.0.3430': attribute type 4 has an invalid length. [ 1346.108377][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1346.147791][T19422] loop0: detected capacity change from 0 to 8192 [ 1346.206973][T19422] loop0: p1 p3 p4 [ 1346.231155][T19422] loop0: partition table partially beyond EOD, truncated [ 1346.264285][T19422] loop0: p1 start 16777216 is beyond EOD, truncated [ 1346.304406][T19422] loop0: p4 size 33554432 extends beyond EOD, truncated [ 1346.764542][T11594] Bluetooth: hci1: Frame reassembly failed (-84) [ 1346.927336][ T7846] udevd[7846]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1346.939807][ T7952] udevd[7952]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1347.140166][T19440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.148038][T19440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.357997][T19440] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1347.610192][T19457] loop6: detected capacity change from 0 to 512 [ 1347.699144][T19457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.947976][T19463] loop1: detected capacity change from 0 to 128 [ 1348.001891][T19463] ext4: Unknown parameter 'fsmagic' [ 1348.016241][ T30] audit: type=1800 audit(1781405597.206:80): pid=19464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3445" name="bus" dev="loop6" ino=19 res=0 errno=0 [ 1348.795050][T11077] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1349.139734][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.342782][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'. [ 1354.427966][T19568] loop6: detected capacity change from 0 to 128 [ 1354.647987][T19572] loop4: detected capacity change from 0 to 128 [ 1354.668869][T19572] ext4: Unknown parameter 'fsmagic' [ 1356.314997][T19592] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 1357.469861][T19604] loop1: detected capacity change from 0 to 512 [ 1357.750007][T19615] blktrace: Concurrent blktraces are not allowed on loop8 [ 1358.280619][T19604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.367873][T19604] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.675039][T19604] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #12: comm syz.1.3487: corrupted xattr block 6: invalid header [ 1358.711224][T19621] loop4: detected capacity change from 0 to 1024 [ 1358.838602][T19621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.983333][T19604] EXT4-fs (loop1): Remounting filesystem read-only [ 1359.258061][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.263466][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.315291][ T6872] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1359.362527][ T6872] Quota error (device loop1): write_blk: dquota write failed [ 1359.398802][ T6872] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1359.740632][T19637] loop6: detected capacity change from 0 to 128 [ 1359.767778][T19637] ext4: Unknown parameter 'fsmagic' [ 1360.850784][T19670] loop6: detected capacity change from 0 to 128 [ 1360.895027][T19670] ext4: Unknown parameter 'fsmagic' [ 1361.007011][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.024304][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.267380][ T30] audit: type=1804 audit(1781405611.446:81): pid=19683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3503" name="/newroot/127/file0" dev="tmpfs" ino=666 res=1 errno=0 [ 1363.458397][T19699] loop0: detected capacity change from 0 to 512 [ 1363.571529][T19707] loop5: detected capacity change from 0 to 128 [ 1363.583336][T19699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.653929][T19699] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.713726][T19711] loop4: detected capacity change from 0 to 128 [ 1363.764146][T19711] ext4: Unknown parameter 'fsmagic' [ 1364.387865][T16203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.594963][T19726] loop6: detected capacity change from 0 to 128 [ 1364.646885][T19726] ext4: Unknown parameter 'fsmagic' [ 1364.905124][ T30] audit: type=1804 audit(1781405614.066:82): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3519" name="/newroot/147/file0" dev="tmpfs" ino=779 res=1 errno=0 [ 1368.066870][T19781] loop5: detected capacity change from 0 to 128 [ 1368.195979][T19781] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1368.330250][T19781] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.578103][T19781] EXT4-fs error (device loop5): dx_make_map:1295: inode #2: block 63: comm syz.5.3532: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1368.660815][T19781] EXT4-fs error (device loop5) in do_split:2027: Corrupt filesystem [ 1368.737522][T19797] loop6: detected capacity change from 0 to 128 [ 1368.775145][T19797] ext4: Unknown parameter 'fsmagic' [ 1368.780506][ T30] audit: type=1804 audit(1781405617.966:83): pid=19799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3535" name="/newroot/149/file0" dev="tmpfs" ino=790 res=1 errno=0 [ 1369.031155][T16194] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1369.768625][T19813] overlayfs: overlapping lowerdir path [ 1370.741251][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3545'. [ 1371.419755][ T30] audit: type=1804 audit(1781405620.606:84): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3549" name="/newroot/128/file0" dev="tmpfs" ino=685 res=1 errno=0 [ 1371.697885][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1371.812183][T19863] syz_tun: entered allmulticast mode [ 1372.615717][T19861] syz_tun: left allmulticast mode [ 1372.884409][T19877] loop1: detected capacity change from 0 to 512 [ 1373.015609][T19877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.112128][T19877] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.986147][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'. [ 1374.174308][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.332957][T19936] netlink: 'syz.5.3570': attribute type 2 has an invalid length. [ 1375.523399][T19940] loop6: detected capacity change from 0 to 1024 [ 1376.442548][ T30] audit: type=1326 audit(1781405625.546:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.572748][ T30] audit: type=1326 audit(1781405625.546:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.677737][ T30] audit: type=1326 audit(1781405625.546:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.811283][ T30] audit: type=1326 audit(1781405625.546:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.817899][ T30] audit: type=1326 audit(1781405625.546:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.817983][ T30] audit: type=1326 audit(1781405625.546:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.818057][ T30] audit: type=1326 audit(1781405625.546:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.818134][ T30] audit: type=1326 audit(1781405625.546:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.818209][ T30] audit: type=1326 audit(1781405625.546:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1376.818287][ T30] audit: type=1326 audit(1781405625.566:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.6.3571" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07db9ce59 code=0x7fc00000 [ 1378.227451][T19980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1380.847283][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1381.668083][T20035] loop3: detected capacity change from 0 to 2048 [ 1381.739872][T20035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.840817][T20043] blktrace: Concurrent blktraces are not allowed on loop8 [ 1382.074521][T20035] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.390750][T20045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3600'. [ 1382.736663][T20036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1382.743227][T20036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1382.804917][T20035] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 1382.876896][T20035] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.3596: Abort forced by user [ 1382.919456][T20036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1382.942286][T20036] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1382.952001][T20035] EXT4-fs (loop3): Remounting filesystem read-only [ 1382.976871][T20035] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1383.051539][T20036] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1383.075724][T20036] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1383.139437][T20036] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1383.160426][T20036] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1383.181554][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.230285][T20036] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1383.364290][T20036] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1383.449944][T20036] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1383.488616][T20036] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1384.026356][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1384.026386][ T30] audit: type=1804 audit(1781405633.216:104): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3604" name="/newroot/143/file0" dev="tmpfs" ino=749 res=1 errno=0 [ 1384.762814][T16197] Bluetooth: hci0: command 0x0406 tx timeout [ 1384.933538][T16197] Bluetooth: hci3: command 0x0406 tx timeout [ 1384.985400][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 1385.122632][T16197] Bluetooth: hci7: command 0x0406 tx timeout [ 1385.162504][T16197] Bluetooth: hci8: command 0x0406 tx timeout [ 1385.242584][T16197] Bluetooth: hci9: command 0x0406 tx timeout [ 1385.483306][T16197] Bluetooth: hci10: command 0x0406 tx timeout [ 1385.587923][T20103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1385.890208][T20112] blktrace: Concurrent blktraces are not allowed on loop10 [ 1386.810197][T20121] netlink: 'syz.5.3620': attribute type 8 has an invalid length. [ 1386.843644][T16197] Bluetooth: hci0: command 0x0406 tx timeout [ 1386.954002][T20126] loop6: detected capacity change from 0 to 8192 [ 1387.005046][T16197] Bluetooth: hci3: command 0x0406 tx timeout [ 1387.162500][T16197] Bluetooth: hci7: command 0x0406 tx timeout [ 1387.272658][T11077] Bluetooth: hci8: command 0x0406 tx timeout [ 1387.322636][T11077] Bluetooth: hci9: command 0x0406 tx timeout [ 1387.563623][T11077] Bluetooth: hci10: command 0x0406 tx timeout [ 1388.786420][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 1389.031566][ T30] audit: type=1804 audit(1781405638.216:105): pid=20169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3627" name="/newroot/141/file0" dev="tmpfs" ino=753 res=1 errno=0 [ 1389.963909][T20182] loop0: detected capacity change from 0 to 512 [ 1389.975146][T20183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1390.053716][T20182] EXT4-fs error (device loop0): ext4_iget_extra_inode:5127: inode #15: comm syz.0.3633: corrupted in-inode xattr: invalid ea_ino [ 1390.087176][T20182] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1390.091178][T20182] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.3633: couldn't read orphan inode 15 (err -117) [ 1390.100520][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1390.100557][ C1] EXT4-fs (loop0): initial error at time 1781405639: ext4_iget_extra_inode:5127: inode 15 [ 1390.100612][ C1] EXT4-fs (loop0): last error at time 1781405639: ext4_iget_extra_inode:5127: inode 15 [ 1390.181190][T20182] loop0: lost filesystem error report for type 5 error -117 [ 1390.195920][T20182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.463975][T16203] EXT4-fs error (device loop0): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1390.568315][T16203] EXT4-fs error (device loop0): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 1390.694814][T16203] EXT4-fs error (device loop0): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 1390.814395][T20204] netlink: 'syz.4.3643': attribute type 1 has an invalid length. [ 1391.163088][T11077] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1391.170023][T16197] Bluetooth: hci1: command 0x1003 tx timeout [ 1391.293252][T16203] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.156372][ T6871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.506634][ T6871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.600235][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 1392.643965][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 1392.734379][ T30] audit: type=1804 audit(1781405641.916:106): pid=20247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3649" name="/newroot/170/file0" dev="tmpfs" ino=898 res=1 errno=0 [ 1392.970089][ T6871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.166791][T20255] loop3: detected capacity change from 0 to 1024 [ 1393.181415][T11077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1393.205999][T11077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1393.215569][T11077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1393.225356][T20255] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1393.236758][T11077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1393.257781][T11077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1393.263619][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3657'. [ 1393.414512][T20255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.490680][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.698089][T20273] loop4: detected capacity change from 0 to 512 [ 1393.732059][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.786445][T20273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1393.926924][T20273] EXT4-fs (loop4): 1 truncate cleaned up [ 1393.965552][T20273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.650941][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.932954][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1394.942236][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1395.209527][ T6871] bridge_slave_1: left allmulticast mode [ 1395.263756][ T6871] bridge_slave_1: left promiscuous mode [ 1395.297469][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.322928][T16197] Bluetooth: hci1: command tx timeout [ 1395.368405][ T6871] bridge_slave_0: left allmulticast mode [ 1395.414068][ T6871] bridge_slave_0: left promiscuous mode [ 1395.444538][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.466542][T20330] Invalid argument reading file caps for ./file0 [ 1395.507510][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1396.039775][T20351] loop6: detected capacity change from 0 to 512 [ 1396.078556][T20351] EXT4-fs: Ignoring removed bh option [ 1396.154316][T20351] EXT4-fs error (device loop6): ext4_iget_extra_inode:5127: inode #15: comm syz.6.3676: corrupted in-inode xattr: e_value size too large [ 1396.224048][T20351] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1396.224635][T20351] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.3676: couldn't read orphan inode 15 (err -117) [ 1396.233987][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1396.234027][ C0] EXT4-fs (loop6): initial error at time 1781405645: ext4_iget_extra_inode:5127: inode 15 [ 1396.234087][ C0] EXT4-fs (loop6): last error at time 1781405645: ext4_iget_extra_inode:5127: inode 15 [ 1396.278347][T20351] loop6: lost filesystem error report for type 5 error -117 [ 1396.355084][T20351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.642720][ T6871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.657474][ T6871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.671072][ T6871] bond0 (unregistering): Released all slaves [ 1396.976094][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.162356][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1397.211473][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1397.392309][T20388] loop5: detected capacity change from 0 to 512 [ 1397.402562][T16197] Bluetooth: hci1: command tx timeout [ 1397.428528][T20388] EXT4-fs: Invalid want_extra_isize 1 [ 1397.607378][T20388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.793578][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3687'. [ 1398.143763][ T6871] hsr_slave_0: left promiscuous mode [ 1398.183217][ T6871] hsr_slave_1: left promiscuous mode [ 1398.224955][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.255933][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.307192][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.338211][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.429968][ T6871] veth1_macvtap: left promiscuous mode [ 1398.452267][ T6871] veth0_macvtap: left promiscuous mode [ 1398.482701][ T6871] veth1_vlan: left promiscuous mode [ 1398.502565][ T6871] veth0_vlan: left promiscuous mode [ 1399.409799][ T6871] team0 (unregistering): Port device team_slave_1 removed [ 1399.459580][ T6871] team0 (unregistering): Port device team_slave_0 removed [ 1399.484131][T16197] Bluetooth: hci1: command tx timeout [ 1399.979030][T20429] loop3: detected capacity change from 0 to 512 [ 1400.007308][T20429] EXT4-fs: Ignoring removed bh option [ 1400.050765][T20429] EXT4-fs error (device loop3): ext4_iget_extra_inode:5127: inode #15: comm syz.3.3693: corrupted in-inode xattr: e_value size too large [ 1400.082751][T20429] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1400.085026][T20429] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.3693: couldn't read orphan inode 15 (err -117) [ 1400.094326][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1400.094361][ C1] EXT4-fs (loop3): initial error at time 1781405649: ext4_iget_extra_inode:5127: inode 15 [ 1400.094417][ C1] EXT4-fs (loop3): last error at time 1781405649: ext4_iget_extra_inode:5127: inode 15 [ 1400.180410][T20429] loop3: lost filesystem error report for type 5 error -117 [ 1400.216085][T20429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.534399][T20439] tipc: Failed to remove unknown binding: 66,0,0/0:333567713/333567714 [ 1400.582245][T20439] tipc: Failed to remove unknown binding: 66,0,0/0:333567713/333567714 [ 1400.662374][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.523111][T16173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1401.562843][T16197] Bluetooth: hci1: command tx timeout [ 1401.680552][T16173] usb 2-1: device descriptor read/64, error -71 [ 1401.788196][T20477] loop5: detected capacity change from 0 to 2048 [ 1401.852741][T20477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.900253][T20477] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.972522][T16173] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1402.143704][T16173] usb 2-1: device descriptor read/64, error -71 [ 1402.246794][T20256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.272266][T20256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.275437][T16173] usb usb2-port1: attempt power cycle [ 1402.310106][T20256] bridge_slave_0: entered allmulticast mode [ 1402.365842][T20256] bridge_slave_0: entered promiscuous mode [ 1402.399439][T20256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.430388][T20256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.443267][T20490] loop4: detected capacity change from 0 to 512 [ 1402.454317][T20256] bridge_slave_1: entered allmulticast mode [ 1402.480469][T20256] bridge_slave_1: entered promiscuous mode [ 1402.486835][T20490] EXT4-fs: Ignoring removed bh option [ 1402.507466][ T5287] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1402.559499][T20490] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.3711: corrupted in-inode xattr: e_value size too large [ 1402.596878][T20490] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.602465][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1402.618172][ C0] EXT4-fs (loop4): initial error at time 1781405651: ext4_iget_extra_inode:5127: inode 15 [ 1402.628188][ C0] EXT4-fs (loop4): last error at time 1781405651: ext4_iget_extra_inode:5127: inode 15 [ 1402.672884][T20490] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3711: couldn't read orphan inode 15 (err -117) [ 1402.687322][T20490] loop4: lost filesystem error report for type 5 error -117 [ 1402.689980][T20490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1402.711195][T16173] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1402.733410][T16173] usb 2-1: device descriptor read/8, error -71 [ 1402.757145][T20510] loop3: detected capacity change from 0 to 128 [ 1402.833648][T20510] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1402.882140][T20256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.933099][T20256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.973590][T16173] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1403.015275][T16173] usb 2-1: device descriptor read/8, error -71 [ 1403.106702][T20256] team0: Port device team_slave_0 added [ 1403.116701][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1403.142215][T20256] team0: Port device team_slave_1 added [ 1403.147258][T16173] usb usb2-port1: unable to enumerate USB device [ 1403.183688][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.290402][ T6874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 1403.306673][ T6874] EXT4-fs (loop5): Remounting filesystem read-only [ 1403.319929][ T6370] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5071: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1403.429641][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.549248][T20256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.574073][T20256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.713793][T20256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.506585][T20529] tipc: Failed to remove unknown binding: 66,0,0/0:4091156141/4091156142 [ 1404.516473][T20529] tipc: Failed to remove unknown binding: 66,0,0/0:4091156141/4091156142 [ 1404.527310][T20256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.543228][T20256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.548600][T20532] tipc: Failed to remove unknown binding: 66,0,0/0:3804889805/3804889807 [ 1404.578085][T20256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.596803][ T6872] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1404.990500][T20256] hsr_slave_0: entered promiscuous mode [ 1405.068545][T20256] hsr_slave_1: entered promiscuous mode [ 1405.125097][T20256] debugfs: 'hsr0' already exists in 'hsr' [ 1405.159488][T20256] Cannot create hsr debugfs directory [ 1405.703496][T20567] loop6: detected capacity change from 0 to 512 [ 1405.797970][T20567] EXT4-fs: Ignoring removed bh option [ 1405.905604][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1406.215135][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1406.529635][T20577] xt_hashlimit: size too large, truncated to 1048576 [ 1406.603485][T20567] EXT4-fs error (device loop6): ext4_iget_extra_inode:5127: inode #15: comm syz.6.3728: corrupted in-inode xattr: e_value size too large [ 1406.653999][T20567] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1406.654910][T20567] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.3728: couldn't read orphan inode 15 (err -117) [ 1406.664181][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1406.664216][ C1] EXT4-fs (loop6): initial error at time 1781405655: ext4_iget_extra_inode:5127: inode 15 [ 1406.664272][ C1] EXT4-fs (loop6): last error at time 1781405655: ext4_iget_extra_inode:5127: inode 15 [ 1406.771519][ T5287] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1406.806548][T20567] loop6: lost filesystem error report for type 5 error -117 [ 1406.829064][T20567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.377850][T20593] netlink: 'syz.4.3740': attribute type 8 has an invalid length. [ 1407.517971][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.089920][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1408.252259][T20617] loop6: detected capacity change from 0 to 512 [ 1408.367103][T20617] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1408.410680][T20617] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1408.488772][T20617] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1408.520100][T20617] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1408.545519][T20617] System zones: 0-2, 18-18, 34-35 [ 1408.650059][T20617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1408.773820][ T30] audit: type=1804 audit(1781405657.956:107): pid=20627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3748" name="/newroot/192/file0" dev="tmpfs" ino=1011 res=1 errno=0 [ 1408.926246][T20625] loop5: detected capacity change from 0 to 2048 [ 1409.002033][ T30] audit: type=1800 audit(1781405658.186:108): pid=20617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3747" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1409.036458][T20625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.128948][T20256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1409.136799][T20625] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.157753][T20256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.180899][T20256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1409.250284][T20256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1409.291665][T20256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1409.327631][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.345747][T20256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1409.413846][ T5287] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1409.465284][T20256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1409.471957][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.591902][T20256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1409.679396][T20640] loop5: detected capacity change from 0 to 256 [ 1409.744348][T20640] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1409.842059][T20640] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1410.187930][T20256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.326309][T20256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.391280][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.398549][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.477858][T20658] loop6: detected capacity change from 0 to 128 [ 1410.500710][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.508061][ T6250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.649168][T20663] syz.6.3757: attempt to access beyond end of device [ 1410.649168][T20663] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1410.761285][T20663] syz.6.3757: attempt to access beyond end of device [ 1410.761285][T20663] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1410.854854][T20663] syz.6.3757: attempt to access beyond end of device [ 1410.854854][T20663] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1410.917879][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1410.964564][T20672] loop1: detected capacity change from 0 to 764 [ 1410.977908][T20663] syz.6.3757: attempt to access beyond end of device [ 1410.977908][T20663] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1411.034054][T20672] rock: directory entry would overflow storage [ 1411.072180][T20672] rock: sig=0x4654, size=5, remaining=4 [ 1411.274133][T20663] syz.6.3757: attempt to access beyond end of device [ 1411.274133][T20663] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1411.359971][T20663] syz.6.3757: attempt to access beyond end of device [ 1411.359971][T20663] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1411.467281][T20681] loop4: detected capacity change from 0 to 2048 [ 1411.531034][T20681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.602350][T20663] syz.6.3757: attempt to access beyond end of device [ 1411.602350][T20663] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1411.633564][T20681] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.681602][T20693] loop1: detected capacity change from 0 to 512 [ 1411.726923][T20663] syz.6.3757: attempt to access beyond end of device [ 1411.726923][T20663] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1411.779879][T20693] EXT4-fs: Invalid want_extra_isize 1 [ 1411.887101][T20693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1411.888186][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.241691][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.276509][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.319013][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.353772][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.381753][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.458801][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.513037][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.535123][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.570298][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 1412.590990][ T6872] kworker/u8:17: attempt to access beyond end of device [ 1412.590990][ T6872] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1412.630687][ T6872] kworker/u8:17: attempt to access beyond end of device [ 1412.630687][ T6872] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1412.661497][ T5287] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1413.099819][ T30] audit: type=1804 audit(1781405662.286:109): pid=20721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3773" name="/newroot/174/file0" dev="tmpfs" ino=911 res=1 errno=0 [ 1414.617350][T20744] loop5: detected capacity change from 0 to 2048 [ 1414.639658][T20256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.880154][T20744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.906727][T20744] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.968476][T20256] veth0_vlan: entered promiscuous mode [ 1415.060684][T20256] veth1_vlan: entered promiscuous mode [ 1415.065737][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.233668][T20256] veth0_macvtap: entered promiscuous mode [ 1415.293647][T20256] veth1_macvtap: entered promiscuous mode [ 1415.410905][T20256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.508384][T20256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.610701][T16172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.640691][T16172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.678661][T16172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.757112][T16172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.244381][ T30] audit: type=1804 audit(1781405665.406:110): pid=20785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3788" name="/newroot/178/file0" dev="tmpfs" ino=933 res=1 errno=0 [ 1416.426795][ T5882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1416.461759][ T5882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.517897][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.573211][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.492972][T20836] loop4: detected capacity change from 0 to 512 [ 1418.521016][ T30] audit: type=1804 audit(1781405667.706:111): pid=20837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3803" name="/newroot/176/file0" dev="tmpfs" ino=934 res=1 errno=0 [ 1418.621772][T20836] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3800: iget: bad i_size value: 38620345925642 [ 1418.732929][T20836] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1418.734079][T20836] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3800: couldn't read orphan inode 15 (err -117) [ 1418.743354][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1418.743388][ C0] EXT4-fs (loop4): initial error at time 1781405667: ext4_orphan_get:1397: inode 15 [ 1418.743441][ C0] EXT4-fs (loop4): last error at time 1781405667: ext4_orphan_get:1397: inode 15 [ 1418.884034][T20836] loop4: lost filesystem error report for type 5 error -117 [ 1418.891544][T20836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.272568][T20841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1419.396990][T16172] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 548 with error 28 [ 1419.471471][T16172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1419.471471][T16172] [ 1419.553204][T16172] EXT4-fs (loop4): Total free blocks count 0 [ 1419.591146][T16172] EXT4-fs (loop4): Free/Dirty block details [ 1419.624005][T16172] EXT4-fs (loop4): free_blocks=0 [ 1419.653838][T16172] EXT4-fs (loop4): dirty_blocks=548 [ 1419.680236][T16172] EXT4-fs (loop4): Block reservation details [ 1419.716780][T16172] EXT4-fs (loop4): i_reserved_data_blocks=548 [ 1420.081599][T16190] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1420.143615][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.650846][T20889] __nla_validate_parse: 47 callbacks suppressed [ 1420.650899][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3816'. [ 1422.098357][T20891] lo: entered allmulticast mode [ 1422.445721][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.452337][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.169045][T20942] syzkaller0: entered promiscuous mode [ 1423.215137][T20942] syzkaller0: entered allmulticast mode [ 1425.225926][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1425.829788][T20987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.838107][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.416537][T20987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.445646][T20987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.940775][T20991] geneve2: entered promiscuous mode [ 1427.011709][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1427.029362][T16172] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.052774][T16172] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 34452 - 0 [ 1427.064331][T16172] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.086979][T16172] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 34452 - 0 [ 1427.127126][T16172] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.175055][T16172] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 34452 - 0 [ 1427.226922][T16172] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.271111][T16172] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 34452 - 0 [ 1427.411862][T21019] loop1: detected capacity change from 0 to 512 [ 1427.450790][T21019] EXT4-fs: Invalid want_extra_isize 1 [ 1427.556329][T21019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.082182][T21052] loop6: detected capacity change from 0 to 128 [ 1429.101877][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1429.334267][ T30] audit: type=1804 audit(1781405678.516:112): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3868" name="/newroot/182/file0/bus" dev="loop6" ino=1048755 res=1 errno=0 [ 1430.217159][T21085] loop1: detected capacity change from 0 to 512 [ 1430.260767][T21085] EXT4-fs: Invalid want_extra_isize 1 [ 1430.343344][T21085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.586273][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1432.420261][T21128] loop1: detected capacity change from 0 to 512 [ 1432.471928][T21128] EXT4-fs: Invalid want_extra_isize 1 [ 1432.562367][T21128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.641379][T21135] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1432.641379][T21135] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1433.630993][T21155] loop2: detected capacity change from 0 to 128 [ 1433.909885][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1435.316833][T21155] bio_check_eod: 21 callbacks suppressed [ 1435.316860][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.316860][T21155] loop2: rw=2049, sector=145, nr_sectors = 304 limit=128 [ 1435.392950][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.392950][T21155] loop2: rw=2049, sector=457, nr_sectors = 8 limit=128 [ 1435.476443][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.476443][T21155] loop2: rw=2049, sector=473, nr_sectors = 8 limit=128 [ 1435.532729][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.532729][T21155] loop2: rw=2049, sector=489, nr_sectors = 8 limit=128 [ 1435.647793][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.647793][T21155] loop2: rw=2049, sector=505, nr_sectors = 8 limit=128 [ 1435.774344][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.774344][T21155] loop2: rw=2049, sector=521, nr_sectors = 8 limit=128 [ 1435.968728][T21155] syz.2.3900: attempt to access beyond end of device [ 1435.968728][T21155] loop2: rw=2049, sector=537, nr_sectors = 16 limit=128 [ 1436.080513][T21167] syz.2.3900: attempt to access beyond end of device [ 1436.080513][T21167] loop2: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 1436.298825][T21155] syz.2.3900: attempt to access beyond end of device [ 1436.298825][T21155] loop2: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 1436.300677][T21180] syz.2.3900: attempt to access beyond end of device [ 1436.300677][T21180] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 1436.474558][T21167] Buffer I/O error on dev loop2, logical block 145, async page read [ 1436.494303][T21167] Buffer I/O error on dev loop2, logical block 146, async page read [ 1436.516310][T21167] Buffer I/O error on dev loop2, logical block 147, async page read [ 1436.586870][T21167] Buffer I/O error on dev loop2, logical block 148, async page read [ 1436.645873][T21167] Buffer I/O error on dev loop2, logical block 149, async page read [ 1436.690759][T21167] Buffer I/O error on dev loop2, logical block 150, async page read [ 1436.759276][T21167] Buffer I/O error on dev loop2, logical block 151, async page read [ 1436.802157][T21167] Buffer I/O error on dev loop2, logical block 152, async page read [ 1436.854552][T21197] loop6: detected capacity change from 0 to 256 [ 1436.947323][T21199] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1436.984606][T21197] FAT-fs (loop6): Directory bread(block 64) failed [ 1437.020894][T21197] FAT-fs (loop6): Directory bread(block 65) failed [ 1437.041899][T21199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1437.066912][T21197] FAT-fs (loop6): Directory bread(block 66) failed [ 1437.102935][T21197] FAT-fs (loop6): Directory bread(block 67) failed [ 1437.136832][T21197] FAT-fs (loop6): Directory bread(block 68) failed [ 1437.164603][T21197] FAT-fs (loop6): Directory bread(block 69) failed [ 1437.197797][T21197] FAT-fs (loop6): Directory bread(block 70) failed [ 1437.226371][T21197] FAT-fs (loop6): Directory bread(block 71) failed [ 1437.255135][T21197] FAT-fs (loop6): Directory bread(block 72) failed [ 1437.283930][T21197] FAT-fs (loop6): Directory bread(block 73) failed [ 1439.248575][T21221] capability: warning: `syz.4.3917' uses 32-bit capabilities (legacy support in use) [ 1440.011704][T21236] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1440.072144][T21237] IPVS: stopping master sync thread 21236 ... [ 1442.711032][T21292] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1443.588618][T21304] loop5: detected capacity change from 0 to 128 [ 1443.736807][T21309] bio_check_eod: 9 callbacks suppressed [ 1443.736832][T21309] syz.5.3940: attempt to access beyond end of device [ 1443.736832][T21309] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1443.940670][T21309] syz.5.3940: attempt to access beyond end of device [ 1443.940670][T21309] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1444.090007][T21316] loop3: detected capacity change from 0 to 512 [ 1444.108668][T21309] syz.5.3940: attempt to access beyond end of device [ 1444.108668][T21309] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1444.118565][T21316] EXT4-fs: Ignoring removed i_version option [ 1444.179625][T21316] EXT4-fs: Ignoring removed nobh option [ 1444.229010][T21316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1444.252757][T21309] syz.5.3940: attempt to access beyond end of device [ 1444.252757][T21309] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1444.323417][T21309] syz.5.3940: attempt to access beyond end of device [ 1444.323417][T21309] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1444.360260][T21316] EXT4-fs (loop3): 1 truncate cleaned up [ 1444.425865][T21316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1444.467748][T21309] syz.5.3940: attempt to access beyond end of device [ 1444.467748][T21309] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1444.491002][T21309] syz.5.3940: attempt to access beyond end of device [ 1444.491002][T21309] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1444.657912][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.788042][ T47] kworker/u8:3: attempt to access beyond end of device [ 1444.788042][ T47] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1444.855898][ T47] kworker/u8:3: attempt to access beyond end of device [ 1444.855898][ T47] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1444.936542][ T47] kworker/u8:3: attempt to access beyond end of device [ 1444.936542][ T47] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1445.362285][T21312] mmap: syz.6.3942 (21312) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1447.287965][T21387] loop1: detected capacity change from 0 to 512 [ 1450.831338][T21447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.839220][T21447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.886476][T21453] loop6: detected capacity change from 0 to 2048 [ 1451.030666][T21453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.221633][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.439415][T21447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.503439][T21447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.610173][T21470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3979'. [ 1452.474903][T21449] geneve2: entered promiscuous mode [ 1452.504911][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1454.638473][T21516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1455.890752][T21525] loop5: detected capacity change from 0 to 256 [ 1456.114817][T21525] FAT-fs (loop5): Directory bread(block 64) failed [ 1456.166780][T21525] FAT-fs (loop5): Directory bread(block 65) failed [ 1456.215031][T21525] FAT-fs (loop5): Directory bread(block 66) failed [ 1456.261669][T21525] FAT-fs (loop5): Directory bread(block 67) failed [ 1456.317769][T21525] FAT-fs (loop5): Directory bread(block 68) failed [ 1456.360877][T21525] FAT-fs (loop5): Directory bread(block 69) failed [ 1456.406957][T21525] FAT-fs (loop5): Directory bread(block 70) failed [ 1456.456485][T21525] FAT-fs (loop5): Directory bread(block 71) failed [ 1456.491505][T21525] FAT-fs (loop5): Directory bread(block 72) failed [ 1456.531573][T21525] FAT-fs (loop5): Directory bread(block 73) failed [ 1457.246642][T21552] loop4: detected capacity change from 0 to 1024 [ 1457.297187][T21552] EXT4-fs: Ignoring removed orlov option [ 1457.363660][T21552] EXT4-fs: Ignoring removed oldalloc option [ 1457.428028][T21552] EXT4-fs: Ignoring removed orlov option [ 1457.498068][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1457.550731][T21552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1457.656665][T21552] System zones: 0-1, 3-12 [ 1457.719985][T21552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.022704][T21572] loop5: detected capacity change from 0 to 128 [ 1458.284968][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.532515][T21577] loop6: detected capacity change from 0 to 256 [ 1458.597629][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1458.672066][T21577] FAT-fs (loop6): Filesystem has been set read-only [ 1458.712771][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1458.768771][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1458.841066][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1458.914296][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1458.949715][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1459.011164][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1459.055022][T21577] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 1459.141263][ T30] audit: type=1800 audit(1781405708.326:113): pid=21577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4013" name="file2" dev="loop6" ino=1048761 res=0 errno=0 [ 1460.791528][T21621] loop3: detected capacity change from 0 to 512 [ 1460.880132][T21621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1460.970665][T21621] EXT4-fs (loop3): 1 truncate cleaned up [ 1460.990932][T21621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.997602][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4026'. [ 1461.024865][T21629] loop6: detected capacity change from 0 to 128 [ 1461.377443][T21639] loop4: detected capacity change from 0 to 512 [ 1461.452552][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.287943][ T30] audit: type=1804 audit(1781405711.476:114): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4039" name="/newroot/240/file0" dev="tmpfs" ino=1268 res=1 errno=0 [ 1462.994895][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4043'. [ 1464.006512][T21680] program syz.5.4044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.575892][T21692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1464.641143][T21694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1465.659255][T21704] loop2: detected capacity change from 0 to 512 [ 1465.747573][T21704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1465.848378][T21704] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1467.189633][ T30] audit: type=1804 audit(1781405716.376:115): pid=21734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4056" name="/newroot/229/file0" dev="tmpfs" ino=1196 res=1 errno=0 [ 1468.290248][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1468.354981][T21753] loop1: detected capacity change from 0 to 512 [ 1468.418472][T21753] EXT4-fs: Invalid want_extra_isize 1 [ 1468.580909][T21753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.640841][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.334901][T21764] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4066'. [ 1469.424506][T21767] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4066'. [ 1469.967834][T21779] loop6: detected capacity change from 0 to 512 [ 1470.032049][T21779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1470.829225][T21779] EXT4-fs error (device loop6): ext4_iget_extra_inode:5127: inode #15: comm syz.6.4070: corrupted in-inode xattr: invalid ea_ino [ 1470.920674][T21779] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1470.922131][T21779] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.4070: couldn't read orphan inode 15 (err -117) [ 1470.931441][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1470.931472][ C1] EXT4-fs (loop6): initial error at time 1781405720: ext4_iget_extra_inode:5127: inode 15 [ 1470.931526][ C1] EXT4-fs (loop6): last error at time 1781405720: ext4_iget_extra_inode:5127: inode 15 [ 1471.012611][T21779] loop6: lost filesystem error report for type 5 error -117 [ 1471.032295][T21779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.119691][T21799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1471.959503][ T30] audit: type=1804 audit(1781405721.136:116): pid=21806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4074" name="/newroot/231/file0" dev="tmpfs" ino=1207 res=1 errno=0 [ 1472.355422][T21815] loop2: detected capacity change from 0 to 512 [ 1472.497034][T21815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1472.622704][T21815] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1472.729547][T21829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1472.818327][T21831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1473.063278][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1473.259573][T21840] loop3: detected capacity change from 0 to 128 [ 1473.299110][T21840] ext4: Unknown parameter 'fsmagic' [ 1473.307082][T21842] loop1: detected capacity change from 0 to 512 [ 1473.386105][T21842] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.4088: lblock 0 mapped to illegal pblock 3 (length 1) [ 1473.416496][T21842] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1473.422979][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1473.438635][ C1] EXT4-fs (loop1): initial error at time 1781405722: ext4_map_blocks:791: inode 2: block 3 [ 1473.448771][ C1] EXT4-fs (loop1): last error at time 1781405722: ext4_map_blocks:791: inode 2: block 3 [ 1473.625467][T21842] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.4088: error -117 reading directory block [ 1473.763913][T21842] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1473.830504][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1473.858728][T21842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1473.924503][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.716980][ T30] audit: type=1804 audit(1781405723.906:117): pid=21878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4095" name="/newroot/263/file0" dev="tmpfs" ino=1386 res=1 errno=0 [ 1475.118011][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.286520][T21889] loop2: detected capacity change from 0 to 512 [ 1475.336178][T21889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1475.397057][T21892] loop6: detected capacity change from 0 to 512 [ 1475.419637][T21889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1475.493536][T21892] EXT4-fs (loop6): invalid journal inode [ 1475.524072][T21898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1475.533469][T21889] System zones: 1-12 [ 1475.540482][T21892] EXT4-fs (loop6): can't get journal size [ 1475.555411][T21889] EXT4-fs (loop2): 1 truncate cleaned up [ 1475.597965][T21901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1475.616278][T21892] EXT4-fs (loop6): 1 truncate cleaned up [ 1475.619003][T21889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.645679][T21892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.669101][T21902] syz_tun: entered allmulticast mode [ 1475.690184][T21899] syz_tun: left allmulticast mode [ 1476.130364][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.190872][T21909] loop5: detected capacity change from 0 to 512 [ 1476.239035][T21909] EXT4-fs: Invalid want_extra_isize 1 [ 1476.253518][T16209] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1476.305129][T16209] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1476.319323][T21909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.673218][T16209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.132623][ T5756] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1478.147229][ T5756] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1478.182518][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.192222][ T5756] usb 2-1: Product: syz [ 1478.200420][ T5756] usb 2-1: Manufacturer: syz [ 1478.216070][ T5756] usb 2-1: SerialNumber: syz [ 1478.233405][ T5756] usb 2-1: config 0 descriptor?? [ 1478.263402][ T5756] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1478.448081][T21945] loop5: detected capacity change from 0 to 128 [ 1478.450383][T21946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1478.486912][T21945] ext4: Unknown parameter 'fsmagic' [ 1478.545422][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1478.691517][ T30] audit: type=1804 audit(1781405727.876:118): pid=21950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4114" name="/newroot/266/file0" dev="tmpfs" ino=1403 res=1 errno=0 [ 1478.788317][ T5756] gspca_sunplus: reg_r err -110 [ 1479.747549][T11077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1479.772302][T11077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1479.788437][T11077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1479.805144][T11077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1479.815914][T11077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1480.134477][T21975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1480.555616][T21980] loop4: detected capacity change from 0 to 128 [ 1480.579384][T21980] ext4: Unknown parameter 'fsmagic' [ 1480.707836][ T24] usb 2-1: USB disconnect, device number 6 [ 1481.870424][T21970] syz.5.4122 (21970) used greatest stack depth: 19720 bytes left [ 1481.890159][T11077] Bluetooth: hci2: command tx timeout [ 1482.060567][T22002] loop1: detected capacity change from 0 to 128 [ 1482.108386][T22002] ext4: Unknown parameter 'fsmagic' [ 1483.054366][T22021] syzkaller0: entered promiscuous mode [ 1483.092365][T22021] syzkaller0: entered allmulticast mode [ 1483.550205][T22035] loop1: detected capacity change from 0 to 512 [ 1483.633750][T22040] loop5: detected capacity change from 0 to 128 [ 1483.679283][T22040] ext4: Unknown parameter 'fsmagic' [ 1483.712534][T22035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.752888][T22035] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.962580][T11077] Bluetooth: hci2: command tx timeout [ 1483.972357][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.982852][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.838762][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.041497][T22063] loop3: detected capacity change from 0 to 128 [ 1485.070283][T22064] loop5: detected capacity change from 0 to 256 [ 1485.317343][T22064] FAT-fs (loop5): Directory bread(block 64) failed [ 1485.364372][T22064] FAT-fs (loop5): Directory bread(block 65) failed [ 1485.376844][T22074] bio_check_eod: 36 callbacks suppressed [ 1485.376871][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.376871][T22074] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1485.443964][T22064] FAT-fs (loop5): Directory bread(block 66) failed [ 1485.467329][T22064] FAT-fs (loop5): Directory bread(block 67) failed [ 1485.517477][T22064] FAT-fs (loop5): Directory bread(block 68) failed [ 1485.553481][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.553481][T22074] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1485.568720][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.568720][T22074] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1485.583948][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.583948][T22074] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1485.588117][T22064] FAT-fs (loop5): Directory bread(block 69) failed [ 1485.598617][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.598617][T22074] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1485.637961][T22064] FAT-fs (loop5): Directory bread(block 70) failed [ 1485.682906][T22064] FAT-fs (loop5): Directory bread(block 71) failed [ 1485.719637][T22074] syz.3.4144: attempt to access beyond end of device [ 1485.719637][T22074] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1485.774032][T22064] FAT-fs (loop5): Directory bread(block 72) failed [ 1485.829135][T22064] FAT-fs (loop5): Directory bread(block 73) failed [ 1486.043796][T11077] Bluetooth: hci2: command tx timeout [ 1486.093262][T22085] loop4: detected capacity change from 0 to 128 [ 1486.103743][T22085] ext4: Unknown parameter 'fsmagic' [ 1486.159498][T11594] kworker/u8:22: attempt to access beyond end of device [ 1486.159498][T11594] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1486.247593][T11594] kworker/u8:22: attempt to access beyond end of device [ 1486.247593][T11594] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1486.462884][T11594] kworker/u8:22: attempt to access beyond end of device [ 1486.462884][T11594] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1486.490291][T11594] kworker/u8:22: attempt to access beyond end of device [ 1486.490291][T11594] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1487.824280][T22106] loop5: detected capacity change from 0 to 128 [ 1487.851567][T22106] ext4: Unknown parameter 'fsmagic' [ 1487.998280][T22104] pimreg: entered allmulticast mode [ 1488.129806][T11077] Bluetooth: hci2: command tx timeout [ 1488.473291][T22110] pimreg: left allmulticast mode [ 1489.456066][T22112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.462835][T22131] loop5: detected capacity change from 0 to 128 [ 1489.478787][T22112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.517787][T22131] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1489.577276][T22131] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.076052][T16194] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1490.086913][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.105021][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.144560][ T6874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.158482][T22145] program syz.1.4160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.206138][T21961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.248156][T21961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.277674][T21961] bridge_slave_0: entered allmulticast mode [ 1490.316361][T21961] bridge_slave_0: entered promiscuous mode [ 1490.357425][ T6874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.396896][T21961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.430943][T21961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.460158][T21961] bridge_slave_1: entered allmulticast mode [ 1490.493560][T21961] bridge_slave_1: entered promiscuous mode [ 1490.559647][T22156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1490.575878][T22154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1490.657319][T21961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.681528][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1490.687304][T21961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.722083][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1490.785064][T22163] netlink: 'syz.1.4164': attribute type 10 has an invalid length. [ 1490.918812][T22154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1491.091256][T22161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.148999][ T30] audit: type=1326 audit(1781405740.336:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.2.4172" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc759ce59 code=0x0 [ 1491.187767][T22161] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1491.218220][T22178] xt_hashlimit: size too large, truncated to 1048576 [ 1491.307345][T22163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1491.491754][T22182] bridge_slave_0 (unregistering): left allmulticast mode [ 1491.563868][T22192] program syz.5.4175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.586209][T22182] bridge_slave_0 (unregistering): left promiscuous mode [ 1491.666247][T22182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.937415][T21961] team0: Port device team_slave_0 added [ 1491.991319][T21961] team0: Port device team_slave_1 added [ 1492.054067][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1492.184033][T22212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1492.428578][T21961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.467518][T21961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.607664][T21961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.679059][T21961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.723839][T21961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.791000][T22225] loop3: detected capacity change from 0 to 512 [ 1492.825138][T22225] EXT4-fs: Ignoring removed bh option [ 1492.835699][T21961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.888217][T22225] EXT4-fs error (device loop3): ext4_iget_extra_inode:5127: inode #15: comm syz.3.4183: corrupted in-inode xattr: e_value size too large [ 1492.970016][T22225] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1492.971567][T22225] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.4183: couldn't read orphan inode 15 (err -117) [ 1492.980947][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1492.981001][ C1] EXT4-fs (loop3): initial error at time 1781405742: ext4_iget_extra_inode:5127: inode 15 [ 1492.981063][ C1] EXT4-fs (loop3): last error at time 1781405742: ext4_iget_extra_inode:5127: inode 15 [ 1493.064599][T22225] loop3: lost filesystem error report for type 5 error -117 [ 1493.073364][T22225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1493.314490][T21961] hsr_slave_0: entered promiscuous mode [ 1493.399152][T21961] hsr_slave_1: entered promiscuous mode [ 1493.488734][T21961] debugfs: 'hsr0' already exists in 'hsr' [ 1493.505329][T21961] Cannot create hsr debugfs directory [ 1493.520205][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.437276][T22245] loop1: detected capacity change from 0 to 1024 [ 1494.446029][T22245] EXT4-fs: Ignoring removed orlov option [ 1494.978614][T22245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.513357][T22248] program syz.4.4189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1495.765465][T22254] loop3: detected capacity change from 0 to 128 [ 1495.839313][T22254] ext4: Unknown parameter 'fsmagic' [ 1496.528686][T22258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4192'. [ 1496.861634][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.123930][T22270] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4196'. [ 1497.180560][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4196'. [ 1498.303931][T22310] loop1: detected capacity change from 0 to 512 [ 1498.354306][T22310] EXT4-fs: Ignoring removed bh option [ 1498.397266][T22310] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.4202: corrupted in-inode xattr: e_value size too large [ 1498.413081][T22310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1498.417795][T22310] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.4202: couldn't read orphan inode 15 (err -117) [ 1498.427071][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1498.427111][ C1] EXT4-fs (loop1): initial error at time 1781405747: ext4_iget_extra_inode:5127: inode 15 [ 1498.427173][ C1] EXT4-fs (loop1): last error at time 1781405747: ext4_iget_extra_inode:5127: inode 15 [ 1498.470482][T22310] loop1: lost filesystem error report for type 5 error -117 [ 1498.489980][T22310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.707148][T22317] program syz.5.4204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1498.819969][T22321] loop3: detected capacity change from 0 to 512 [ 1498.873716][T22321] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.4206: lblock 0 mapped to illegal pblock 3 (length 1) [ 1498.954102][T22321] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1498.962498][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1498.978263][ C1] EXT4-fs (loop3): initial error at time 1781405748: ext4_map_blocks:791: inode 2: block 3 [ 1498.988349][ C1] EXT4-fs (loop3): last error at time 1781405748: ext4_map_blocks:791: inode 2: block 3 [ 1499.008731][T22321] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.4206: error -117 reading directory block [ 1499.026227][T22321] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1499.045042][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.068562][T22321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.152208][ T764] Bluetooth: hci4: Frame reassembly failed (-84) [ 1499.224358][T22329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1499.385513][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.423801][T22333] loop1: detected capacity change from 0 to 128 [ 1499.455296][T22333] ext4: Unknown parameter 'fsmagic' [ 1501.051898][T22355] loop1: detected capacity change from 0 to 4096 [ 1501.163409][T11077] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1501.249142][T22355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.832096][T22382] loop3: detected capacity change from 0 to 512 [ 1501.880548][T22382] EXT4-fs: Ignoring removed bh option [ 1501.928045][T22382] EXT4-fs error (device loop3): ext4_iget_extra_inode:5127: inode #15: comm syz.3.4218: corrupted in-inode xattr: e_value size too large [ 1501.996860][T22382] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1502.000888][T22382] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.4218: couldn't read orphan inode 15 (err -117) [ 1502.010393][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1502.010430][ C1] EXT4-fs (loop3): initial error at time 1781405751: ext4_iget_extra_inode:5127: inode 15 [ 1502.010487][ C1] EXT4-fs (loop3): last error at time 1781405751: ext4_iget_extra_inode:5127: inode 15 [ 1502.060168][T21961] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1502.068117][T22382] loop3: lost filesystem error report for type 5 error -117 [ 1502.071449][T22382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.118188][T21961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1502.156027][T21961] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1502.216473][T21961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.259532][T21961] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1502.314258][T21961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1502.377618][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.399872][T21961] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1502.459605][T21961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.723988][T22401] loop5: detected capacity change from 0 to 512 [ 1502.793648][T22401] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.4221: lblock 0 mapped to illegal pblock 3 (length 1) [ 1502.931571][T22401] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1502.935791][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1502.951591][ C0] EXT4-fs (loop5): initial error at time 1781405752: ext4_map_blocks:791: inode 2: block 3 [ 1502.961890][ C0] EXT4-fs (loop5): last error at time 1781405752: ext4_map_blocks:791: inode 2: block 3 [ 1502.987584][T22401] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.4221: error -117 reading directory block [ 1503.002941][T22401] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1503.048089][T22401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1503.281550][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.476637][T21961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.488364][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.610438][T21961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.675711][T22409] loop3: detected capacity change from 0 to 1024 [ 1503.727644][T22409] EXT4-fs: Ignoring removed bh option [ 1503.738407][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.745660][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.801940][T22409] EXT4-fs: Ignoring removed oldalloc option [ 1503.850159][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.857491][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.918854][T22409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1504.189926][T21961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1504.261084][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.977337][T22450] loop5: detected capacity change from 0 to 512 [ 1505.050795][T22450] EXT4-fs: Ignoring removed bh option [ 1505.773557][T22450] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.4231: corrupted in-inode xattr: e_value size too large [ 1505.999032][T22450] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1506.001222][T22450] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.4231: couldn't read orphan inode 15 (err -117) [ 1506.010552][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1506.010590][ C1] EXT4-fs (loop5): initial error at time 1781405755: ext4_iget_extra_inode:5127: inode 15 [ 1506.010646][ C1] EXT4-fs (loop5): last error at time 1781405755: ext4_iget_extra_inode:5127: inode 15 [ 1506.331221][T22462] loop3: detected capacity change from 0 to 512 [ 1506.492819][T22462] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.4233: lblock 0 mapped to illegal pblock 3 (length 1) [ 1506.549384][T22450] loop5: lost filesystem error report for type 5 error -117 [ 1506.565005][T22450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.642908][T22462] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1506.655391][T22462] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.4233: error -117 reading directory block [ 1506.664615][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1506.664653][ C1] EXT4-fs (loop3): initial error at time 1781405755: ext4_map_blocks:791: inode 2: block 3 [ 1506.664730][ C1] EXT4-fs (loop3): last error at time 1781405755: ext4_map_blocks:791: inode 2: block 3 [ 1506.779282][T22468] loop2: detected capacity change from 0 to 512 [ 1507.059303][T22462] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1507.059847][T22468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.143397][T22468] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.159868][T22462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.329159][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.628647][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1507.698005][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.708506][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.796544][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 1507.947515][ T30] audit: type=1804 audit(1781405757.136:120): pid=22488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4237" name="/newroot/286/file0" dev="tmpfs" ino=1511 res=1 errno=0 [ 1509.132268][T21961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.667806][T22539] loop1: detected capacity change from 0 to 512 [ 1509.719552][T22539] EXT4-fs: Ignoring removed bh option [ 1509.794844][T22539] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.4248: corrupted in-inode xattr: e_value size too large [ 1509.806156][T11077] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1509.809081][T16197] Bluetooth: hci4: command 0x1003 tx timeout [ 1509.891194][T22539] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1509.892456][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1509.908156][ C0] EXT4-fs (loop1): initial error at time 1781405759: ext4_iget_extra_inode:5127: inode 15 [ 1509.918863][ C0] EXT4-fs (loop1): last error at time 1781405759: ext4_iget_extra_inode:5127: inode 15 [ 1509.937353][T22539] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.4248: couldn't read orphan inode 15 (err -117) [ 1509.987961][T22547] loop3: detected capacity change from 0 to 512 [ 1510.041465][T22539] loop1: lost filesystem error report for type 5 error -117 [ 1510.080485][ T30] audit: type=1804 audit(1781405759.266:121): pid=22552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4252" name="/newroot/289/file0" dev="tmpfs" ino=1527 res=1 errno=0 [ 1510.084315][T22539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1510.153551][T22547] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4251: inode has both inline data and extents flags [ 1510.235445][T22547] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1510.235881][T22547] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.4251: couldn't read orphan inode 15 (err -117) [ 1510.245153][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1510.245188][ C1] EXT4-fs (loop3): initial error at time 1781405759: ext4_orphan_get:1397: inode 15 [ 1510.245252][ C1] EXT4-fs (loop3): last error at time 1781405759: ext4_orphan_get:1397: inode 15 [ 1510.345820][T22547] loop3: lost filesystem error report for type 5 error -117 [ 1510.370019][T22547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.609656][T16188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.752006][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.185893][T21961] veth0_vlan: entered promiscuous mode [ 1511.260080][T21961] veth1_vlan: entered promiscuous mode [ 1511.379357][T22582] netlink: 'syz.5.4262': attribute type 8 has an invalid length. [ 1511.601113][T21961] veth0_macvtap: entered promiscuous mode [ 1511.648969][T21961] veth1_macvtap: entered promiscuous mode [ 1511.825208][T21961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.944222][T21961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.049408][ T5882] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.096756][ T5882] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.170403][ T5882] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.214551][ T5882] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.479934][T22609] loop5: detected capacity change from 0 to 512 [ 1512.568343][T22609] EXT4-fs: Ignoring removed bh option [ 1512.672180][T22609] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.4267: corrupted in-inode xattr: e_value size too large [ 1512.703413][T22609] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1512.707351][T22609] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.4267: couldn't read orphan inode 15 (err -117) [ 1512.716631][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1512.716670][ C0] EXT4-fs (loop5): initial error at time 1781405761: ext4_iget_extra_inode:5127: inode 15 [ 1512.716729][ C0] EXT4-fs (loop5): last error at time 1781405761: ext4_iget_extra_inode:5127: inode 15 [ 1512.807807][T22609] loop5: lost filesystem error report for type 5 error -117 [ 1512.826700][T22609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1513.031900][T22616] loop2: detected capacity change from 0 to 512 [ 1513.068155][T22616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1513.099622][T16172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.100488][T22618] loop4: detected capacity change from 0 to 128 [ 1513.134909][T16172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.151548][T22616] EXT4-fs (loop2): 1 truncate cleaned up [ 1513.293576][T22616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1513.356415][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.399615][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.429397][T22618] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1513.459392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.479674][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1513.508735][T22618] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.802228][T16190] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1513.854959][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.003858][T22642] loop1: detected capacity change from 0 to 128 [ 1514.073634][ T30] audit: type=1804 audit(1781405763.266:122): pid=22642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4274" name="/newroot/275/file0/bus" dev="loop1" ino=1048770 res=1 errno=0 [ 1515.223626][T22669] loop4: detected capacity change from 0 to 512 [ 1515.266127][T22669] EXT4-fs: Ignoring removed bh option [ 1515.377570][T22669] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.4283: corrupted in-inode xattr: e_value size too large [ 1515.507443][T22669] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1515.511219][T22669] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.4283: couldn't read orphan inode 15 (err -117) [ 1515.520524][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1515.520557][ C1] EXT4-fs (loop4): initial error at time 1781405764: ext4_iget_extra_inode:5127: inode 15 [ 1515.520612][ C1] EXT4-fs (loop4): last error at time 1781405764: ext4_iget_extra_inode:5127: inode 15 [ 1515.597463][T22669] loop4: lost filesystem error report for type 5 error -117 [ 1515.782549][T22669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1515.791105][T22678] loop7: detected capacity change from 0 to 1024 [ 1515.848545][T22678] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1515.951215][T22678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.077441][T22685] ieee802154 phy0 wpan0: encryption failed: -22 [ 1516.086072][T16190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.485774][T21961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.549577][T22706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4291'. [ 1516.628615][T22708] netlink: 'syz.1.4292': attribute type 8 has an invalid length. [ 1516.682927][T16197] Bluetooth: hci1: command 0x0406 tx timeout [ 1518.195287][T22721] x_tables: duplicate underflow at hook 2 [ 1518.667461][T22725] loop7: detected capacity change from 0 to 512 [ 1518.749468][T22725] EXT4-fs: Invalid want_extra_isize 1 [ 1518.902935][T22730] loop3: detected capacity change from 0 to 1024 [ 1518.926286][T22729] netlink: 'syz.1.4296': attribute type 10 has an invalid length. [ 1518.987009][T22729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.060100][T22730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.076828][T22725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.192226][T22730] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.246179][T22729] bond0: (slave team0): Enslaving as an active interface with an up link [ 1519.587397][T22730] xt_hashlimit: size too large, truncated to 1048576 [ 1520.916145][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4307'. [ 1521.019717][T22770] syzkaller0: entered promiscuous mode [ 1521.054909][T22770] syzkaller0: entered allmulticast mode [ 1521.320874][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1521.765821][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1521.919436][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1522.481594][T22813] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4316'. [ 1523.216202][T22828] loop1: detected capacity change from 0 to 128 [ 1523.247204][T22828] ext4: Unknown parameter 'fsmagic' [ 1524.207108][T22843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4325'. [ 1524.252560][T22846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1524.306196][ T30] audit: type=1804 audit(1781405773.366:123): pid=22842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4324" name="/newroot/296/file0" dev="tmpfs" ino=1561 res=1 errno=0 [ 1525.383415][T22857] loop1: detected capacity change from 0 to 256 [ 1525.959925][T22868] syzkaller0: entered promiscuous mode [ 1525.980303][T22868] syzkaller0: entered allmulticast mode [ 1526.080248][T22880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1528.022107][ T30] audit: type=1804 audit(1781405777.206:124): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4345" name="/newroot/11/file0" dev="tmpfs" ino=77 res=1 errno=0 [ 1529.317089][T22929] usb usb8: usbfs: process 22929 (syz.4.4353) did not claim interface 0 before use [ 1530.509296][T22948] xt_hashlimit: size too large, truncated to 1048576 [ 1531.467989][ T30] audit: type=1804 audit(1781405780.656:125): pid=22969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4367" name="/newroot/312/file0" dev="tmpfs" ino=1646 res=1 errno=0 [ 1531.508090][T22970] loop4: detected capacity change from 0 to 128 [ 1531.953685][T22964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34452 - 0 [ 1532.120176][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1532.207306][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1532.572278][T22999] fido_id[22999]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1532.726123][T23006] loop5: detected capacity change from 0 to 512 [ 1532.763551][T23006] EXT4-fs: Ignoring removed bh option [ 1532.792892][T23006] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.4377: corrupted in-inode xattr: e_value size too large [ 1532.810097][T23006] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1532.812033][T23006] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.4377: couldn't read orphan inode 15 (err -117) [ 1532.821400][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1532.821447][ C1] EXT4-fs (loop5): initial error at time 1781405781: ext4_iget_extra_inode:5127: inode 15 [ 1532.821504][ C1] EXT4-fs (loop5): last error at time 1781405781: ext4_iget_extra_inode:5127: inode 15 [ 1532.864680][T23006] loop5: lost filesystem error report for type 5 error -117 [ 1532.871648][T22964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34452 - 0 [ 1532.874267][T23006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.290729][T22964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34452 - 0 [ 1533.334593][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.675827][ T30] audit: type=1804 audit(1781405782.866:126): pid=23030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4385" name="/newroot/17/file0" dev="tmpfs" ino=109 res=1 errno=0 [ 1533.744724][T23034] sg_write: data in/out 353280/136 bytes for SCSI command 0x0-- guessing data in; [ 1533.744724][T23034] program syz.5.4384 not setting count and/or reply_len properly [ 1533.799488][T22964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34452 - 0 [ 1534.178039][T23039] loop3: detected capacity change from 0 to 512 [ 1534.289030][T23039] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 1534.414577][T23039] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4389: inode #15: comm syz.3.4389: iget: illegal inode # [ 1534.572156][T23039] loop3: lost filesystem error report for type 5 error -117 [ 1534.572450][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1534.586569][ C0] EXT4-fs (loop3): initial error at time 1781405783: ext4_orphan_get:1397 [ 1534.595315][ C0] EXT4-fs (loop3): last error at time 1781405783: ext4_orphan_get:1397 [ 1534.605103][T23039] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.4389: couldn't read orphan inode 15 (err -117) [ 1534.617090][T23039] loop3: lost filesystem error report for type 5 error -117 [ 1534.621253][T23039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.751092][T11594] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 34452 - 0 [ 1534.799505][T11594] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 34452 - 0 [ 1534.867506][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.878199][T11594] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 34452 - 0 [ 1534.982528][T11594] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 34452 - 0 [ 1536.088607][T23075] loop2: detected capacity change from 0 to 512 [ 1536.178810][T23075] EXT4-fs: Ignoring removed bh option [ 1536.315350][T23075] EXT4-fs error (device loop2): ext4_iget_extra_inode:5127: inode #15: comm syz.2.4397: corrupted in-inode xattr: e_value size too large [ 1536.378664][T23075] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1536.382462][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1536.398167][ C0] EXT4-fs (loop2): initial error at time 1781405785: ext4_iget_extra_inode:5127: inode 15 [ 1536.408195][ C0] EXT4-fs (loop2): last error at time 1781405785: ext4_iget_extra_inode:5127: inode 15 [ 1536.460068][T23075] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.4397: couldn't read orphan inode 15 (err -117) [ 1536.503181][T23075] loop2: lost filesystem error report for type 5 error -117 [ 1536.505889][T23075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.948881][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.159885][ T30] audit: type=1804 audit(1781405786.346:127): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4403" name="/newroot/21/file0" dev="tmpfs" ino=130 res=1 errno=0 [ 1537.752974][T23116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4408'. [ 1537.945230][T23120] loop7: detected capacity change from 0 to 128 [ 1538.078626][T23120] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1538.174694][T23120] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.504671][T21961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1539.725057][T16197] Bluetooth: hci4: command 0x1003 tx timeout [ 1539.727041][ T30] audit: type=1804 audit(1781405788.906:128): pid=23140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4414" name="/newroot/322/file0" dev="tmpfs" ino=1701 res=1 errno=0 [ 1539.731947][T11077] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1540.233199][T23157] loop2: detected capacity change from 0 to 512 [ 1540.257882][T23157] EXT4-fs: Ignoring removed bh option [ 1540.307804][T23157] EXT4-fs error (device loop2): ext4_iget_extra_inode:5127: inode #15: comm syz.2.4417: corrupted in-inode xattr: e_value size too large [ 1540.452452][T23157] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1540.462435][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1540.478170][ C1] EXT4-fs (loop2): initial error at time 1781405789: ext4_iget_extra_inode:5127: inode 15 [ 1540.488157][ C1] EXT4-fs (loop2): last error at time 1781405789: ext4_iget_extra_inode:5127: inode 15 [ 1540.528050][T23157] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.4417: couldn't read orphan inode 15 (err -117) [ 1540.556861][T23157] loop2: lost filesystem error report for type 5 error -117 [ 1540.566148][T23157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1540.857947][ T30] audit: type=1804 audit(1781405790.046:129): pid=23175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4421" name="/newroot/301/file0" dev="tmpfs" ino=1585 res=1 errno=0 [ 1541.046932][T20256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.131034][T23182] loop4: detected capacity change from 0 to 512 [ 1541.173427][T23182] EXT4-fs: Invalid want_extra_isize 1 [ 1542.560448][ T30] audit: type=1804 audit(1781405791.746:130): pid=23200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4430" name="/newroot/327/file0" dev="tmpfs" ino=1730 res=1 errno=0 [ 1545.805208][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.811707][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.620232][ T30] audit: type=1804 audit(1781405796.806:131): pid=23256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4447" name="/newroot/119/file0" dev="tmpfs" ino=640 res=1 errno=0 [ 1547.857895][T23264] loop3: detected capacity change from 0 to 512 [ 1547.989519][T23264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.112650][T23264] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.276166][T23275] loop5: detected capacity change from 0 to 512 [ 1548.363705][T23275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.474270][T23275] ext4 filesystem being mounted at /333/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.673999][ T30] audit: type=1800 audit(1781405797.866:132): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4453" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1548.709154][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.936903][T16194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.228716][ T30] audit: type=1804 audit(1781405800.416:133): pid=23316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4464" name="/newroot/335/file0" dev="tmpfs" ino=1774 res=1 errno=0 [ 1553.048338][T23341] loop3: detected capacity change from 0 to 4096 [ 1553.773677][T23341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.936911][ T30] audit: type=1800 audit(1781405803.126:134): pid=23341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4475" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1554.080986][T23359] loop5: detected capacity change from 0 to 512 [ 1554.161678][T23359] EXT4-fs: Invalid want_extra_isize 1 [ 1554.210417][ T30] audit: type=1804 audit(1781405803.396:135): pid=23363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4482" name="/newroot/316/file0" dev="tmpfs" ino=1666 res=1 errno=0 [ 1554.368964][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.693705][T23373] tipc: Enabled bearer , priority 0 [ 1554.961028][T23373] syzkaller0: entered promiscuous mode [ 1554.995152][T23373] syzkaller0: entered allmulticast mode [ 1555.028471][T23373] tipc: Resetting bearer [ 1555.107833][T23372] tipc: Resetting bearer [ 1555.171964][T23366] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1555.212379][T23366] block device autoloading is deprecated and will be removed. [ 1555.239325][T23388] loop4: detected capacity change from 0 to 256 [ 1555.857168][T23399] loop4: detected capacity change from 0 to 2048 [ 1556.021315][T23399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.186424][T23398] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1556.306144][T23398] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1556.388204][T23398] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1556.388204][T23398] [ 1556.437286][T23398] EXT4-fs (loop4): Total free blocks count 0 [ 1556.452769][ T30] audit: type=1804 audit(1781405805.636:136): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4497" name="/newroot/129/file0" dev="tmpfs" ino=692 res=1 errno=0 [ 1556.505685][T23398] EXT4-fs (loop4): Free/Dirty block details [ 1556.543874][T23398] EXT4-fs (loop4): free_blocks=2415919104 [ 1556.584641][T23398] EXT4-fs (loop4): dirty_blocks=32 [ 1556.602878][T23398] EXT4-fs (loop4): Block reservation details [ 1556.623534][T23398] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1556.716474][ T6250] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 1556.771746][T23420] loop3: detected capacity change from 0 to 4096 [ 1556.824677][T16190] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1556.964016][T23420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1557.063735][ T30] audit: type=1800 audit(1781405806.256:137): pid=23420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4498" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1557.849335][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.477502][T23432] loop3: detected capacity change from 0 to 256 [ 1558.585202][T23432] FAT-fs (loop3): Directory bread(block 64) failed [ 1558.633665][T23432] FAT-fs (loop3): Directory bread(block 65) failed [ 1558.665681][T23432] FAT-fs (loop3): Directory bread(block 66) failed [ 1558.715837][T23432] FAT-fs (loop3): Directory bread(block 67) failed [ 1558.748554][T23432] FAT-fs (loop3): Directory bread(block 68) failed [ 1558.795646][T23432] FAT-fs (loop3): Directory bread(block 69) failed [ 1558.817005][T23432] FAT-fs (loop3): Directory bread(block 70) failed [ 1558.856649][T23432] FAT-fs (loop3): Directory bread(block 71) failed [ 1558.888070][T23432] FAT-fs (loop3): Directory bread(block 72) failed [ 1558.898671][T23432] FAT-fs (loop3): Directory bread(block 73) failed [ 1559.985790][T23456] loop3: detected capacity change from 0 to 128 [ 1560.101253][T23456] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1560.115110][T23456] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.235829][T16191] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1561.130990][T23462] usb usb8: usbfs: process 23462 (syz.2.4507) did not claim interface 0 before use [ 1561.467972][T23468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1562.155409][T23372] tipc: Disabling bearer [ 1562.176897][ T10] tipc: Node number set to 2138706283 [ 1562.427902][ T30] audit: type=1804 audit(1781405811.616:138): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4511" name="/newroot/134/file0" dev="tmpfs" ino=718 res=1 errno=0 [ 1562.557197][T23473] loop1: detected capacity change from 0 to 128 [ 1562.666449][T23482] syz_tun: entered allmulticast mode [ 1562.690813][T23480] syz_tun: left allmulticast mode [ 1562.705791][T23474] bio_check_eod: 20 callbacks suppressed [ 1562.705819][T23474] syz.1.4512: attempt to access beyond end of device [ 1562.705819][T23474] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1562.752217][T23478] loop3: detected capacity change from 0 to 4096 [ 1562.786566][T23474] syz.1.4512: attempt to access beyond end of device [ 1562.786566][T23474] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1562.798781][T23484] syzkaller0: entered promiscuous mode [ 1562.838539][T23484] syzkaller0: entered allmulticast mode [ 1562.858634][T23478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.898108][ T30] audit: type=1800 audit(1781405812.086:139): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4513" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1564.011223][T23497] usb usb8: usbfs: process 23497 (syz.1.4520) did not claim interface 0 before use [ 1564.048624][T16191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.369239][T23502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4523'. [ 1564.550257][T23507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1564.849588][ T30] audit: type=1804 audit(1781405814.036:140): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4529" name="/newroot/313/file0" dev="tmpfs" ino=1649 res=1 errno=0 [ 1565.129631][T23521] syzkaller0: entered promiscuous mode [ 1565.144473][T23521] syzkaller0: entered allmulticast mode [ 1566.338332][T23561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1567.801395][T23519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1568.035933][T23564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1568.140374][T23566] loop2: detected capacity change from 0 to 128 [ 1568.175708][T23566] ext4: Unknown parameter 'fsmagic' [ 1569.365056][T23584] xt_hashlimit: size too large, truncated to 1048576 [ 1569.493498][T23586] loop2: detected capacity change from 0 to 512 [ 1569.738250][T23596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1569.759668][T23586] [ 1569.762056][T23586] ====================================================== [ 1569.763614][T23596] PM: Image not found (code -6) [ 1569.769075][T23586] WARNING: possible circular locking dependency detected [ 1569.769093][T23586] syzkaller #0 Not tainted [ 1569.769112][T23586] ------------------------------------------------------ [ 1569.769128][T23586] syz.2.4551/23586 is trying to acquire lock: [ 1569.798429][T23586] ffff888067212c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 1569.808401][T23586] [ 1569.808401][T23586] but task is already holding lock: [ 1569.815776][T23586] ffff888086184228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 1569.825686][T23586] [ 1569.825686][T23586] which lock already depends on the new lock. [ 1569.825686][T23586] [ 1569.836109][T23586] [ 1569.836109][T23586] the existing dependency chain (in reverse order) is: [ 1569.845135][T23586] [ 1569.845135][T23586] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1569.852720][T23586] down_write+0x8b/0x1f0 [ 1569.857496][T23586] ext4_destroy_inline_data+0x2d/0xe0 [ 1569.863407][T23586] ext4_do_writepages+0x118b/0x3f20 [ 1569.869160][T23586] ext4_writepages+0x347/0x790 [ 1569.874500][T23586] do_writepages+0x278/0x600 [ 1569.879671][T23586] filemap_writeback+0x22d/0x2e0 [ 1569.885195][T23586] ext4_convert_inline_data+0x474/0x610 [ 1569.891288][T23586] ext4_fallocate+0x246/0x3cd0 [ 1569.896598][T23586] vfs_fallocate+0x576/0x10d0 [ 1569.901828][T23586] ioctl_preallocate+0x125/0x210 [ 1569.907309][T23586] do_vfs_ioctl+0x1157/0x13e0 [ 1569.912530][T23586] __x64_sys_ioctl+0x114/0x210 [ 1569.917837][T23586] do_syscall_64+0x115/0x870 [ 1569.922977][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.929408][T23586] [ 1569.929408][T23586] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1569.937859][T23586] __lock_acquire+0x14b8/0x2630 [ 1569.943245][T23586] lock_acquire+0x1b1/0x370 [ 1569.948283][T23586] ext4_writepages+0x21d/0x790 [ 1569.953574][T23586] do_writepages+0x278/0x600 [ 1569.958714][T23586] __writeback_single_inode+0x164/0x1350 [ 1569.964900][T23586] writeback_single_inode+0x4d3/0xf30 [ 1569.970821][T23586] write_inode_now+0x174/0x1f0 [ 1569.976133][T23586] iput.part.0+0x7f3/0xf50 [ 1569.981091][T23586] iput+0x35/0x40 [ 1569.985265][T23586] ext4_xattr_block_set+0x1426/0x3660 [ 1569.991192][T23586] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1569.997632][T23586] __ext4_expand_extra_isize+0x346/0x480 [ 1570.003812][T23586] __ext4_mark_inode_dirty+0x67d/0x890 [ 1570.009854][T23586] ext4_evict_inode+0x846/0x1a30 [ 1570.015322][T23586] evict+0x3c2/0xad0 [ 1570.019764][T23586] iput.part.0+0x605/0xf50 [ 1570.024729][T23586] iput+0x35/0x40 [ 1570.028906][T23586] ext4_orphan_cleanup+0x71e/0x11e0 [ 1570.034630][T23586] ext4_fill_super+0x916c/0xb5d0 [ 1570.040106][T23586] get_tree_bdev_flags+0x38c/0x620 [ 1570.045762][T23586] vfs_get_tree+0x92/0x320 [ 1570.050721][T23586] path_mount+0x7d0/0x23d0 [ 1570.055672][T23586] __x64_sys_mount+0x293/0x310 [ 1570.060971][T23586] do_syscall_64+0x115/0x870 [ 1570.066119][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.072543][T23586] [ 1570.072543][T23586] other info that might help us debug this: [ 1570.072543][T23586] [ 1570.082763][T23586] Possible unsafe locking scenario: [ 1570.082763][T23586] [ 1570.090217][T23586] CPU0 CPU1 [ 1570.095579][T23586] ---- ---- [ 1570.100940][T23586] lock(&ei->xattr_sem); [ 1570.105280][T23586] lock(&sbi->s_writepages_rwsem); [ 1570.113016][T23586] lock(&ei->xattr_sem); [ 1570.119875][T23586] rlock(&sbi->s_writepages_rwsem); [ 1570.125173][T23586] [ 1570.125173][T23586] *** DEADLOCK *** [ 1570.125173][T23586] [ 1570.133311][T23586] 3 locks held by syz.2.4551/23586: [ 1570.138502][T23586] #0: ffff88806150e0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1570.148682][T23586] #1: ffff88806150e600 (sb_internal){++++}-{0:0}, at: evict+0x3c2/0xad0 [ 1570.157200][T23586] #2: ffff888086184228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 1570.167559][T23586] [ 1570.167559][T23586] stack backtrace: [ 1570.173448][T23586] CPU: 1 UID: 0 PID: 23586 Comm: syz.2.4551 Not tainted syzkaller #0 PREEMPT(full) [ 1570.173491][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1570.173513][T23586] Call Trace: [ 1570.173528][T23586] [ 1570.173542][T23586] dump_stack_lvl+0x100/0x190 [ 1570.173582][T23586] print_circular_bug.cold+0x178/0x1c7 [ 1570.173645][T23586] check_noncircular+0x146/0x160 [ 1570.173680][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.173730][T23586] __lock_acquire+0x14b8/0x2630 [ 1570.173777][T23586] lock_acquire+0x1b1/0x370 [ 1570.173818][T23586] ? do_writepages+0x278/0x600 [ 1570.173878][T23586] ? __pfx___might_resched+0x10/0x10 [ 1570.173929][T23586] ext4_writepages+0x21d/0x790 [ 1570.173964][T23586] ? do_writepages+0x278/0x600 [ 1570.174017][T23586] ? __pfx_ext4_writepages+0x10/0x10 [ 1570.174055][T23586] ? do_writepages+0x4b5/0x600 [ 1570.174107][T23586] ? do_writepages+0x4b5/0x600 [ 1570.174158][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.174201][T23586] ? __pfx_ext4_writepages+0x10/0x10 [ 1570.174235][T23586] do_writepages+0x278/0x600 [ 1570.174289][T23586] ? __pfx_do_writepages+0x10/0x10 [ 1570.174347][T23586] __writeback_single_inode+0x164/0x1350 [ 1570.174401][T23586] ? find_held_lock+0x2b/0x80 [ 1570.174452][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.174495][T23586] ? __pfx___writeback_single_inode+0x10/0x10 [ 1570.174548][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.174588][T23586] ? do_raw_spin_unlock+0x145/0x1e0 [ 1570.174634][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.174678][T23586] writeback_single_inode+0x4d3/0xf30 [ 1570.174735][T23586] write_inode_now+0x174/0x1f0 [ 1570.174787][T23586] ? __pfx_write_inode_now+0x10/0x10 [ 1570.174869][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.174909][T23586] ? find_held_lock+0x2b/0x80 [ 1570.174958][T23586] ? iput.part.0+0x7e6/0xf50 [ 1570.175001][T23586] ? iput.part.0+0x7e6/0xf50 [ 1570.175042][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.175089][T23586] iput.part.0+0x7f3/0xf50 [ 1570.175131][T23586] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1570.175187][T23586] iput+0x35/0x40 [ 1570.175227][T23586] ext4_xattr_block_set+0x1426/0x3660 [ 1570.175284][T23586] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 1570.175330][T23586] ? iput+0x3a/0x40 [ 1570.175373][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.175414][T23586] ? xattr_find_entry+0x240/0x2e0 [ 1570.175458][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.175499][T23586] ? ext4_xattr_block_find+0x59/0x430 [ 1570.175545][T23586] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1570.175610][T23586] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1570.175664][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.175705][T23586] ? dquot_initialize_needed+0x183/0x2a0 [ 1570.175764][T23586] __ext4_expand_extra_isize+0x346/0x480 [ 1570.175816][T23586] __ext4_mark_inode_dirty+0x67d/0x890 [ 1570.175876][T23586] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1570.175933][T23586] ? __pfx___might_resched+0x10/0x10 [ 1570.175984][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176024][T23586] ? __ext4_journal_start_sb+0x1ce/0x670 [ 1570.176078][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176119][T23586] ? ext4_evict_inode+0x6c8/0x1a30 [ 1570.176154][T23586] ext4_evict_inode+0x846/0x1a30 [ 1570.176191][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1570.176223][T23586] ? evict+0x37e/0xad0 [ 1570.176263][T23586] ? evict+0x37e/0xad0 [ 1570.176302][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176346][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1570.176380][T23586] evict+0x3c2/0xad0 [ 1570.176423][T23586] ? __pfx_evict+0x10/0x10 [ 1570.176463][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176509][T23586] ? iput.part.0+0x5fd/0xf50 [ 1570.176550][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176596][T23586] iput.part.0+0x605/0xf50 [ 1570.176638][T23586] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1570.176693][T23586] iput+0x35/0x40 [ 1570.176733][T23586] ext4_orphan_cleanup+0x71e/0x11e0 [ 1570.176774][T23586] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1570.176816][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.176857][T23586] ? ext4_register_li_request+0xef/0xa00 [ 1570.176900][T23586] ext4_fill_super+0x916c/0xb5d0 [ 1570.176956][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1570.176994][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177039][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177079][T23586] ? sb_set_blocksize+0x1fe/0x290 [ 1570.177128][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177168][T23586] ? setup_bdev_super+0x425/0x730 [ 1570.177217][T23586] get_tree_bdev_flags+0x38c/0x620 [ 1570.177268][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1570.177307][T23586] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1570.177359][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177403][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177444][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177484][T23586] ? security_capable+0x80/0x260 [ 1570.177542][T23586] vfs_get_tree+0x92/0x320 [ 1570.177584][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177626][T23586] path_mount+0x7d0/0x23d0 [ 1570.177670][T23586] ? __pfx_path_mount+0x10/0x10 [ 1570.177709][T23586] ? lockdep_hardirqs_on+0x78/0x100 [ 1570.177760][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177808][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.177849][T23586] ? kmem_cache_free+0x127/0x6c0 [ 1570.177896][T23586] ? __x64_sys_mount+0x293/0x310 [ 1570.177935][T23586] __x64_sys_mount+0x293/0x310 [ 1570.177977][T23586] ? __pfx___x64_sys_mount+0x10/0x10 [ 1570.178020][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1570.178061][T23586] ? rcu_is_watching+0x12/0xc0 [ 1570.178110][T23586] do_syscall_64+0x115/0x870 [ 1570.178163][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.178198][T23586] RIP: 0033:0x7f8fc759e0ca [ 1570.178226][T23586] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.178259][T23586] RSP: 002b:00007f8fc8441e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1570.178292][T23586] RAX: ffffffffffffffda RBX: 00007f8fc8441ee0 RCX: 00007f8fc759e0ca [ 1570.178316][T23586] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8fc8441ea0 [ 1570.178338][T23586] RBP: 0000200000000180 R08: 00007f8fc8441ee0 R09: 0000000000000000 [ 1570.178360][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1570.178382][T23586] R13: 00007f8fc8441ea0 R14: 000000000000047a R15: 00002000000001c0 [ 1570.178417][T23586] [ 1570.876123][T23586] ------------[ cut here ]------------ [ 1570.882617][T23586] EA inode 11 i_nlink=0 [ 1570.882640][T23586] WARNING: fs/ext4/xattr.c:1057 at ext4_xattr_inode_update_ref+0x477/0x590, CPU#0: syz.2.4551/23586 [ 1570.897697][T23586] Modules linked in: [ 1570.901629][T23586] CPU: 0 UID: 0 PID: 23586 Comm: syz.2.4551 Not tainted syzkaller #0 PREEMPT(full) [ 1570.911684][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1570.922299][T23586] RIP: 0010:ext4_xattr_inode_update_ref+0x47e/0x590 [ 1570.929983][T23586] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d 99 04 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 36 a1 25 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 1570.950434][T23586] RSP: 0018:ffffc90004bef180 EFLAGS: 00010246 [ 1570.956677][T23586] RAX: dffffc0000000000 RBX: ffff888054a5ccf8 RCX: ffffc900080b1000 [ 1570.964748][T23586] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90ddf3b0 [ 1570.968885][T23600] syzkaller0: entered promiscuous mode [ 1570.972791][T23586] RBP: ffffc90004bef248 R08: 0000000000000005 R09: 0000000000000001 [ 1570.978221][T23600] syzkaller0: entered allmulticast mode [ 1570.986242][T23586] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1570.999820][T23586] R13: 1ffff9200097de33 R14: 00000000ffffffff R15: 0000000000000000 [ 1571.007890][T23586] FS: 00007f8fc84426c0(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1571.017520][T23586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.024713][T23586] CR2: 00007f57c2a7f000 CR3: 00000000b09ae000 CR4: 0000000000350ef0 [ 1571.025019][T23599] loop3: detected capacity change from 0 to 1024 [ 1571.032790][T23586] Call Trace: [ 1571.032806][T23586] [ 1571.032824][T23586] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1571.051774][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.057346][T23599] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1571.057834][T23586] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1571.067410][T23599] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1571.083867][T23586] ext4_xattr_set_entry+0x185b/0x20b0 [ 1571.089557][T23586] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1571.095610][T23586] ? xattr_find_entry+0x240/0x2e0 [ 1571.101013][T23586] ext4_xattr_ibody_set+0x3d3/0x5d0 [ 1571.107584][T23586] ext4_expand_extra_isize_ea+0x180d/0x1d70 [ 1571.114256][T23586] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1571.120657][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.126830][T23586] ? dquot_initialize_needed+0x183/0x2a0 [ 1571.132624][T23586] __ext4_expand_extra_isize+0x346/0x480 [ 1571.138336][T23586] __ext4_mark_inode_dirty+0x67d/0x890 [ 1571.143955][T23586] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1571.146054][T23599] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1571.149995][T23586] ? __pfx___might_resched+0x10/0x10 [ 1571.158359][T23599] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1571.163667][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.170260][T23599] EXT4-fs error (device loop3): ext4_read_inode_bitmap:166: comm syz.3.4555: Inode bitmap for bg 0 marked uninitialized [ 1571.175376][T23586] ? __ext4_journal_start_sb+0x1ce/0x670 [ 1571.175450][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.175508][T23586] ? ext4_evict_inode+0x6c8/0x1a30 [ 1571.175559][T23586] ext4_evict_inode+0x846/0x1a30 [ 1571.175610][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1571.175653][T23586] ? evict+0x37e/0xad0 [ 1571.188165][T23599] loop3: lost filesystem error report for type 5 error -117 [ 1571.193914][T23586] ? evict+0x37e/0xad0 [ 1571.201050][T23599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1571.204763][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.249872][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1571.255490][T23586] evict+0x3c2/0xad0 [ 1571.259475][T23586] ? __pfx_evict+0x10/0x10 [ 1571.264013][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.269702][T23586] ? iput.part.0+0x5fd/0xf50 [ 1571.274408][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.280081][T23586] iput.part.0+0x605/0xf50 [ 1571.284579][T23586] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1571.289916][T23586] iput+0x35/0x40 [ 1571.293605][T23586] ext4_orphan_cleanup+0x71e/0x11e0 [ 1571.298864][T23586] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1571.304570][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.310244][T23586] ? ext4_register_li_request+0xef/0xa00 [ 1571.315999][T23586] ext4_fill_super+0x916c/0xb5d0 [ 1571.321460][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1571.327419][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.333176][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.338873][T23586] ? sb_set_blocksize+0x1fe/0x290 [ 1571.344118][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.349834][T23586] ? setup_bdev_super+0x425/0x730 [ 1571.354970][T23586] get_tree_bdev_flags+0x38c/0x620 [ 1571.360166][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1571.365734][T23586] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1571.371444][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.377166][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.382898][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.388580][T23586] ? security_capable+0x80/0x260 [ 1571.393612][T23586] vfs_get_tree+0x92/0x320 [ 1571.398064][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.403770][T23586] path_mount+0x7d0/0x23d0 [ 1571.408224][T23586] ? __pfx_path_mount+0x10/0x10 [ 1571.413151][T23586] ? lockdep_hardirqs_on+0x78/0x100 [ 1571.418412][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.424673][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.430329][T23586] ? kmem_cache_free+0x127/0x6c0 [ 1571.435897][T23586] ? __x64_sys_mount+0x293/0x310 [ 1571.440908][T23586] __x64_sys_mount+0x293/0x310 [ 1571.445751][T23586] ? __pfx___x64_sys_mount+0x10/0x10 [ 1571.451056][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.456773][T23586] ? rcu_is_watching+0x12/0xc0 [ 1571.461624][T23586] do_syscall_64+0x115/0x870 [ 1571.466354][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.472311][T23586] RIP: 0033:0x7f8fc759e0ca [ 1571.476813][T23586] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.496593][T23586] RSP: 002b:00007f8fc8441e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1571.505142][T23586] RAX: ffffffffffffffda RBX: 00007f8fc8441ee0 RCX: 00007f8fc759e0ca [ 1571.513232][T23586] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8fc8441ea0 [ 1571.522056][T23586] RBP: 0000200000000180 R08: 00007f8fc8441ee0 R09: 0000000000000000 [ 1571.530682][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1571.538752][T23586] R13: 00007f8fc8441ea0 R14: 000000000000047a R15: 00002000000001c0 [ 1571.546824][T23586] [ 1571.549856][T23586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1571.557131][T23586] CPU: 0 UID: 0 PID: 23586 Comm: syz.2.4551 Not tainted syzkaller #0 PREEMPT(full) [ 1571.566531][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1571.576585][T23586] Call Trace: [ 1571.579862][T23586] [ 1571.582792][T23586] dump_stack_lvl+0x100/0x190 [ 1571.587487][T23586] vpanic+0x552/0x970 [ 1571.591482][T23586] ? __pfx_vpanic+0x10/0x10 [ 1571.595995][T23586] ? lock_release+0x245/0x310 [ 1571.600692][T23586] panic+0xd1/0xe0 [ 1571.604431][T23586] ? __pfx_panic+0x10/0x10 [ 1571.608889][T23586] check_panic_on_warn.cold+0x19/0x34 [ 1571.614282][T23586] ? ext4_xattr_inode_update_ref+0x477/0x590 [ 1571.620306][T23586] __warn.cold+0x191/0x328 [ 1571.624738][T23586] __report_bug+0x296/0x3d0 [ 1571.629269][T23586] ? ext4_xattr_inode_update_ref+0x477/0x590 [ 1571.635281][T23586] ? __pfx___report_bug+0x10/0x10 [ 1571.640347][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.646034][T23586] ? ext4_inode_journal_mode+0x27c/0x450 [ 1571.651702][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.657357][T23586] ? ext4_fc_eligible.isra.0+0x95/0x110 [ 1571.662946][T23586] report_bug_entry+0xe1/0x290 [ 1571.667749][T23586] ? ext4_xattr_inode_update_ref+0x47e/0x590 [ 1571.673762][T23586] handle_bug+0x1cd/0x2a0 [ 1571.678106][T23586] exc_invalid_op+0x17/0x50 [ 1571.682619][T23586] asm_exc_invalid_op+0x1a/0x20 [ 1571.687491][T23586] RIP: 0010:ext4_xattr_inode_update_ref+0x47e/0x590 [ 1571.694115][T23586] Code: 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 01 00 00 48 8d 3d 99 04 fb 0d 48 8b 73 40 44 89 e2 <67> 48 0f b9 3a eb a6 e8 36 a1 25 ff 48 8d 7b 40 48 b8 00 00 00 00 [ 1571.713746][T23586] RSP: 0018:ffffc90004bef180 EFLAGS: 00010246 [ 1571.719832][T23586] RAX: dffffc0000000000 RBX: ffff888054a5ccf8 RCX: ffffc900080b1000 [ 1571.727817][T23586] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff90ddf3b0 [ 1571.735806][T23586] RBP: ffffc90004bef248 R08: 0000000000000005 R09: 0000000000000001 [ 1571.743801][T23586] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1571.751784][T23586] R13: 1ffff9200097de33 R14: 00000000ffffffff R15: 0000000000000000 [ 1571.759788][T23586] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1571.766164][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.771826][T23586] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1571.777334][T23586] ext4_xattr_set_entry+0x185b/0x20b0 [ 1571.782753][T23586] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1571.788506][T23586] ? xattr_find_entry+0x240/0x2e0 [ 1571.793560][T23586] ext4_xattr_ibody_set+0x3d3/0x5d0 [ 1571.798834][T23586] ext4_expand_extra_isize_ea+0x180d/0x1d70 [ 1571.804878][T23586] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1571.811163][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.816824][T23586] ? dquot_initialize_needed+0x183/0x2a0 [ 1571.822594][T23586] __ext4_expand_extra_isize+0x346/0x480 [ 1571.828633][T23586] __ext4_mark_inode_dirty+0x67d/0x890 [ 1571.834178][T23586] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1571.840213][T23586] ? __pfx___might_resched+0x10/0x10 [ 1571.845544][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.851209][T23586] ? __ext4_journal_start_sb+0x1ce/0x670 [ 1571.856889][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.862553][T23586] ? ext4_evict_inode+0x6c8/0x1a30 [ 1571.867693][T23586] ext4_evict_inode+0x846/0x1a30 [ 1571.872679][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1571.878066][T23586] ? evict+0x37e/0xad0 [ 1571.882160][T23586] ? evict+0x37e/0xad0 [ 1571.886250][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.891917][T23586] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1571.897318][T23586] evict+0x3c2/0xad0 [ 1571.901242][T23586] ? __pfx_evict+0x10/0x10 [ 1571.905689][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.911355][T23586] ? iput.part.0+0x5fd/0xf50 [ 1571.915974][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.921643][T23586] iput.part.0+0x605/0xf50 [ 1571.926088][T23586] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1571.931419][T23586] iput+0x35/0x40 [ 1571.935082][T23586] ext4_orphan_cleanup+0x71e/0x11e0 [ 1571.940312][T23586] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1571.945969][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.951633][T23586] ? ext4_register_li_request+0xef/0xa00 [ 1571.957302][T23586] ext4_fill_super+0x916c/0xb5d0 [ 1571.962288][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1571.967603][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.973357][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.979018][T23586] ? sb_set_blocksize+0x1fe/0x290 [ 1571.984078][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1571.989737][T23586] ? setup_bdev_super+0x425/0x730 [ 1571.994796][T23586] get_tree_bdev_flags+0x38c/0x620 [ 1571.999946][T23586] ? __pfx_ext4_fill_super+0x10/0x10 [ 1572.005258][T23586] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1572.011025][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.016687][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.022347][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.028007][T23586] ? security_capable+0x80/0x260 [ 1572.032990][T23586] vfs_get_tree+0x92/0x320 [ 1572.037435][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.043094][T23586] path_mount+0x7d0/0x23d0 [ 1572.047545][T23586] ? __pfx_path_mount+0x10/0x10 [ 1572.052418][T23586] ? lockdep_hardirqs_on+0x78/0x100 [ 1572.057662][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.063324][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.068990][T23586] ? kmem_cache_free+0x127/0x6c0 [ 1572.073968][T23586] ? __x64_sys_mount+0x293/0x310 [ 1572.078930][T23586] __x64_sys_mount+0x293/0x310 [ 1572.083720][T23586] ? __pfx___x64_sys_mount+0x10/0x10 [ 1572.089033][T23586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1572.094690][T23586] ? rcu_is_watching+0x12/0xc0 [ 1572.099578][T23586] do_syscall_64+0x115/0x870 [ 1572.104208][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.110118][T23586] RIP: 0033:0x7f8fc759e0ca [ 1572.114539][T23586] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.134168][T23586] RSP: 002b:00007f8fc8441e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1572.142608][T23586] RAX: ffffffffffffffda RBX: 00007f8fc8441ee0 RCX: 00007f8fc759e0ca [ 1572.150613][T23586] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8fc8441ea0 [ 1572.158600][T23586] RBP: 0000200000000180 R08: 00007f8fc8441ee0 R09: 0000000000000000 [ 1572.166587][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1572.174569][T23586] R13: 00007f8fc8441ea0 R14: 000000000000047a R15: 00002000000001c0 [ 1572.182566][T23586] [ 1572.185842][T23586] Kernel Offset: disabled [ 1572.190163][T23586] Rebooting in 86400 seconds..