last executing test programs: 4m15.391391109s ago: executing program 1 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0) 4m15.180601854s ago: executing program 1 (id=871): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) 4m14.869296202s ago: executing program 1 (id=874): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7ffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010) 4m14.763683014s ago: executing program 1 (id=875): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$ptp(r1, &(0x7f00000001c0)=""/207, 0xcf) 4m14.51071585s ago: executing program 1 (id=877): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xd0, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x121f, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 4m13.916673665s ago: executing program 1 (id=886): mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}, {'soft'}, {'timeo=1'}, {'retrans=1'}, {'sec=krb5'}]}) 4m13.397616787s ago: executing program 32 (id=886): mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}, {'soft'}, {'timeo=1'}, {'retrans=1'}, {'sec=krb5'}]}) 1m58.258987139s ago: executing program 3 (id=1888): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000300000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 1m57.895433258s ago: executing program 3 (id=1892): eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0xf) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x60000726) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m56.838737563s ago: executing program 3 (id=1897): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m56.418566073s ago: executing program 3 (id=1900): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f268c2d285d83ec4018000000000000000002009000007000000200700", [0x8]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m55.498832646s ago: executing program 3 (id=1907): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffe, 0x2, 0x4, 0xf9, 0x7, '\t\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 1m54.987551378s ago: executing program 3 (id=1914): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xfffffffffffffffd, 0x3a, 'c\xb3R$P~\xdco\xc3\"\xef\xf9', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0xfff1}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x78, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x74, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2954}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xaf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m54.659266126s ago: executing program 33 (id=1914): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xfffffffffffffffd, 0x3a, 'c\xb3R$P~\xdco\xc3\"\xef\xf9', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0xfff1}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x78, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x74, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2954}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xaf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.437918304s ago: executing program 5 (id=2813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8004) 6.299357567s ago: executing program 5 (id=2815): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r4, 0x3f, 0xb604}, 0x80, &(0x7f0000004380)=[{0x0}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6", 0xc}], 0x2}, 0x0) 6.238060059s ago: executing program 2 (id=2817): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.323341161s ago: executing program 4 (id=2819): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100000000001049000000000000", @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}}, 0x4080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) 5.317665131s ago: executing program 2 (id=2820): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 5.257723452s ago: executing program 4 (id=2822): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000005c0)="fd9c4aee09a88e2508e37f2cb79e215f6adc234856a53becb85478decc87c288cc48de2f68cd49bbb7", 0x29) 5.143381545s ago: executing program 0 (id=2823): eventfd2(0x0, 0x0) open(0x0, 0x64842, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.651334441s ago: executing program 0 (id=2824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RLERRORu(r0, 0x0, 0xd) 3.632988882s ago: executing program 0 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x11, 0x9, 0x9, 0x7, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x4, 0x10}]}, 0x38}}, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 2.461736331s ago: executing program 4 (id=2826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x844, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x814, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000004, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x2, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x4, 0x9, 0x9, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0x9, 0x100, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0x0, 0x2, 0x8, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x6, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x98, 0xa, 0x3, 0x4, 0x5299, 0x4, 0x3, 0xffff949e, 0x100, 0x3, 0xe05, 0x0, 0x4, 0xfffff001, 0x8001, 0x1ff, 0x6, 0x2, 0x7, 0x80000000, 0x10001, 0x81, 0x1, 0x2, 0x40, 0x1, 0x0, 0x93, 0x2, 0x0, 0x7, 0x80000001, 0x1, 0x9, 0xe2a, 0x1, 0x9, 0x4, 0x2, 0xfff, 0x1ff, 0x5, 0x1, 0x7, 0x80000000, 0x4, 0x6, 0xfffffff7, 0x8001, 0x0, 0x800, 0x8, 0x83, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfffffffc, 0xfffffe00, 0x3, 0x9, 0x5a93, 0x1000, 0x300000, 0x9, 0x73, 0x2, 0xf, 0x2, 0x0, 0x2, 0x60, 0x1ff, 0x3ff, 0x4, 0x7, 0x1, 0x9df, 0x1ff, 0x0, 0x7, 0x8, 0x4ab, 0x76, 0x3, 0x3e, 0x1, 0x7, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0x64de, 0xffff, 0x800, 0x10001, 0xfffffffe, 0x5, 0x66, 0x1, 0x148dc91a, 0xf2, 0x6, 0x400, 0x5, 0x8, 0x100, 0x10000, 0x7, 0xb, 0x8, 0x4, 0x7, 0x5a, 0x9, 0x5, 0x6, 0x101, 0x3, 0x7, 0x200, 0x8, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1, 0xb, 0x6, 0x9, 0x0, 0x7, 0x6, 0xf78, 0x5, 0x4, 0x1, 0x9, 0x8000, 0x1, 0x46b, 0x9, 0x2, 0x9, 0xde48, 0xa00, 0x6, 0x2, 0x200, 0x9, 0xc5, 0xcfb, 0xa, 0x8, 0x1, 0x2cb, 0x7, 0x3e4, 0x7, 0x5, 0x7ff, 0xfb49, 0x8, 0x0, 0xfd, 0xfffffff8, 0x7, 0x8f71, 0x400, 0x9, 0x2, 0x1e1, 0x20000000, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0x2357, 0x200, 0x9, 0x2, 0x2, 0x7c, 0x6, 0xfffffc00, 0x6, 0x8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x12000000, 0x85, 0xf, 0x101, 0x10001, 0x8, 0x2, 0x4, 0xa8, 0x2, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x10000, 0x3, 0x9, 0x18, 0x4, 0x2, 0x1ff, 0x80000000, 0x7ff, 0x5, 0x8, 0x10, 0x40, 0xfff, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x8, 0x0, 0x2ee257b4, 0xc, 0x0, 0x10000, 0x40, 0x8, 0x9, 0x0, 0xa03, 0xb7, 0x73, 0x3, 0x7, 0x0, 0x3, 0x2d, 0x8, 0xffffa942, 0x3]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.418427561s ago: executing program 2 (id=2827): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 2.407265541s ago: executing program 4 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f00000005c0)="fd9c4aee09a88e2508e37f2cb79e215f6adc234856a53becb85478decc87c288cc48de2f68cd49bbb7", 0x29) 2.307362574s ago: executing program 5 (id=2829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffe, 0x2, 0x4, 0xf9, 0x7, '\t\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 2.307016594s ago: executing program 0 (id=2830): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() syz_pidfd_open(r1, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 2.191188707s ago: executing program 2 (id=2831): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 2.150389088s ago: executing program 5 (id=2832): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000"], 0x0, 0x52}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000740), 0x5005) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.787188497s ago: executing program 0 (id=2833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RLERRORu(r0, 0x0, 0xd) 1.25127707s ago: executing program 2 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r5 = epoll_create(0x2) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000005c0)="fd9c4aee09a88e2508e37f2cb79e215f6adc234856a53becb85478decc87c288cc48de2f68cd49bbb7", 0x29) 1.2510436s ago: executing program 4 (id=2835): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 614.986245ms ago: executing program 5 (id=2836): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x844, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x814, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000004, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x2, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x4, 0x9, 0x9, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0x9, 0x100, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0x0, 0x2, 0x8, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x6, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x98, 0xa, 0x3, 0x4, 0x5299, 0x4, 0x3, 0xffff949e, 0x100, 0x3, 0xe05, 0x0, 0x4, 0xfffff001, 0x8001, 0x1ff, 0x6, 0x2, 0x7, 0x80000000, 0x10001, 0x81, 0x1, 0x2, 0x40, 0x1, 0x0, 0x93, 0x2, 0x0, 0x7, 0x80000001, 0x1, 0x9, 0xe2a, 0x1, 0x9, 0x4, 0x2, 0xfff, 0x1ff, 0x5, 0x1, 0x7, 0x80000000, 0x4, 0x6, 0xfffffff7, 0x8001, 0x0, 0x800, 0x8, 0x83, 0x7f, 0x0, 0x10, 0x3, 0x0, 0x8, 0x6, 0xfffffffc, 0xfffffe00, 0x3, 0x9, 0x5a93, 0x1000, 0x300000, 0x9, 0x73, 0x2, 0xf, 0x2, 0x0, 0x2, 0x60, 0x1ff, 0x3ff, 0x4, 0x7, 0x1, 0x9df, 0x1ff, 0x0, 0x7, 0x8, 0x4ab, 0x76, 0x3, 0x3e, 0x1, 0x7, 0x3, 0x80000000, 0x0, 0x9, 0x7, 0x64de, 0xffff, 0x800, 0x10001, 0xfffffffe, 0x5, 0x66, 0x1, 0x148dc91a, 0xf2, 0x6, 0x400, 0x5, 0x8, 0x100, 0x10000, 0x7, 0xb, 0x8, 0x4, 0x7, 0x5a, 0x9, 0x5, 0x6, 0x101, 0x3, 0x7, 0x200, 0x8, 0xfffffffe, 0x8, 0x5, 0xfffffffc, 0x1, 0xb, 0x6, 0x9, 0x0, 0x7, 0x6, 0xf78, 0x5, 0x4, 0x1, 0x9, 0x8000, 0x1, 0x46b, 0x9, 0x2, 0x9, 0xde48, 0xa00, 0x6, 0x2, 0x200, 0x9, 0xc5, 0xcfb, 0xa, 0x8, 0x1, 0x2cb, 0x7, 0x3e4, 0x7, 0x5, 0x7ff, 0xfb49, 0x8, 0x0, 0xfd, 0xfffffff8, 0x7, 0x8f71, 0x400, 0x9, 0x2, 0x1e1, 0x20000000, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0x2357, 0x200, 0x9, 0x2, 0x2, 0x7c, 0x6, 0xfffffc00, 0x6, 0x8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x12000000, 0x85, 0xf, 0x101, 0x10001, 0x8, 0x2, 0x4, 0xa8, 0x2, 0x8, 0x0, 0xffffffff, 0x8, 0x5, 0x2, 0x10000, 0x3, 0x9, 0x18, 0x4, 0x2, 0x1ff, 0x80000000, 0x7ff, 0x5, 0x8, 0x10, 0x40, 0xfff, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x8, 0x0, 0x2ee257b4, 0xc, 0x0, 0x10000, 0x40, 0x8, 0x9, 0x0, 0xa03, 0xb7, 0x73, 0x3, 0x7, 0x0, 0x3, 0x2d, 0x8, 0xffffa942, 0x3]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 194.540445ms ago: executing program 4 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008000100000000000c0001"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d92a4fbab27cfa3c000000", @ANYRESDEC=r3, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='rd_pa', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) 127.424337ms ago: executing program 0 (id=2838): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x2000040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 80.554888ms ago: executing program 2 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setns(0xc9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x11, 0x9, 0x9, 0x7, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x4, 0x10}]}, 0x38}}, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 0s ago: executing program 5 (id=2840): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x800, 0x8, 0x8, 0x4e}, 0x14) kernel console output (not intermixed with test programs): T4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.598454][ T5834] hid-generic 0005:0457:0009.0017: unknown main item tag 0x0 [ 283.648922][ T5834] hid-generic 0005:0457:0009.0017: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 284.746484][ T9973] syzkaller0: entered promiscuous mode [ 284.774603][ T9973] syzkaller0: entered allmulticast mode [ 286.620983][ T972] hid-generic 0005:0457:0009.0018: unknown main item tag 0x0 [ 286.714607][ T972] hid-generic 0005:0457:0009.0018: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 286.869472][T10020] syzkaller0: entered promiscuous mode [ 286.889833][T10020] syzkaller0: entered allmulticast mode [ 288.596260][T10051] syzkaller0: entered promiscuous mode [ 288.679055][T10051] syzkaller0: entered allmulticast mode [ 289.086310][T10062] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.111076][T10062] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.705541][T10077] loop3: detected capacity change from 0 to 2048 [ 289.796113][T10077] loop3: p2 < > p4 [ 289.859022][T10077] loop3: p4 size 262144 extends beyond EOD, truncated [ 289.907352][ T972] hid-generic 0005:0457:0009.0019: unknown main item tag 0x0 [ 290.008664][ T972] hid-generic 0005:0457:0009.0019: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 291.832652][T10115] syzkaller0: entered promiscuous mode [ 291.860223][T10115] syzkaller0: entered allmulticast mode [ 292.875245][T10143] syzkaller0: entered promiscuous mode [ 292.880916][T10143] syzkaller0: entered allmulticast mode [ 292.959490][ T5834] hid-generic 0005:0457:0009.001A: unknown main item tag 0x0 [ 293.003711][ T5834] hid-generic 0005:0457:0009.001A: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 293.760468][T10164] loop3: detected capacity change from 0 to 2048 [ 293.844800][T10164] loop3: p2 < > p4 [ 293.879581][T10164] loop3: p4 size 262144 extends beyond EOD, truncated [ 294.062585][ T5772] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 294.064158][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.080499][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.111255][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.138406][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.149047][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 294.173936][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.189146][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.203417][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.237709][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.304332][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.314150][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.334364][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.371127][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.394412][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.606774][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.635534][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.661504][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.664647][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 294.692417][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.717031][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 294.738545][T10199] syzkaller0: entered promiscuous mode [ 294.751310][T10199] syzkaller0: entered allmulticast mode [ 295.536586][T10228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1396'. [ 296.487086][ T972] hid-generic 0005:0457:0009.001B: unknown main item tag 0x0 [ 296.519509][ T972] hid-generic 0005:0457:0009.001B: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 296.567749][T10243] syzkaller0: entered promiscuous mode [ 296.573347][T10243] syzkaller0: entered allmulticast mode [ 297.006028][T10253] syzkaller0: entered promiscuous mode [ 297.028408][T10253] syzkaller0: entered allmulticast mode [ 299.044070][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 299.047629][T10275] syzkaller0: entered promiscuous mode [ 299.058953][T10275] syzkaller0: entered allmulticast mode [ 299.061918][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1408'. [ 299.273640][T10284] syzkaller0: entered promiscuous mode [ 299.282332][T10284] syzkaller0: entered allmulticast mode [ 301.259082][T10307] syzkaller0: entered promiscuous mode [ 301.267920][ T5764] blk_print_req_error: 38 callbacks suppressed [ 301.267937][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.289570][T10307] syzkaller0: entered allmulticast mode [ 301.290762][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.346394][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.373781][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.381539][ T5764] buffer_io_error: 26 callbacks suppressed [ 301.381553][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.404533][ T972] hid-generic 0005:0457:0009.001C: unknown main item tag 0x0 [ 301.415905][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.424596][ T7909] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 301.426208][ T972] hid-generic 0005:0457:0009.001C: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 301.457311][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.474121][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.492519][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.515300][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.542269][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.553215][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.574036][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.636732][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.648140][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.688643][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.697140][ T7909] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 301.745155][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.799541][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 301.844843][T10318] syzkaller0: entered promiscuous mode [ 301.880373][T10318] syzkaller0: entered allmulticast mode [ 304.084740][ T27] audit: type=1326 audit(1787253260.960:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1418" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a8cb9e0d9 code=0x7fc00000 [ 304.492735][T10350] syzkaller0: entered promiscuous mode [ 304.507175][T10356] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10351] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10356] [ 304.520833][T10350] syzkaller0: entered allmulticast mode [ 304.532636][T10355] loop4: detected capacity change from 0 to 512 [ 304.707659][ T27] audit: type=1804 audit(1787253261.590:48): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1434" name="/newroot/110/file0/bus" dev="loop4" ino=1048934 res=1 errno=0 [ 306.880199][ T6853] hid-generic 0005:0457:0009.001D: unknown main item tag 0x0 [ 306.937566][ T6853] hid-generic 0005:0457:0009.001D: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 307.001625][T10398] syzkaller0: entered promiscuous mode [ 307.003840][ T5764] blk_print_req_error: 62 callbacks suppressed [ 307.003854][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.016471][T10398] syzkaller0: entered allmulticast mode [ 307.033910][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.051177][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.069810][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.094370][ T7909] buffer_io_error: 44 callbacks suppressed [ 307.094385][ T7909] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 307.108304][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.128551][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.164319][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.185425][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.228921][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.259355][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.278503][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.289959][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 307.305033][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.552481][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.557018][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.585663][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.602668][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.614504][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 307.623573][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 308.629499][T10434] loop0: detected capacity change from 0 to 2048 [ 308.670362][T10434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.721541][ T27] audit: type=1800 audit(1787253265.600:49): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1455" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 308.908724][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.007368][T10446] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 309.007368][T10446] The task syz.3.1458 (10446) triggered the difference, watch for misbehavior. [ 309.062579][ T5812] kernel write not supported for file /full (pid: 5812 comm: kworker/0:6) [ 309.205339][T10455] syzkaller0: entered promiscuous mode [ 309.210957][T10455] syzkaller0: entered allmulticast mode [ 309.977119][T10485] syzkaller0: entered promiscuous mode [ 309.982652][T10485] syzkaller0: entered allmulticast mode [ 311.136932][T10541] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1485'. [ 311.240600][T10506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.271067][T10506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 311.435764][T10506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.513038][T10506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.587680][T10506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.670956][T10506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 311.769925][T10506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.779557][T10506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.793158][T10506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.056789][ T5764] blk_print_req_error: 54 callbacks suppressed [ 312.056805][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.089314][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.114021][T10549] syzkaller0: entered promiscuous mode [ 312.130877][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.142464][T10549] syzkaller0: entered allmulticast mode [ 312.148521][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.168634][ T5764] buffer_io_error: 38 callbacks suppressed [ 312.168648][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.192515][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 312.202051][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.237008][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.248329][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.261524][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.271564][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.282426][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.307481][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 312.317131][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.380509][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.402335][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.404382][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 312.422975][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.438795][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.452488][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 312.594680][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 313.025654][T10577] loop3: detected capacity change from 0 to 1024 [ 313.106684][T10577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.194980][T10577] ext4 filesystem being mounted at /345/mysys supports timestamps until 2038-01-19 (0x7fffffff) [ 313.386589][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 313.474339][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 313.634368][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 313.925035][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.674908][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 315.041200][T10629] loop3: detected capacity change from 0 to 2048 [ 315.161860][T10629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.399100][ T27] audit: type=1800 audit(1787253272.280:50): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1512" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 315.560666][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 315.807651][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 316.002839][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.285976][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.840548][T10677] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1524'. [ 317.156045][T10690] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1527'. [ 317.238830][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.258172][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.936735][T10692] can0: slcan on ttyS3. [ 318.034545][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.050856][ T7969] blk_print_req_error: 58 callbacks suppressed [ 318.050873][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.077686][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.088568][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.098881][ T5764] buffer_io_error: 40 callbacks suppressed [ 318.098894][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.121328][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.130950][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.139945][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.151188][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.171901][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 318.180339][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.193017][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.212902][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.233861][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 318.254044][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.286425][T10691] can0 (unregistered): slcan off ttyS3. [ 318.823420][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.842128][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.879787][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.889494][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 318.908940][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 318.965624][T10736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1539'. [ 319.292258][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 319.791882][T10744] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 321.187182][T10805] loop2: detected capacity change from 0 to 2048 [ 321.258079][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.376762][ T27] audit: type=1800 audit(1787253278.250:51): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1561" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 321.491662][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.009380][T10826] can: request_module (can-proto-5) failed. [ 322.320765][T10831] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 322.367729][T10831] syzkaller0: entered promiscuous mode [ 322.393279][T10831] syzkaller0: entered allmulticast mode [ 323.158693][ T7969] blk_print_req_error: 70 callbacks suppressed [ 323.158710][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.217232][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.234403][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.243850][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.271813][ T5764] buffer_io_error: 50 callbacks suppressed [ 323.271829][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.285913][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 323.308027][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.331173][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.340169][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.349767][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.379079][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.406737][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.406853][T10845] veth1_to_hsr: entered allmulticast mode [ 323.424920][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.443122][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.503105][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.522498][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.554465][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 323.584369][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.593080][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 323.659846][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 324.061696][T10863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 324.451467][T10874] loop2: detected capacity change from 0 to 2048 [ 324.508923][T10874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.746828][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 324.772356][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.940030][ T27] audit: type=1326 audit(1787253281.820:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.0.1579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01f9d9e0d9 code=0x0 [ 325.258122][T10889] syzkaller0: entered promiscuous mode [ 325.263733][T10889] syzkaller0: entered allmulticast mode [ 326.613412][T10903] loop3: detected capacity change from 0 to 2048 [ 326.661550][T10903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.817178][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.890699][T10910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.322413][T10923] syzkaller0: entered promiscuous mode [ 327.362494][T10923] syzkaller0: entered allmulticast mode [ 328.620814][ T7969] blk_print_req_error: 78 callbacks suppressed [ 328.620829][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.651676][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.683690][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.711692][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.742001][ T5764] buffer_io_error: 56 callbacks suppressed [ 328.742016][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 328.773786][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 328.803831][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.847026][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 328.871575][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.896966][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 328.917014][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.944308][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 328.975558][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.004773][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 329.100954][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.121359][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.121692][T10956] syzkaller0: entered promiscuous mode [ 329.139188][T10957] loop0: detected capacity change from 0 to 2048 [ 329.144427][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 329.159739][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 329.168580][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 329.177263][T10956] syzkaller0: entered allmulticast mode [ 329.187651][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 329.431121][T10957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.828898][ T27] audit: type=1800 audit(1787253286.700:53): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1619" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 330.112621][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.806998][T10994] loop2: detected capacity change from 0 to 2048 [ 330.849815][T10994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.918771][ T27] audit: type=1800 audit(1787253287.800:54): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1630" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 331.100908][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.160783][T11005] syzkaller0: entered promiscuous mode [ 331.191489][T11005] syzkaller0: entered allmulticast mode [ 331.671882][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1642'. [ 332.463152][T11034] loop2: detected capacity change from 0 to 2048 [ 332.494049][T11034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.614243][ T27] audit: type=1800 audit(1787253289.490:55): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1645" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 332.748169][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.998181][ T27] audit: type=1326 audit(1787253289.880:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.3.1640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x0 [ 333.043254][T11055] syzkaller0: entered promiscuous mode [ 333.053197][T11055] syzkaller0: entered allmulticast mode [ 333.516301][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 333.571953][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1655'. [ 334.263118][ T7969] blk_print_req_error: 54 callbacks suppressed [ 334.263134][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.275193][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.309840][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.314334][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.334280][ T5764] buffer_io_error: 38 callbacks suppressed [ 334.334296][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.358750][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 334.374948][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.398122][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.415075][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.434496][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.447525][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.466448][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.492857][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.524269][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.630947][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.634796][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.650604][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.684890][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.693470][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 334.714389][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 335.218645][T11091] syzkaller0: entered promiscuous mode [ 335.227096][T11091] syzkaller0: entered allmulticast mode [ 336.724009][T11123] loop2: detected capacity change from 0 to 2048 [ 336.779282][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 336.838350][T11123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.960740][ T27] audit: type=1800 audit(1787253293.840:57): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1671" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 337.030838][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.238138][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 337.267645][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 337.335159][T11139] geneve2: entered promiscuous mode [ 337.355470][T11139] geneve2: entered allmulticast mode [ 338.276842][T11177] loop3: detected capacity change from 0 to 2048 [ 338.386229][T11177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.471709][ T27] audit: type=1800 audit(1787253295.350:58): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1685" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 338.515153][T11189] loop0: detected capacity change from 0 to 512 [ 338.608364][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.617411][T11189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.644849][T11189] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1690: iget: bad i_size value: 38620345925642 [ 338.712088][T11189] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1690: couldn't read orphan inode 15 (err -117) [ 338.736149][T11189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.883355][ T27] audit: type=1804 audit(1787253295.740:59): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1690" name="/newroot/450/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 339.152997][T11189] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1690: bg 0: block 5: invalid block bitmap [ 339.207315][T11189] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 339.252239][T11189] EXT4-fs (loop0): This should not happen!! Data will be lost [ 339.252239][T11189] [ 339.267410][ T5764] blk_print_req_error: 88 callbacks suppressed [ 339.267425][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.293035][T11189] EXT4-fs (loop0): Total free blocks count 0 [ 339.299951][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.309348][T11189] EXT4-fs (loop0): Free/Dirty block details [ 339.319480][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.348094][T11189] EXT4-fs (loop0): free_blocks=0 [ 339.353164][T11189] EXT4-fs (loop0): dirty_blocks=1 [ 339.362567][ T5764] buffer_io_error: 64 callbacks suppressed [ 339.362582][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.381833][T11189] EXT4-fs (loop0): Block reservation details [ 339.388969][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.414542][T11189] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 339.420642][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.441077][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.471857][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.492869][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.507896][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.522379][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.693768][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.693955][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.744902][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.777846][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 339.786653][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.841124][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.870304][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.884408][ T27] audit: type=1326 audit(1787253296.760:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.0.1701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01f9d9e0d9 code=0x0 [ 339.890596][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.935296][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 339.944123][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 340.217285][T11233] syzkaller0: entered promiscuous mode [ 340.222870][T11233] syzkaller0: entered allmulticast mode [ 340.911043][T11255] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1711'. [ 341.335795][T11268] syzkaller0: entered promiscuous mode [ 341.351734][T11268] syzkaller0: entered allmulticast mode [ 341.698661][ T27] audit: type=1326 audit(1787253298.580:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11277 comm="syz.3.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x0 [ 341.892332][T11288] loop0: detected capacity change from 0 to 128 [ 342.079135][T11298] loop0: detected capacity change from 0 to 512 [ 342.095991][T11298] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1724: iget: bad extended attribute block 1 [ 342.115689][T11298] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1724: couldn't read orphan inode 15 (err -117) [ 342.138325][T11298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.840403][T11133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 343.428411][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.777649][ T27] audit: type=1326 audit(1787253300.660:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11334 comm="syz.0.1739" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01f9d9e0d9 code=0x0 [ 344.062256][ T27] audit: type=1326 audit(1787253300.940:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x7ffc0000 [ 344.135737][ T27] audit: type=1326 audit(1787253300.940:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x7ffc0000 [ 344.194143][T11343] loop2: detected capacity change from 0 to 2048 [ 344.236966][ T27] audit: type=1326 audit(1787253300.970:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a3db9e0d9 code=0x7ffc0000 [ 344.239664][T11343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.297274][ T7969] blk_print_req_error: 95 callbacks suppressed [ 344.297291][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.315004][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.360314][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.369798][ T27] audit: type=1326 audit(1787253300.970:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x7ffc0000 [ 344.404530][ T5764] buffer_io_error: 69 callbacks suppressed [ 344.404547][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 344.417595][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.423345][ T27] audit: type=1326 audit(1787253300.970:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3db9e0d9 code=0x7ffc0000 [ 344.453320][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.456772][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 344.471828][ C1] Illegal XDP return value 16128 on prog (id 97) dev bond_slave_1, expect packet loss! [ 344.473262][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 344.504072][ T27] audit: type=1800 audit(1787253301.380:68): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1743" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 344.606900][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.790779][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.807556][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.812923][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.836412][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.849394][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 344.861974][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 344.866703][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.896121][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 344.954931][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 344.963532][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 345.013411][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 345.072231][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 345.366327][ T972] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 345.431056][ T972] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.449101][T11380] loop0: detected capacity change from 0 to 2048 [ 345.524786][T11380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.578914][ T27] audit: type=1800 audit(1787253302.460:69): pid=11380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1756" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 345.748607][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.889445][T11435] syzkaller0: entered promiscuous mode [ 346.898079][T11435] syzkaller0: entered allmulticast mode [ 347.263463][T11451] loop2: detected capacity change from 0 to 512 [ 347.295982][T11451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.366064][T11451] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1780: iget: bad i_size value: 38620345925642 [ 347.401033][T11451] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1780: couldn't read orphan inode 15 (err -117) [ 347.471532][T11451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.635025][ T27] audit: type=1804 audit(1787253304.510:70): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1780" name="/newroot/453/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 347.733493][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.886244][T11473] syzkaller0: entered promiscuous mode [ 347.902232][T11473] syzkaller0: entered allmulticast mode [ 348.284672][T11489] loop0: detected capacity change from 0 to 512 [ 348.334416][T11489] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a81ec018, mo2=0002] [ 348.342585][T11489] System zones: 0-2, 18-18, 34-35 [ 348.362110][T11489] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #4: comm syz.0.1793: pblk 19 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 348.381028][T11489] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.1793: Bad quota inode: 4, type: 1 [ 348.399300][T11489] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 348.424826][T11489] EXT4-fs (loop0): mount failed [ 349.431396][ T5764] blk_print_req_error: 115 callbacks suppressed [ 349.431412][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.445343][T11533] loop3: detected capacity change from 0 to 1024 [ 349.461322][T11533] EXT4-fs: Ignoring removed bh option [ 349.554954][T11533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.776090][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.026880][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.027596][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.037820][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.059554][ T5764] buffer_io_error: 83 callbacks suppressed [ 350.059568][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.070748][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.083810][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.099697][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.108654][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.118425][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.120456][ T7909] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 350.127576][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.148365][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.158086][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.168292][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.188170][T11559] syzkaller0: entered promiscuous mode [ 350.193828][T11559] syzkaller0: entered allmulticast mode [ 350.420246][T11570] loop0: detected capacity change from 0 to 512 [ 350.470563][T11570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.524965][T11570] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1825: iget: bad i_size value: 38620345925642 [ 350.589128][ T7969] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.599044][ T7969] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.609322][ T7969] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.614569][T11570] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1825: couldn't read orphan inode 15 (err -117) [ 350.625905][ T7969] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.638376][ T7969] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 350.686529][T11570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.743810][ T27] audit: type=1804 audit(1787253307.620:71): pid=11570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1825" name="/newroot/479/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 350.905578][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.093931][T11594] loop0: detected capacity change from 0 to 764 [ 351.191561][T11594] netlink: 'syz.0.1832': attribute type 9 has an invalid length. [ 351.223121][T11594] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1832'. [ 351.494619][T11603] syzkaller0: entered promiscuous mode [ 351.506455][T11603] syzkaller0: entered allmulticast mode [ 351.520908][T11609] loop0: detected capacity change from 0 to 128 [ 351.729264][T11614] loop2: detected capacity change from 0 to 512 [ 351.748372][T11614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.764510][T11614] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1840: iget: bad i_size value: 38620345925642 [ 351.784384][T11614] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1840: couldn't read orphan inode 15 (err -117) [ 351.819864][T11614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.852424][T11619] syzkaller0: entered promiscuous mode [ 351.858098][T11619] syzkaller0: entered allmulticast mode [ 351.922421][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.033481][T11623] loop0: detected capacity change from 0 to 128 [ 352.504526][T11642] loop3: detected capacity change from 0 to 512 [ 352.562089][T11642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.610713][T11649] loop0: detected capacity change from 0 to 512 [ 352.650936][T11649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.670695][T11642] EXT4-fs (loop3): 1 truncate cleaned up [ 352.697271][T11642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.720492][T11649] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1853: iget: bad i_size value: 38620345925642 [ 352.748652][T11649] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1853: couldn't read orphan inode 15 (err -117) [ 352.836635][T11649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.960818][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.986625][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.035504][T11659] syzkaller0: entered promiscuous mode [ 353.054907][T11659] syzkaller0: entered allmulticast mode [ 354.439645][ T5764] blk_print_req_error: 73 callbacks suppressed [ 354.439661][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.442333][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.481156][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.511640][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.522240][ T7909] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.553085][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.588924][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.605003][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.644309][ T27] audit: type=1800 audit(1787253311.510:72): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1868" name="file" dev="configfs" ino=24026 res=0 errno=0 [ 354.715514][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.758657][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 355.984109][ T7969] buffer_io_error: 68 callbacks suppressed [ 355.984126][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 356.021215][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.079529][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.125501][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.153051][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.204980][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.313879][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.430061][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 356.539438][ T7969] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 356.672059][ T5764] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 357.908165][T11754] syzkaller0: entered promiscuous mode [ 357.973291][T11754] syzkaller0: entered allmulticast mode [ 359.775536][ T5764] blk_print_req_error: 60 callbacks suppressed [ 359.775554][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.900671][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.087050][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.087147][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.147612][ T7969] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.158437][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.231867][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.266025][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.323693][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.344573][T11809] syzkaller0: entered promiscuous mode [ 360.362781][T11809] syzkaller0: entered allmulticast mode [ 360.510135][T11814] loop3: detected capacity change from 0 to 128 [ 360.520298][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.664721][T11814] loop3: detected capacity change from 128 to 0 [ 360.687541][T11817] syz.3.1900: attempt to access beyond end of device [ 360.687541][T11817] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 360.694879][T11814] loop_reread_partitions: partition scan of loop3 (ï5ŸA;¹8R÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-16) [ 360.747099][T11817] FAT-fs (loop3): Directory bread(block 3) failed [ 360.772293][T11817] syz.3.1900: attempt to access beyond end of device [ 360.772293][T11817] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 360.834543][ T5775] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.845405][T11817] FAT-fs (loop3): Directory bread(block 4) failed [ 360.851974][T11817] syz.3.1900: attempt to access beyond end of device [ 360.851974][T11817] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 360.868197][T11817] FAT-fs (loop3): Directory bread(block 5) failed [ 360.875768][T11817] syz.3.1900: attempt to access beyond end of device [ 360.875768][T11817] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 360.889486][T11817] FAT-fs (loop3): Directory bread(block 6) failed [ 360.897324][T11817] syz.3.1900: attempt to access beyond end of device [ 360.897324][T11817] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 360.911137][T11817] FAT-fs (loop3): Directory bread(block 3) failed [ 360.936452][T11817] syz.3.1900: attempt to access beyond end of device [ 360.936452][T11817] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 360.968682][T11817] FAT-fs (loop3): Directory bread(block 4) failed [ 360.977565][T11817] syz.3.1900: attempt to access beyond end of device [ 360.977565][T11817] loop3: rw=0, sector=5, nr_sectors = 1 limit=0 [ 360.990870][T11817] FAT-fs (loop3): Directory bread(block 5) failed [ 360.998240][T11817] syz.3.1900: attempt to access beyond end of device [ 360.998240][T11817] loop3: rw=0, sector=6, nr_sectors = 1 limit=0 [ 361.011608][T11817] FAT-fs (loop3): Directory bread(block 6) failed [ 361.018478][T11817] syz.3.1900: attempt to access beyond end of device [ 361.018478][T11817] loop3: rw=0, sector=3, nr_sectors = 1 limit=0 [ 361.042857][T11817] FAT-fs (loop3): Directory bread(block 3) failed [ 361.081383][T11817] syz.3.1900: attempt to access beyond end of device [ 361.081383][T11817] loop3: rw=0, sector=4, nr_sectors = 1 limit=0 [ 361.126319][T11817] FAT-fs (loop3): Directory bread(block 4) failed [ 361.368102][ T5772] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 361.569441][T11836] syzkaller0: entered promiscuous mode [ 361.576384][T11836] syzkaller0: entered allmulticast mode [ 361.964995][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 361.975420][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.118830][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.219313][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.376528][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.481710][T11862] loop0: detected capacity change from 0 to 2048 [ 362.574426][T11862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.915174][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.073525][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.096057][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.113559][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.123633][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.148463][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 363.158559][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.254806][T11889] loop0: detected capacity change from 0 to 8192 [ 363.395869][T11889] buffer_io_error: 32 callbacks suppressed [ 363.395887][T11889] Buffer I/O error on dev loop0, logical block 57847, async page read [ 363.442111][T11889] Buffer I/O error on dev loop0, logical block 57847, async page read [ 363.477793][ T27] audit: type=1800 audit(1787253320.360:73): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1923" name="file2" dev="loop0" ino=1048937 res=0 errno=0 [ 363.672835][T11906] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1927'. [ 363.721279][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 363.741759][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1927'. [ 364.250328][T11927] syzkaller0: entered promiscuous mode [ 364.266453][T11927] syzkaller0: entered allmulticast mode [ 364.801631][T11947] loop2: detected capacity change from 0 to 2048 [ 364.938271][T11947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.038793][T11884] chnl_net:caif_netlink_parms(): no params data found [ 365.162511][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.240584][ T51] Bluetooth: hci2: command tx timeout [ 365.533808][ T1093] hsr_slave_0: left promiscuous mode [ 365.617498][ T1093] hsr_slave_1: left promiscuous mode [ 365.640208][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.652806][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.670505][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.684781][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.695148][ T1093] bridge_slave_0: left allmulticast mode [ 365.700924][ T1093] bridge_slave_0: left promiscuous mode [ 365.708717][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.772355][ T1093] veth1_macvtap: left promiscuous mode [ 365.787962][ T1093] veth0_macvtap: left promiscuous mode [ 365.801685][ T1093] veth1_vlan: left promiscuous mode [ 365.815723][ T1093] veth0_vlan: left promiscuous mode [ 366.589567][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 366.631533][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 366.673460][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.721184][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.770129][ T1093] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 367.061720][ T1093] bond0 (unregistering): Released all slaves [ 367.244473][T11884] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.251642][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.314457][ T5775] Bluetooth: hci2: command tx timeout [ 367.320511][T11884] bridge_slave_0: entered allmulticast mode [ 367.329457][T11884] bridge_slave_0: entered promiscuous mode [ 367.339947][T11884] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.347508][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.355057][T11884] bridge_slave_1: entered allmulticast mode [ 367.362430][T11884] bridge_slave_1: entered promiscuous mode [ 367.502944][T11884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.573352][T11884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.688327][T11884] team0: Port device team_slave_0 added [ 367.736280][T11884] team0: Port device team_slave_1 added [ 367.829632][T11884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.853863][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.892765][T11884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.965574][T11884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.979957][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.013370][T12030] loop0: detected capacity change from 0 to 2048 [ 368.034647][T11884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.101738][T12024] syzkaller0: entered promiscuous mode [ 368.107508][T12024] syzkaller0: entered allmulticast mode [ 368.115640][T12030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.195187][ T27] audit: type=1800 audit(1787253325.080:74): pid=12030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1961" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 368.383007][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.414914][T11884] hsr_slave_0: entered promiscuous mode [ 368.441893][T12046] loop2: detected capacity change from 0 to 512 [ 368.449915][T11884] hsr_slave_1: entered promiscuous mode [ 368.464731][T11884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.489062][T11884] Cannot create hsr debugfs directory [ 368.489079][T12046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.563966][T12046] EXT4-fs (loop2): 1 truncate cleaned up [ 368.604461][T12046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.752597][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.113962][T11884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.153945][T11884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.171222][T12071] loop2: detected capacity change from 0 to 2048 [ 369.221607][T11884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.246224][T12071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.275879][T11884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.371556][ T27] audit: type=1800 audit(1787253326.250:75): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1972" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 369.402636][ T5775] Bluetooth: hci2: command tx timeout [ 369.467861][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.648846][T11884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.660501][T12090] loop2: detected capacity change from 0 to 512 [ 369.689894][T12090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.727143][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.776984][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.784208][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.813268][T12090] EXT4-fs (loop2): 1 truncate cleaned up [ 369.856499][T12090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.902813][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.910032][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.095497][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1979'. [ 370.096189][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.127505][T12103] veth0_macvtap: left promiscuous mode [ 370.198911][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1979'. [ 370.581186][T11884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.474409][ T5775] Bluetooth: hci2: command tx timeout [ 371.485961][T11884] veth0_vlan: entered promiscuous mode [ 371.503813][T12164] loop0: detected capacity change from 0 to 512 [ 371.511604][T11884] veth1_vlan: entered promiscuous mode [ 371.558350][T12164] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.616159][T12164] EXT4-fs (loop0): 1 truncate cleaned up [ 371.623033][T12164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.684080][T11884] veth0_macvtap: entered promiscuous mode [ 371.761294][T11884] veth1_macvtap: entered promiscuous mode [ 371.826133][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.833965][T12171] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 371.844027][T12171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.998365][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.013281][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.027500][T12182] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2002'. [ 372.038702][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.104430][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.146667][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.180192][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.212080][T11884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.260434][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.289732][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.314806][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.338869][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.364674][T11884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.394537][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.425911][T11884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.505793][T11884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.520975][T11884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.534490][T11884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.543227][T11884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.801483][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.825299][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.905105][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.931247][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.221690][T12227] loop2: detected capacity change from 0 to 512 [ 374.249135][T12227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.290099][T12227] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2015: iget: bad i_size value: 38620345925642 [ 374.309960][T12227] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2015: couldn't read orphan inode 15 (err -117) [ 374.335468][T12227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.510232][ T28] hid-generic 0005:0457:0009.001F: unknown main item tag 0x0 [ 374.559225][ T28] hid-generic 0005:0457:0009.001F: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 374.594017][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.832814][T12246] loop5: detected capacity change from 0 to 512 [ 374.886637][T12246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 374.908594][T12248] syzkaller0: entered promiscuous mode [ 374.922309][T12248] syzkaller0: entered allmulticast mode [ 374.961409][T12246] EXT4-fs (loop5): 1 truncate cleaned up [ 375.137105][T12246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.231940][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.391146][T12256] syzkaller0: entered promiscuous mode [ 375.431918][T12256] syzkaller0: entered allmulticast mode [ 376.523669][T12274] loop5: detected capacity change from 0 to 512 [ 376.563253][T12274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.654696][T12274] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2026: iget: bad i_size value: 38620345925642 [ 376.827550][T12274] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2026: couldn't read orphan inode 15 (err -117) [ 376.849112][T12274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.998661][ T23] hid-generic 0005:0457:0009.0020: unknown main item tag 0x0 [ 377.041064][ T23] hid-generic 0005:0457:0009.0020: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 377.084640][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.710451][T12312] syzkaller0: entered promiscuous mode [ 377.719612][T12312] syzkaller0: entered allmulticast mode [ 377.730985][T12310] loop0: detected capacity change from 0 to 128 [ 377.889627][T12317] loop0: detected capacity change from 0 to 512 [ 377.928315][T12317] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2035: iget: bad extended attribute block 1 [ 377.970453][T12317] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2035: couldn't read orphan inode 15 (err -117) [ 377.996317][T12317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.090825][T12323] loop5: detected capacity change from 0 to 128 [ 378.169503][ T27] audit: type=1800 audit(1787253335.050:76): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2037" name="file1" dev="loop5" ino=1048941 res=0 errno=0 [ 378.269530][T12329] bio_check_eod: 9 callbacks suppressed [ 378.269546][T12329] syz.5.2037: attempt to access beyond end of device [ 378.269546][T12329] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 378.322860][T12323] syz.5.2037: attempt to access beyond end of device [ 378.322860][T12323] loop5: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 378.370322][T12331] loop2: detected capacity change from 0 to 512 [ 378.405658][T12331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.434491][T12331] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2041: iget: bad i_size value: 38620345925642 [ 378.470083][T12331] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2041: couldn't read orphan inode 15 (err -117) [ 378.514944][T12331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.657189][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.708479][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725370][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.785887][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.835392][T12343] syzkaller0: entered promiscuous mode [ 378.875174][T12343] syzkaller0: entered allmulticast mode [ 378.896804][T12345] syzkaller0: entered promiscuous mode [ 378.929676][T12345] syzkaller0: entered allmulticast mode [ 380.172247][ T23] hid-generic 0005:0457:0009.0021: unknown main item tag 0x0 [ 380.201669][ T23] hid-generic 0005:0457:0009.0021: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 380.212227][T12369] loop0: detected capacity change from 0 to 512 [ 380.259077][T12369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 380.378613][T12369] EXT4-fs (loop0): 1 truncate cleaned up [ 380.399623][T12369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.898640][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.051253][T12380] loop5: detected capacity change from 0 to 512 [ 381.108521][T12380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.133442][T12384] loop0: detected capacity change from 0 to 128 [ 381.180048][T12380] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2054: iget: bad i_size value: 38620345925642 [ 381.198656][T12385] syzkaller0: entered promiscuous mode [ 381.210981][T12385] syzkaller0: entered allmulticast mode [ 381.231020][T12380] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2054: couldn't read orphan inode 15 (err -117) [ 381.277362][T12380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.362867][T12395] loop0: detected capacity change from 0 to 512 [ 381.395117][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.423371][T12395] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2053: iget: bad extended attribute block 1 [ 381.506188][T12395] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2053: couldn't read orphan inode 15 (err -117) [ 381.560357][T12395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.028892][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.201523][T12424] loop0: detected capacity change from 0 to 512 [ 382.221323][T12424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.233462][T12424] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2065: iget: bad i_size value: 38620345925642 [ 382.257829][T12424] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2065: couldn't read orphan inode 15 (err -117) [ 382.272532][T12424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.378309][ T27] audit: type=1804 audit(1787253339.260:77): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2065" name="/newroot/545/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 382.448071][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.649115][T12443] syzkaller0: entered promiscuous mode [ 382.674920][T12443] syzkaller0: entered allmulticast mode [ 382.682889][T12446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2070'. [ 382.847287][T12454] loop2: detected capacity change from 0 to 128 [ 382.913141][T12456] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 382.987179][T12458] loop2: detected capacity change from 0 to 512 [ 383.046126][T12458] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2073: iget: bad extended attribute block 1 [ 383.123059][T12458] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2073: couldn't read orphan inode 15 (err -117) [ 383.158832][T12458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.176675][T12466] loop5: detected capacity change from 0 to 512 [ 383.205200][T12466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.243434][T12466] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2076: iget: bad i_size value: 38620345925642 [ 383.342712][T12472] syzkaller0: entered promiscuous mode [ 383.353710][T12472] syzkaller0: entered allmulticast mode [ 383.380327][T12466] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2076: couldn't read orphan inode 15 (err -117) [ 383.419438][T12466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.498402][ T27] audit: type=1804 audit(1787253340.380:78): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2076" name="/newroot/16/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 383.567526][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.710734][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 383.729604][T12480] macvlan0: entered promiscuous mode [ 383.740994][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 383.829775][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 383.854024][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.872949][ T9] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.146042][T12499] X25: received unknown 00 with LCI 000 [ 384.160232][T12492] fido_id[12492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 384.468525][T12514] tipc: Enabling of bearer rejected, failed to enable media [ 384.520693][T12516] loop5: detected capacity change from 0 to 512 [ 384.573795][T12516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.608203][T12516] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2091: iget: bad i_size value: 38620345925642 [ 384.640180][T12523] loop0: detected capacity change from 0 to 128 [ 384.661906][T12516] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2091: couldn't read orphan inode 15 (err -117) [ 384.679943][T12516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.703713][ T27] audit: type=1804 audit(1787253341.580:79): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2091" name="/newroot/20/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 384.757437][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.811947][ T7969] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.959797][T12529] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2093: iget: bad extended attribute block 1 [ 385.024069][T12529] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2093: couldn't read orphan inode 15 (err -117) [ 385.081007][T12529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.592737][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.608442][T12559] X25: received unknown 00 with LCI 000 [ 386.428393][T12592] set_capacity_and_notify: 1 callbacks suppressed [ 386.428409][T12592] loop0: detected capacity change from 0 to 512 [ 386.477429][T12592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.559739][T12592] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2113: iget: bad i_size value: 38620345925642 [ 386.592268][T12592] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2113: couldn't read orphan inode 15 (err -117) [ 386.662871][T12592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.719340][ T27] audit: type=1804 audit(1787253343.600:80): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2113" name="/newroot/559/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 386.789069][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.257304][T12638] loop0: detected capacity change from 0 to 512 [ 388.298588][T12638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.354023][T12638] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2124: iget: bad i_size value: 38620345925642 [ 388.466624][T12638] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2124: couldn't read orphan inode 15 (err -117) [ 388.539077][T12638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.704438][ T27] audit: type=1804 audit(1787253345.580:81): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2124" name="/newroot/563/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 388.890312][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.900861][T12664] loop5: detected capacity change from 0 to 128 [ 389.180993][T12672] X25: received unknown 00 with LCI 000 [ 389.195448][T12676] loop5: detected capacity change from 0 to 512 [ 389.235353][T12676] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2131: iget: bad extended attribute block 1 [ 389.289018][T12676] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2131: couldn't read orphan inode 15 (err -117) [ 389.350106][T12676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.841302][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.178538][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 390.379848][T12699] syzkaller0: entered promiscuous mode [ 390.411602][T12699] syzkaller0: entered allmulticast mode [ 391.611501][T12717] loop5: detected capacity change from 0 to 764 [ 391.830565][T12728] loop0: detected capacity change from 0 to 512 [ 391.936580][T12728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.002370][T12728] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.017852][T12732] loop5: detected capacity change from 0 to 2048 [ 392.113802][T12732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.174471][ T27] audit: type=1800 audit(1787253349.060:82): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2147" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 392.211795][T12730] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 392.326677][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.367610][T12730] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 392.422474][T12730] EXT4-fs (loop5): This should not happen!! Data will be lost [ 392.422474][T12730] [ 392.447379][T12730] EXT4-fs (loop5): Total free blocks count 0 [ 392.453503][T12730] EXT4-fs (loop5): Free/Dirty block details [ 392.491602][T12730] EXT4-fs (loop5): free_blocks=2415919504 [ 392.508190][T12730] EXT4-fs (loop5): dirty_blocks=16 [ 392.520345][T12730] EXT4-fs (loop5): Block reservation details [ 392.535431][T12730] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 392.608948][T12754] syzkaller0: entered promiscuous mode [ 392.623213][ T78] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 392.624305][T12754] syzkaller0: entered allmulticast mode [ 393.544073][T12788] syzkaller0: entered promiscuous mode [ 393.574978][T12788] syzkaller0: entered allmulticast mode [ 395.187453][T12820] tmpfs: Bad value for 'mpol' [ 396.238215][ T27] audit: type=1326 audit(1787253353.120:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12830 comm="syz.0.2177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01f9d9e0d9 code=0x0 [ 396.868370][T12872] loop5: detected capacity change from 0 to 164 [ 398.503458][ T27] audit: type=1326 audit(1787253355.380:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.0.2195" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01f9d9e0d9 code=0x0 [ 400.007039][T12927] loop0: detected capacity change from 0 to 764 [ 400.348405][T12942] loop0: detected capacity change from 0 to 128 [ 400.474502][ T7969] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.936347][T12951] loop0: detected capacity change from 0 to 512 [ 400.953866][ T7969] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.201965][T12951] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2213: iget: bad extended attribute block 1 [ 401.306993][T12951] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2213: couldn't read orphan inode 15 (err -117) [ 401.330260][T12951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.629748][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.350797][ T27] audit: type=1326 audit(1787253359.220:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12943 comm="syz.4.2215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a8cb9e0d9 code=0x0 [ 403.117455][T13000] loop2: detected capacity change from 0 to 128 [ 403.218795][ T5764] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.339001][T13006] loop2: detected capacity change from 0 to 512 [ 403.347756][ T5764] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.418783][T13006] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2228: iget: bad extended attribute block 1 [ 403.489152][T13006] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2228: couldn't read orphan inode 15 (err -117) [ 403.504945][T13006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.020965][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.123658][T13033] sg_write: process 137 (syz.5.2238) changed security contexts after opening file descriptor, this is not allowed. [ 404.178504][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 404.592892][T13050] loop5: detected capacity change from 0 to 4096 [ 404.640159][T13050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.700274][T13063] loop0: detected capacity change from 0 to 128 [ 404.826916][ T7969] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.923172][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.961230][T13070] loop0: detected capacity change from 0 to 512 [ 405.003009][T13070] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2245: iget: bad extended attribute block 1 [ 405.041248][T13070] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2245: couldn't read orphan inode 15 (err -117) [ 405.069806][T13070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.588153][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 405.601576][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.609322][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2249'. [ 405.660271][T13087] geneve2: entered promiscuous mode [ 405.676192][T13087] geneve2: entered allmulticast mode [ 405.809467][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 406.546670][T13125] loop0: detected capacity change from 0 to 128 [ 406.691340][T13125] loop0: detected capacity change from 0 to 512 [ 406.742333][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 406.753373][T13125] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2258: iget: bad extended attribute block 1 [ 406.814838][T13125] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2258: couldn't read orphan inode 15 (err -117) [ 406.899479][T13125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.012526][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.041675][T13144] openvswitch: netlink: Message has 34 unknown bytes. [ 407.501856][T13159] syzkaller0: entered promiscuous mode [ 407.514538][T13159] syzkaller0: entered allmulticast mode [ 407.649716][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 407.833206][T13173] loop5: detected capacity change from 0 to 128 [ 407.980683][T13173] loop5: detected capacity change from 0 to 512 [ 407.998058][T13173] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2273: iget: bad extended attribute block 1 [ 408.018619][T13173] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2273: couldn't read orphan inode 15 (err -117) [ 408.101471][T13173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.390200][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.472111][T13191] syzkaller0: entered promiscuous mode [ 408.498462][T13191] syzkaller0: entered allmulticast mode [ 408.594928][T13198] sctp: [Deprecated]: syz.5.2279 (pid 13198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.594928][T13198] Use struct sctp_sack_info instead [ 408.824002][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 409.942993][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.953674][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.962229][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.970374][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.979867][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.987835][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.410882][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.498906][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 410.646210][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.962451][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.099543][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.392026][T13236] chnl_net:caif_netlink_parms(): no params data found [ 411.731420][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 411.767814][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.787722][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.804639][T13236] bridge_slave_0: entered allmulticast mode [ 411.812098][T13236] bridge_slave_0: entered promiscuous mode [ 411.830027][T13236] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.844588][T13236] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.884412][T13236] bridge_slave_1: entered allmulticast mode [ 411.891747][T13236] bridge_slave_1: entered promiscuous mode [ 412.012541][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.052152][ T5775] Bluetooth: hci1: command tx timeout [ 412.080046][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.184757][ T27] audit: type=1326 audit(1787253369.060:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.2.2306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f471479e0d9 code=0x0 [ 412.450290][T13236] team0: Port device team_slave_0 added [ 412.518333][T13236] team0: Port device team_slave_1 added [ 412.625811][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.632808][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.666978][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.687100][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.694080][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.735046][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.842123][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 413.069030][T13236] hsr_slave_0: entered promiscuous mode [ 413.098488][T13236] hsr_slave_1: entered promiscuous mode [ 413.150196][T13236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.184988][T13236] Cannot create hsr debugfs directory [ 413.331993][T13338] syzkaller0: entered promiscuous mode [ 413.339483][T13338] syzkaller0: entered allmulticast mode [ 413.617054][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'. [ 414.116048][ T5775] Bluetooth: hci1: command tx timeout [ 414.343144][ T155] hsr_slave_0: left promiscuous mode [ 414.373649][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.386379][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.402370][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.415738][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.425767][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 414.441858][T13383] loop5: detected capacity change from 0 to 128 [ 414.454716][ T155] bridge_slave_0: left allmulticast mode [ 414.460628][ T155] bridge_slave_0: left promiscuous mode [ 414.472371][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.517138][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 414.568004][ T155] veth1_macvtap: left promiscuous mode [ 414.573701][ T155] veth1_vlan: left promiscuous mode [ 414.589763][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'. [ 414.622669][ T155] veth0_vlan: left promiscuous mode [ 414.630835][T13390] loop5: detected capacity change from 0 to 512 [ 414.669722][T13390] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2328: iget: bad extended attribute block 1 [ 414.709100][T13390] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2328: couldn't read orphan inode 15 (err -117) [ 414.756186][T13390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.307610][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.481072][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 415.565240][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'. [ 415.920324][ T155] team0 (unregistering): Port device team_slave_1 removed [ 415.981657][ T155] team0 (unregistering): Port device team_slave_0 removed [ 416.047580][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.048722][T13433] loop2: detected capacity change from 0 to 128 [ 416.122052][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.143506][T13434] loop2: detected capacity change from 0 to 512 [ 416.167044][T13434] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2342: iget: bad extended attribute block 1 [ 416.182821][T13434] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2342: couldn't read orphan inode 15 (err -117) [ 416.202551][ T5775] Bluetooth: hci1: command tx timeout [ 416.211042][T13434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.238125][ T155] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 416.521406][ T155] bond0 (unregistering): Released all slaves [ 416.920160][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 416.942053][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2344'. [ 416.953327][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.500931][T13457] syzkaller0: entered promiscuous mode [ 417.516911][T13457] syzkaller0: entered allmulticast mode [ 417.628704][T13236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.651585][T13236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.691965][T13236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.752165][T13236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.015386][T13472] netlink: 'syz.5.2352': attribute type 3 has an invalid length. [ 418.023175][T13472] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2352'. [ 418.077032][T13472] PF_CAN: dropped non conform CAN XL skbuff: dev type 1, len 40 [ 418.099792][T13474] loop2: detected capacity change from 0 to 128 [ 418.151834][T13236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.203649][T13236] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.219781][T13475] loop2: detected capacity change from 0 to 512 [ 418.247413][T13475] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2353: iget: bad extended attribute block 1 [ 418.265110][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.272278][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.292970][ T5775] Bluetooth: hci1: command tx timeout [ 418.330211][T13475] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2353: couldn't read orphan inode 15 (err -117) [ 418.361966][T13475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.387906][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.395123][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.789512][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.910840][T13236] veth0_vlan: entered promiscuous mode [ 418.918607][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 418.959008][T13236] veth1_vlan: entered promiscuous mode [ 418.973513][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.042386][T13236] veth0_macvtap: entered promiscuous mode [ 419.077625][T13236] veth1_macvtap: entered promiscuous mode [ 419.124802][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.140819][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.163455][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.180402][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.190787][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 419.199817][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.220714][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.253531][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.287875][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.336408][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.352974][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.375817][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.404259][T13236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.450153][T13236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.481260][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.513707][T13236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.526329][T13236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.535649][T13236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.544935][T13236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.650020][T13492] syzkaller0: entered promiscuous mode [ 419.658723][T13492] syzkaller0: entered allmulticast mode [ 419.821544][T13496] loop2: detected capacity change from 0 to 128 [ 419.844794][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.852662][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.942615][T13497] loop2: detected capacity change from 0 to 512 [ 419.979801][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.021175][T13497] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2362: iget: bad extended attribute block 1 [ 420.039059][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.090625][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2363'. [ 420.123640][T13497] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2362: couldn't read orphan inode 15 (err -117) [ 420.187788][T13497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.321300][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2365'. [ 420.651205][T13520] syzkaller0: entered promiscuous mode [ 420.657267][T13520] syzkaller0: entered allmulticast mode [ 420.728854][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.856565][T13525] loop5: detected capacity change from 0 to 512 [ 420.919105][T13525] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start ffffffff) [ 420.941517][T13525] FAT-fs (loop5): Filesystem has been set read-only [ 421.407719][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.418455][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.428671][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.437752][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.450386][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 421.460763][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.850144][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.059168][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.150790][ T27] audit: type=1326 audit(1787253379.030:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.5.2385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f920d79e0d9 code=0x0 [ 422.193216][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.223804][T13536] chnl_net:caif_netlink_parms(): no params data found [ 422.285911][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.366957][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.380410][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.392823][T13536] bridge_slave_0: entered allmulticast mode [ 422.407115][T13536] bridge_slave_0: entered promiscuous mode [ 422.440807][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.463637][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.473994][T13536] bridge_slave_1: entered allmulticast mode [ 422.482203][T13536] bridge_slave_1: entered promiscuous mode [ 422.552923][T13536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.589775][T13536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.732267][T13536] team0: Port device team_slave_0 added [ 422.748749][T13536] team0: Port device team_slave_1 added [ 422.882548][T13536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.901669][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.964424][T13536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.107497][T13588] loop0: detected capacity change from 0 to 128 [ 423.174930][T13536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.181926][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.297292][T13595] loop0: detected capacity change from 0 to 512 [ 423.297443][T13536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.334448][T13595] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2395: iget: bad extended attribute block 1 [ 423.379975][T13595] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2395: couldn't read orphan inode 15 (err -117) [ 423.428357][T13595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.525535][T13536] hsr_slave_0: entered promiscuous mode [ 423.551977][T13536] hsr_slave_1: entered promiscuous mode [ 423.561467][ T5775] Bluetooth: hci4: command tx timeout [ 423.576848][T13536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.595483][T13536] Cannot create hsr debugfs directory [ 423.667418][T13600] syzkaller0: entered promiscuous mode [ 423.673151][T13600] syzkaller0: entered allmulticast mode [ 424.010706][T13236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.793677][T13657] loop5: detected capacity change from 0 to 128 [ 424.854992][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 424.987177][T13665] loop5: detected capacity change from 0 to 512 [ 425.081495][T13665] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2410: iget: bad extended attribute block 1 [ 425.131792][T13665] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2410: couldn't read orphan inode 15 (err -117) [ 425.180590][T13665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.368090][ T155] hsr_slave_0: left promiscuous mode [ 425.383189][ T155] hsr_slave_1: left promiscuous mode [ 425.415444][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.429568][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.443387][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.459835][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.469920][ T155] bridge_slave_0: left allmulticast mode [ 425.476070][ T155] bridge_slave_0: left promiscuous mode [ 425.481919][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.558826][ T155] veth1_macvtap: left promiscuous mode [ 425.572394][ T155] veth0_macvtap: left promiscuous mode [ 425.589790][ T155] veth1_vlan: left promiscuous mode [ 425.601930][ T155] veth0_vlan: left promiscuous mode [ 425.636809][ T5775] Bluetooth: hci4: command tx timeout [ 425.706361][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.827105][ T155] team0 (unregistering): Port device team_slave_1 removed [ 426.872146][ T155] team0 (unregistering): Port device team_slave_0 removed [ 426.916896][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.961419][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.017141][ T155] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 427.292630][ T155] bond0 (unregistering): Released all slaves [ 427.726278][ T5775] Bluetooth: hci4: command tx timeout [ 427.768617][T13536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.793483][T13536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.832976][T13536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.889062][T13536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.942072][T13718] loop5: detected capacity change from 0 to 128 [ 428.029574][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 428.204922][T13727] loop5: detected capacity change from 0 to 512 [ 428.243014][T13727] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2419: iget: bad extended attribute block 1 [ 428.300228][T13727] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2419: couldn't read orphan inode 15 (err -117) [ 428.389029][T13727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.413601][T13536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.500045][T13536] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.532730][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.539945][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.582440][ T27] audit: type=1326 audit(1787253385.460:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.4.2422" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a8cb9e0d9 code=0x0 [ 428.638905][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.646151][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.721556][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.327515][T13536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.403820][T13756] loop5: detected capacity change from 0 to 128 [ 429.487036][T13536] veth0_vlan: entered promiscuous mode [ 429.542165][T13536] veth1_vlan: entered promiscuous mode [ 429.561945][T13763] loop5: detected capacity change from 0 to 512 [ 429.612158][T13763] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2424: iget: bad extended attribute block 1 [ 429.642658][T13763] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2424: couldn't read orphan inode 15 (err -117) [ 429.666188][T13536] veth0_macvtap: entered promiscuous mode [ 429.673923][T13763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.698963][T13536] veth1_macvtap: entered promiscuous mode [ 429.794472][ T5775] Bluetooth: hci4: command tx timeout [ 429.798128][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.838398][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.891602][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.921997][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.946739][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.974181][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.995889][T13536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.086305][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.097202][T13765] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 430.126459][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.143941][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.171242][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.193601][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.215245][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.243215][T13536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.281381][T11884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.300368][T13536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.350437][T13536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.405463][T13536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.439056][T13536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.605353][T13791] syzkaller0: entered promiscuous mode [ 430.620127][T13791] syzkaller0: entered allmulticast mode [ 430.856813][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.880656][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.978642][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.996032][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.779341][T13842] syzkaller0: entered promiscuous mode [ 431.792568][T13842] syzkaller0: entered allmulticast mode [ 432.142681][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 433.031454][T13885] syzkaller0: entered promiscuous mode [ 433.038477][T13885] syzkaller0: entered allmulticast mode [ 433.248247][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 433.386232][ T27] audit: type=1326 audit(1787253390.270:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.2.2450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a3359e0d9 code=0x0 [ 434.551718][T13912] syzkaller0: entered promiscuous mode [ 434.557423][T13912] syzkaller0: entered allmulticast mode [ 434.902694][T13925] random: crng reseeded on system resumption [ 435.108282][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 436.353736][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2481'. [ 436.585757][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2486'. [ 436.915175][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 437.228918][ T27] audit: type=1326 audit(1787253394.110:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13994 comm="syz.0.2499" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3fa99e0d9 code=0x0 [ 437.432147][T14005] loop5: detected capacity change from 0 to 1024 [ 437.455982][T14005] EXT4-fs: Ignoring removed orlov option [ 437.481482][T14005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.515929][T14005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.593136][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 437.675162][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2506'. [ 437.763093][ T6853] logitech-hidpp-device 0003:046D:C082.0023: Device not connected [ 437.983926][T14033] loop5: detected capacity change from 0 to 512 [ 437.999329][T14033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 438.021164][T14033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 438.051694][T14033] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 438.133635][ T5764] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.844947][ T6853] IPVS: starting estimator thread 0... [ 438.856866][T14046] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 438.966066][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 439.010883][T14047] IPVS: using max 21 ests per chain, 50400 per kthread [ 439.146197][T14058] capability: warning: `syz.5.2520' uses deprecated v2 capabilities in a way that may be insecure [ 439.550185][T14077] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2530'. [ 439.581705][T14077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.604731][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 439.797817][T14088] syzkaller0: entered promiscuous mode [ 439.803473][T14088] syzkaller0: entered allmulticast mode [ 440.130520][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.147859][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.256806][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 440.383079][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 441.270182][T14150] Bluetooth: MGMT ver 1.22 [ 441.499142][T14158] loop2: detected capacity change from 0 to 164 [ 442.274435][T14177] netlink: 'syz.0.2568': attribute type 3 has an invalid length. [ 442.298049][T14177] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2568'. [ 443.223483][T14197] syzkaller0: entered promiscuous mode [ 443.239972][T14197] syzkaller0: entered allmulticast mode [ 443.976644][T14225] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2587'. [ 444.622534][T14250] loop2: detected capacity change from 0 to 512 [ 444.660544][T14250] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 444.710311][T14250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 444.766151][T14250] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 446.259920][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 448.197681][T14330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.431514][T14336] process 'syz.2.2627' launched './file0' with NULL argv: empty string added [ 449.083022][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.091079][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.111522][T14355] loop0: detected capacity change from 0 to 512 [ 449.166060][T14355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 449.198427][T14355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 449.241212][T14355] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 451.277437][T14332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.382342][T14374] ieee802154 phy0 wpan0: encryption failed: -126 [ 451.403432][T14332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.283250][T14332] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.308810][T14332] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.323462][T14332] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.332845][T14332] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.410684][T14387] loop0: detected capacity change from 0 to 32768 [ 452.620020][T14387] loop0: p1 p2 p3 < p5 > [ 452.689630][T14387] loop0: p1 size 242222080 extends beyond EOD, truncated [ 452.868724][T14387] loop0: p2 start 16777215 is beyond EOD, truncated [ 453.364270][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2650'. [ 453.627570][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 453.627809][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 453.657219][ T7909] udevd[7909]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 455.085112][T14436] loop2: detected capacity change from 0 to 512 [ 456.128846][T14455] loop5: detected capacity change from 0 to 256 [ 456.884320][T14460] loop2: detected capacity change from 0 to 32768 [ 456.926149][T14460] loop2: p1 p2 p3 < p5 > [ 456.930854][T14460] loop2: p1 size 242222080 extends beyond EOD, truncated [ 456.939944][T14460] loop2: p2 start 16777215 is beyond EOD, truncated [ 457.278141][ T7969] udevd[7969]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 457.291452][ T7909] udevd[7909]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 457.300236][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 457.904347][T14521] lo: entered allmulticast mode [ 460.226569][T14585] loop0: detected capacity change from 0 to 128 [ 460.276189][T14585] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.337802][T14585] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 460.361311][T14589] loop5: detected capacity change from 0 to 512 [ 460.385940][T14589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 460.415830][T14589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.443281][T14589] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 461.335851][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 461.892825][T14617] loop2: detected capacity change from 0 to 512 [ 461.947565][T14617] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 461.971457][T14617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.991409][T14617] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 463.545001][T14642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2752'. [ 463.869291][T14659] loop5: detected capacity change from 0 to 512 [ 463.890246][T14659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 463.923104][T14659] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 463.938841][T14659] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 465.886553][T14696] loop5: detected capacity change from 0 to 512 [ 465.903172][T14696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 465.924438][T14696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 465.935160][T14696] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 467.025488][T14713] loop5: detected capacity change from 0 to 512 [ 467.139591][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2781'. [ 467.732271][T14736] loop5: detected capacity change from 0 to 512 [ 467.757063][T14736] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.773118][T14736] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 467.783523][T14736] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 469.187017][T14767] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.849853][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.866265][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.101977][T14786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.246547][T14786] syz.4.2807 (14786) used greatest stack depth: 20072 bytes left [ 470.897348][T14798] syzkaller0: entered promiscuous mode [ 470.930199][T14798] syzkaller0: entered allmulticast mode [ 471.175976][T14802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.341380][T14831] netlink: 'syz.0.2825': attribute type 3 has an invalid length. [ 473.349423][T14831] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2825'. [ 474.242861][T14822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.737197][T14850] loop5: detected capacity change from 0 to 512 [ 474.745921][T14850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 474.758257][T14850] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 474.940141][T14850] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 475.042700][T14852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.332054][T14864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.782016][T14869] [ 476.784385][T14869] ====================================================== [ 476.791408][T14869] WARNING: possible circular locking dependency detected [ 476.798453][T14869] syzkaller #0 Not tainted [ 476.802879][T14869] ------------------------------------------------------ [ 476.809910][T14869] syz.4.2837/14869 is trying to acquire lock: [ 476.815984][T14869] ffff888148cc4160 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 476.827599][T14869] [ 476.827599][T14869] but task is already holding lock: [ 476.834974][T14869] ffff88805e06f520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 476.844194][T14869] [ 476.844194][T14869] which lock already depends on the new lock. [ 476.844194][T14869] [ 476.854610][T14869] [ 476.854610][T14869] the existing dependency chain (in reverse order) is: [ 476.863648][T14869] [ 476.863648][T14869] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 476.867325][T14876] netlink: 'syz.2.2839': attribute type 3 has an invalid length. [ 476.871349][T14869] __mutex_lock+0x135/0xc80 [ 476.884154][T14869] tcm_set_name+0x2a/0x90 [ 476.889035][T14869] function_make+0x199/0x350 [ 476.894192][T14869] configfs_mkdir+0x515/0x9e0 [ 476.899399][T14869] vfs_mkdir+0x2a5/0x470 [ 476.904189][T14869] do_mkdirat+0x1dc/0x450 [ 476.909035][T14869] __x64_sys_mkdir+0x6e/0x80 [ 476.914139][T14869] do_syscall_64+0x55/0xb0 [ 476.919108][T14869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.925589][T14869] [ 476.925589][T14869] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 476.933836][T14869] __mutex_lock+0x135/0xc80 [ 476.938860][T14869] configfs_rmdir+0x63c/0x980 [ 476.944050][T14869] vfs_rmdir+0x352/0x4b0 [ 476.948805][T14869] do_rmdir+0x29f/0x590 [ 476.953502][T14869] __x64_sys_rmdir+0x49/0x50 [ 476.958612][T14869] do_syscall_64+0x55/0xb0 [ 476.963546][T14869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.969961][T14869] [ 476.969961][T14869] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 476.978647][T14869] __lock_acquire+0x37ef/0x7d80 [ 476.984142][T14869] lock_acquire+0x19e/0x420 [ 476.989187][T14869] down_write+0x97/0x200 [ 476.994393][T14869] configfs_depend_item_unlocked+0x157/0x430 [ 477.000896][T14869] usbg_make_tpg+0x1f7/0x580 [ 477.006007][T14869] target_fabric_make_tpg+0xa4/0x6d0 [ 477.011852][T14869] configfs_mkdir+0x515/0x9e0 [ 477.017049][T14869] vfs_mkdir+0x2a5/0x470 [ 477.021824][T14869] do_mkdirat+0x1dc/0x450 [ 477.026667][T14869] __x64_sys_mkdir+0x6e/0x80 [ 477.031766][T14869] do_syscall_64+0x55/0xb0 [ 477.036695][T14869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.043102][T14869] [ 477.043102][T14869] other info that might help us debug this: [ 477.043102][T14869] [ 477.053339][T14869] Chain exists of: [ 477.053339][T14869] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 477.053339][T14869] [ 477.068049][T14869] Possible unsafe locking scenario: [ 477.068049][T14869] [ 477.075502][T14869] CPU0 CPU1 [ 477.080857][T14869] ---- ---- [ 477.086210][T14869] lock(&opts->dep_lock); [ 477.090616][T14869] lock(gadget_subsys.su_mutex); [ 477.098152][T14869] lock(&opts->dep_lock); [ 477.105081][T14869] lock(&sb->s_type->i_mutex_key#22); [ 477.110534][T14869] [ 477.110534][T14869] *** DEADLOCK *** [ 477.110534][T14869] [ 477.118675][T14869] 5 locks held by syz.4.2837/14869: [ 477.123868][T14869] #0: ffff8881426fe418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 477.133147][T14869] #1: ffff8880796d2ef0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 477.143951][T14869] #2: ffffffff8db2ae10 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 477.153707][T14869] #3: ffffffff8de586e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 477.163366][T14869] #4: ffff88805e06f520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 477.172850][T14869] [ 477.172850][T14869] stack backtrace: [ 477.178743][T14869] CPU: 0 PID: 14869 Comm: syz.4.2837 Not tainted syzkaller #0 [ 477.186192][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.196240][T14869] Call Trace: [ 477.199512][T14869] [ 477.202435][T14869] dump_stack_lvl+0x18c/0x250 [ 477.207115][T14869] ? load_image+0x420/0x420 [ 477.211632][T14869] ? show_regs_print_info+0x20/0x20 [ 477.216828][T14869] ? print_circular_bug+0x12b/0x1a0 [ 477.222022][T14869] check_noncircular+0x2fc/0x400 [ 477.226963][T14869] ? look_up_lock_class+0x75/0x140 [ 477.232074][T14869] ? print_deadlock_bug+0x5d0/0x5d0 [ 477.237270][T14869] ? lockdep_lock+0xf5/0x230 [ 477.241857][T14869] ? __lock_acquire+0x357f/0x7d80 [ 477.246876][T14869] ? _find_first_zero_bit+0xd6/0x100 [ 477.252196][T14869] __lock_acquire+0x37ef/0x7d80 [ 477.257050][T14869] ? is_bpf_text_address+0x28f/0x2a0 [ 477.262350][T14869] ? verify_lock_unused+0x140/0x140 [ 477.267548][T14869] lock_acquire+0x19e/0x420 [ 477.272047][T14869] ? configfs_depend_item_unlocked+0x157/0x430 [ 477.278196][T14869] ? trace_raw_output_contention_end+0xd0/0xd0 [ 477.284347][T14869] ? __might_sleep+0xe0/0xe0 [ 477.288960][T14869] ? rcu_is_watching+0x15/0xb0 [ 477.293719][T14869] ? read_lock_is_recursive+0x20/0x20 [ 477.299085][T14869] ? trace_contention_end+0x39/0xe0 [ 477.304273][T14869] ? __mutex_lock+0x30d/0xc80 [ 477.308948][T14869] ? do_syscall_64+0x55/0xb0 [ 477.313528][T14869] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.319592][T14869] down_write+0x97/0x200 [ 477.323827][T14869] ? configfs_depend_item_unlocked+0x157/0x430 [ 477.329974][T14869] ? down_read_killable+0x340/0x340 [ 477.335169][T14869] configfs_depend_item_unlocked+0x157/0x430 [ 477.341146][T14869] usbg_make_tpg+0x1f7/0x580 [ 477.345738][T14869] ? usbg_drop_tport+0x20/0x20 [ 477.350495][T14869] ? vscnprintf+0x80/0x80 [ 477.354844][T14869] target_fabric_make_tpg+0xa4/0x6d0 [ 477.360124][T14869] ? target_fabric_release_wwn+0xb0/0xb0 [ 477.365751][T14869] configfs_mkdir+0x515/0x9e0 [ 477.370427][T14869] vfs_mkdir+0x2a5/0x470 [ 477.374663][T14869] do_mkdirat+0x1dc/0x450 [ 477.378985][T14869] ? vfs_mkdir+0x470/0x470 [ 477.383394][T14869] ? getname_flags+0x20a/0x500 [ 477.388156][T14869] __x64_sys_mkdir+0x6e/0x80 [ 477.392737][T14869] do_syscall_64+0x55/0xb0 [ 477.397145][T14869] ? clear_bhb_loop+0x40/0x90 [ 477.401881][T14869] ? clear_bhb_loop+0x40/0x90 [ 477.406550][T14869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.412433][T14869] RIP: 0033:0x7f1a8cb9e0d9 [ 477.416851][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.436448][T14869] RSP: 002b:00007f1a8da87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 477.444856][T14869] RAX: ffffffffffffffda RBX: 00007f1a8ce25fa0 RCX: 00007f1a8cb9e0d9 [ 477.452816][T14869] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 477.460778][T14869] RBP: 00007f1a8cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 477.468739][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.476697][T14869] R13: 00007f1a8ce26038 R14: 00007f1a8ce25fa0 R15: 00007ffd36ed3528 [ 477.484670][T14869] [ 477.493117][T14876] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.2839'. [ 477.529643][T14869] se_device not configured yet, cannot port link