last executing test programs: 1m27.87991992s ago: executing program 0 (id=693): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 1m27.779060861s ago: executing program 0 (id=694): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) clock_adjtime(0x0, &(0x7f0000000300)={0x66b9, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x10000000000, 0x0, 0xfffffffffffffffd, 0x248a, 0x0, 0x6, 0x0, 0x804000000000, 0x0, 0x0, 0x40000008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) 1m27.778859001s ago: executing program 0 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}}, 0x1c}}, 0x0) 1m27.754976501s ago: executing program 0 (id=696): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0xffffffff, 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2080004, &(0x7f0000000240), 0x5, 0x7b7, &(0x7f0000001bc0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1m26.830397777s ago: executing program 0 (id=697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 1m25.926855854s ago: executing program 0 (id=711): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x20, 0x0) 1m25.647215926s ago: executing program 32 (id=711): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x20, 0x0) 39.804786489s ago: executing program 1 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 39.620602001s ago: executing program 1 (id=1064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x3100, 0x2, 0x0) 39.499156661s ago: executing program 1 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) shmdt(0x0) 39.370240282s ago: executing program 1 (id=1078): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") writev(r0, &(0x7f0000000180)=[{&(0x7f0000000740)="d359512d5cbad0805444827da4f0c978e5c227dc45c1de0b0f82da401f172ed2c24b44d1c7dff56bc114e39fc93990565d97d67da69bea78fbaa382d500884094d99505dd9a9499866b4763d996d67389a56686d3902b04cdf6223e83d2e1805e94aff76388b1e2c12446b891082a63586dfd3f7293f4aba41393ef0be7f5a650e628ddc9b5b0f5aff7f8e004aea504242e462323b7e27ecf17f5503afa439ab9b92be9c99cddcf12ff1", 0xaa}], 0x1) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000cc2000/0x4000)=nil, 0x4000, 0x0) 37.979144582s ago: executing program 1 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_sigqueueinfo(0x0, 0x19, 0x0) 35.078898913s ago: executing program 1 (id=1103): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x4, @remote}, {0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1, {[0x0, 0x0, 0x0, 0xfffff490, 0x1]}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7096f03fd015db95, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, r6}, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 35.025272223s ago: executing program 33 (id=1103): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x4, @remote}, {0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1, {[0x0, 0x0, 0x0, 0xfffff490, 0x1]}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7096f03fd015db95, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, r6}, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 5.212707763s ago: executing program 3 (id=1481): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000"], 0xfd, 0x6b1, &(0x7f0000001f80)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5.048941384s ago: executing program 3 (id=1482): recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=' ', 0x0, 0x3}, 0x50) 4.879061225s ago: executing program 3 (id=1483): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000014"], 0x50}}], 0x1, 0x0) 4.859042716s ago: executing program 3 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x118}}, 0x0) 4.719075027s ago: executing program 3 (id=1486): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)="5caf3d", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 4.665599237s ago: executing program 3 (id=1487): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c0001c008000140e000000208000a400000000205000300020000140900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.522290922s ago: executing program 5 (id=1496): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x8000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000600)=""/98, 0x18) 1.858727616s ago: executing program 2 (id=1508): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.603758809s ago: executing program 6 (id=1510): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000fdff"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 1.45044984s ago: executing program 2 (id=1513): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.41714846s ago: executing program 5 (id=1514): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000100003800400040008000200fd7f0000180001801400020076657468305f746f5f626f6e64"], 0x3c}}, 0x0) 1.38263022s ago: executing program 4 (id=1515): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x2, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x24, 0x0, 0x0) 1.303112401s ago: executing program 2 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.269079311s ago: executing program 2 (id=1517): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) 1.227159041s ago: executing program 5 (id=1518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 1.151094351s ago: executing program 6 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) 1.132128622s ago: executing program 5 (id=1520): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.078363152s ago: executing program 2 (id=1521): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 999.120663ms ago: executing program 6 (id=1522): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fe02f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 977.893433ms ago: executing program 4 (id=1523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0xa0, 0x5e}, {@in6=@loopback, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0xfffffffffffffffd, 0x400000000000000}, {0xfff, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) 938.277493ms ago: executing program 5 (id=1524): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820f", 0x8c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 935.312784ms ago: executing program 6 (id=1525): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0xfd4c}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x0) 811.032324ms ago: executing program 4 (id=1526): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) statx(0xffffffffffffffff, &(0x7f00000027c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3100, 0x2, 0x0) 786.003054ms ago: executing program 4 (id=1527): socket$inet6(0xa, 0x2, 0x0) r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 733.332095ms ago: executing program 6 (id=1528): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) fcntl$setlease(r0, 0x400, 0x1) fchown(r0, 0x0, 0xffffffffffffffff) 634.124175ms ago: executing program 4 (id=1529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@abort}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 633.868635ms ago: executing program 6 (id=1530): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x600) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='status\x00') r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 596.015046ms ago: executing program 2 (id=1531): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffc94, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 342.468808ms ago: executing program 4 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='task_rename\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) syz_clone(0x18090800, &(0x7f0000000640)="9a3f4f5e2ad42b73efe090594d40347dbf86c5b473483ad8227996396d77b2981ebb93ebff9eb114c5a483fe2bde54621393b4eb1703e74b35d16e95011f6459a5985e5beee3fb48daccb4f5313d870904fa2d133b550e91a50044c8a051384528637c6b682881a0e8b020eea3f00d47dede44b9468d196da459c323476e3759760353d00798e5d6b07b4216b026f49fbde989678ded50f8f8e6881e1e3fa9eb9dafef110248ca574484413686", 0xffffffa5, 0x0, &(0x7f00000000c0), &(0x7f0000001e00)="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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) munlockall() kernel console output (not intermixed with test programs): ip=0xffffa51a03f0 code=0x7ffc0000 [ 114.309130][ T5509] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.316572][ T5510] Unable to read rock-ridge attributes [ 114.392413][ T5509] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 114.802298][ T5522] netlink: 72 bytes leftover after parsing attributes in process `syz.1.517'. [ 115.521570][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 115.819684][ T5541] netlink: 'syz.4.529': attribute type 6 has an invalid length. [ 115.952921][ T5549] loop1: detected capacity change from 0 to 764 [ 116.174639][ T5556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'. [ 116.881888][ T5555] loop3: detected capacity change from 0 to 164 [ 116.935816][ T5555] Unable to read rock-ridge attributes [ 117.351935][ T5568] device bond1 entered promiscuous mode [ 117.365691][ T5568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.421007][ T5568] bond1 (unregistering): Released all slaves [ 118.702066][ T5600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.548'. [ 119.469714][ T5601] loop2: detected capacity change from 0 to 164 [ 119.586348][ T5601] Unable to read rock-ridge attributes [ 119.824174][ T5621] loop4: detected capacity change from 0 to 512 [ 120.034976][ T5629] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 120.044670][ T5621] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 120.162021][ T5633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'. [ 121.193636][ T5651] loop1: detected capacity change from 0 to 164 [ 121.198547][ T5651] Unable to read rock-ridge attributes [ 121.358384][ T5624] loop3: detected capacity change from 0 to 8192 [ 121.410984][ T5624] attempt to access beyond end of device [ 121.410984][ T5624] loop3: rw=0, want=57848, limit=8192 [ 121.418067][ T5624] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 121.429864][ T5624] FAT-fs (loop3): Filesystem has been set read-only [ 121.443149][ T5624] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 121.447136][ T5624] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 121.960360][ T5674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.581'. [ 122.754335][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 122.781753][ T5682] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 122.799992][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.814809][ T5682] device bridge_slave_1 left promiscuous mode [ 122.814978][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.864906][ T5689] loop0: detected capacity change from 0 to 512 [ 122.869706][ T5682] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 122.962139][ T5689] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.592: bg 0: block 35: padding at end of block bitmap is not set [ 122.972494][ T5689] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 122.976707][ T5689] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.592: invalid indirect mapped block 4294967295 (level 1) [ 122.987313][ T5689] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.592: invalid indirect mapped block 4294967295 (level 2) [ 123.061433][ T5689] EXT4-fs (loop0): 1 truncate cleaned up [ 123.063088][ T5689] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,dioread_lock,journal_dev=0x0000000000000200,,errors=continue. Quota mode: none. [ 123.120555][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 123.123276][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 123.262926][ T5711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.597'. [ 123.944480][ T5712] loop1: detected capacity change from 0 to 164 [ 124.029913][ T5712] Unable to read rock-ridge attributes [ 124.068187][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 124.324769][ T5744] netlink: 116 bytes leftover after parsing attributes in process `syz.1.615'. [ 124.427760][ T5754] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.435401][ T5741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.471640][ T5757] loop0: detected capacity change from 0 to 164 [ 124.526369][ T5757] Unable to read rock-ridge attributes [ 124.550255][ T5741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.567736][ T5761] loop2: detected capacity change from 0 to 512 [ 124.634014][ T5761] EXT4-fs (loop2): Ignoring removed oldalloc option [ 124.636257][ T5741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.653543][ T5761] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.623: Parent and EA inode have the same ino 15 [ 124.664776][ T5761] EXT4-fs (loop2): Remounting filesystem read-only [ 124.669118][ T5761] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.623: Parent and EA inode have the same ino 15 [ 124.675164][ T5761] EXT4-fs (loop2): Remounting filesystem read-only [ 124.678350][ T5761] EXT4-fs (loop2): 1 orphan inode deleted [ 124.683629][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 124.725036][ T5741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.013046][ T5741] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.031858][ T5741] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.064393][ T5741] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.079702][ T5741] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.243360][ T5783] netlink: 'syz.1.622': attribute type 32 has an invalid length. [ 125.268611][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 125.295857][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 125.295871][ T26] audit: type=1326 audit(125.270:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.310889][ T26] audit: type=1326 audit(125.290:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.329335][ T26] audit: type=1326 audit(125.290:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.334745][ T26] audit: type=1326 audit(125.290:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.341103][ T5792] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.373208][ T26] audit: type=1326 audit(125.290:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.389779][ T5796] Unsupported ieee802154 address type: 0 [ 125.392476][ T26] audit: type=1326 audit(125.290:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.419907][ T26] audit: type=1326 audit(125.290:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.425131][ T26] audit: type=1326 audit(125.300:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.431365][ T5794] futex_wake_op: syz.2.638 tries to shift op by -1; fix this program [ 125.435459][ T5798] loop0: detected capacity change from 0 to 2048 [ 125.469220][ T26] audit: type=1326 audit(125.300:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.487179][ T26] audit: type=1326 audit(125.300:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 125.499651][ T5794] loop2: detected capacity change from 0 to 164 [ 125.742060][ T5810] Invalid ELF header type: 3 != 1 [ 125.846990][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.958019][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.007679][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.070981][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.237940][ T5812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.256862][ T5812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.270535][ T5812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.283839][ T5812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.389323][ T5818] 9pnet: Insufficient options for proto=fd [ 126.552051][ T5827] loop3: detected capacity change from 0 to 164 [ 126.646600][ T5827] Unable to read rock-ridge attributes [ 126.963929][ T5847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.074339][ T5847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.209274][ T5847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.268346][ T5847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.433481][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.441021][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 127.477989][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.490378][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.496600][ T5847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.562670][ T5867] loop2: detected capacity change from 0 to 512 [ 127.572737][ T5867] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 127.793238][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.801735][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.821007][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.834254][ T5878] device bridge_slave_0 left promiscuous mode [ 127.842482][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.866296][ T5878] device bridge_slave_1 left promiscuous mode [ 127.887725][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.952295][ T5878] bond0: (slave bond_slave_0): Releasing backup interface [ 128.008487][ T5878] bond0: (slave bond_slave_1): Releasing backup interface [ 128.037893][ T5887] loop1: detected capacity change from 0 to 164 [ 128.107064][ T5878] team0: Port device team_slave_0 removed [ 128.127695][ T5878] team0: Port device team_slave_1 removed [ 128.132143][ T5887] Unable to read rock-ridge attributes [ 128.143792][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.148854][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.153699][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.157576][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.206568][ T5882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.276440][ T5882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.357101][ T5882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.426436][ T5882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.587608][ T5882] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.621850][ T5882] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.637831][ T5882] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.656564][ T5892] loop2: detected capacity change from 0 to 512 [ 128.685744][ T5882] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.947281][ T5896] loop1: detected capacity change from 0 to 1024 [ 129.012296][ T5896] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.015012][ T5896] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.044823][ T5896] JBD2: no valid journal superblock found [ 129.046351][ T5896] EXT4-fs (loop1): error loading journal [ 129.065045][ T5898] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.174717][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.681'. [ 129.192741][ T5898] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.213656][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.218138][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.227748][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.260131][ T5898] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.314547][ T5898] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.655072][ T5915] loop4: detected capacity change from 0 to 1024 [ 129.775297][ T5915] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.974004][ T5922] loop4: detected capacity change from 0 to 128 [ 130.259860][ T5926] loop0: detected capacity change from 0 to 164 [ 130.337037][ T5926] Unable to read rock-ridge attributes [ 131.050148][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.051823][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.275157][ T5944] loop0: detected capacity change from 0 to 512 [ 131.308694][ T5944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.317343][ T5944] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 131.324504][ T5944] EXT4-fs (loop0): 1 truncate cleaned up [ 131.326038][ T5944] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 131.343609][ T5944] device geneve2 entered promiscuous mode [ 132.199469][ T4029] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /100/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.209200][ T4029] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.216523][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.220588][ T4029] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /100/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.226634][ T4029] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.231995][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.236223][ T4029] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /100/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.242532][ T4029] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.248187][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.252102][ T4029] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /100/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.259395][ T4029] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.265451][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.270240][ T4029] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz-executor: path /100/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.276758][ T4029] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 132.282729][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.288421][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.293513][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.298323][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.303528][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.308745][ T4029] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.418929][ T5898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.425039][ T5898] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.439934][ T5898] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.448754][ T5898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.558031][ T5953] tipc: Started in network mode [ 132.559489][ T5953] tipc: Node identity , cluster identity 4711 [ 132.560954][ T5953] tipc: Failed to obtain node identity [ 132.562347][ T5953] tipc: Enabling of bearer rejected, failed to enable media [ 132.597965][ T5954] loop4: detected capacity change from 0 to 512 [ 132.661180][ T5954] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #17: comm syz.4.699: iget: bogus i_mode (0) [ 132.664897][ T5954] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.699: couldn't read orphan inode 17 (err -117) [ 132.670477][ T5954] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 132.676147][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 132.687647][ T5963] loop3: detected capacity change from 0 to 164 [ 132.747623][ T5963] Unable to read rock-ridge attributes [ 132.767555][ T5965] loop2: detected capacity change from 0 to 512 [ 132.846011][ T5965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.862282][ T5965] EXT4-fs (loop2): 1 truncate cleaned up [ 132.865110][ T5965] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,max_dir_size_kb=0x0000000000000080,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 132.874220][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 132.874232][ T26] audit: type=1326 audit(132.741:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.891640][ T26] audit: type=1326 audit(132.751:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.916958][ T26] audit: type=1326 audit(132.751:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.922559][ T26] audit: type=1326 audit(132.769:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.927923][ T26] audit: type=1326 audit(132.769:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.940319][ T26] audit: type=1326 audit(132.769:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.947134][ T26] audit: type=1326 audit(132.788:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.953882][ T26] audit: type=1326 audit(132.788:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.959234][ T26] audit: type=1326 audit(132.788:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 132.965134][ T26] audit: type=1326 audit(132.788:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 133.580318][ T5975] loop4: detected capacity change from 0 to 512 [ 133.689503][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 133.954014][ T5998] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 134.369390][ T6013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 134.371413][ T6013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.384292][ T6013] vhci_hcd vhci_hcd.0: Device attached [ 134.388904][ T6018] vhci_hcd: connection closed [ 134.391389][ T293] vhci_hcd: stop threads [ 134.394536][ T293] vhci_hcd: release socket [ 134.396787][ T293] vhci_hcd: disconnect device [ 134.427777][ T6019] loop3: detected capacity change from 0 to 1024 [ 134.517365][ T6019] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.520252][ T6019] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.557520][ T6019] JBD2: no valid journal superblock found [ 134.558995][ T6019] EXT4-fs (loop3): error loading journal [ 134.561992][ T6024] loop4: detected capacity change from 0 to 164 [ 134.600262][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 134.904109][ T6024] Unable to read rock-ridge attributes [ 135.091178][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.101403][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.115029][ T5984] device bridge_slave_0 entered promiscuous mode [ 135.146168][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.157694][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.173154][ T5984] device bridge_slave_1 entered promiscuous mode [ 135.296720][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.301239][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.388895][ T5984] team0: Port device team_slave_0 added [ 135.435166][ T5984] team0: Port device team_slave_1 added [ 135.440929][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 135.488444][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.490126][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.528791][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.536004][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.537814][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.579721][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.710019][ T6052] Invalid ELF header type: 3 != 1 [ 135.740753][ T5984] device hsr_slave_0 entered promiscuous mode [ 135.768745][ T5272] Bluetooth: hci2: command 0x0409 tx timeout [ 135.785745][ T5984] device hsr_slave_1 entered promiscuous mode [ 135.806627][ T5984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.808603][ T5984] Cannot create hsr debugfs directory [ 135.923989][ T5984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.969354][ T5984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.985450][ T6042] ODEBUG: Out of memory. ODEBUG disabled [ 136.106376][ T5984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.179530][ T5984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.331594][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.341688][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.344011][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.364746][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.376514][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.379289][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.381677][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.383369][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.418869][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.421678][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.427455][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.445695][ T6055] loop1: detected capacity change from 0 to 1024 [ 136.448724][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.450479][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.459082][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.462027][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.482560][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 136.485329][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.494727][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.500374][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.508647][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.509453][ T6059] loop2: detected capacity change from 0 to 1024 [ 136.525918][ T6063] loop3: detected capacity change from 0 to 164 [ 136.537016][ T5984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.540767][ T5984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.547413][ T6055] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 136.557639][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.560819][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.563333][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.574461][ T6059] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.577629][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.592944][ T6063] Unsupported NM flag settings (8) [ 136.594870][ T6059] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 136.609001][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.627810][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.769819][ T6059] JBD2: no valid journal superblock found [ 136.771265][ T6059] EXT4-fs (loop2): error loading journal [ 136.803609][ T6055] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 137.616637][ T6073] loop3: detected capacity change from 0 to 164 [ 137.755676][ T6073] Unable to read rock-ridge attributes [ 137.821136][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.823270][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.845795][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.957721][ T6085] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.971261][ T4935] Bluetooth: hci2: command 0x041b tx timeout [ 138.110733][ T6085] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.435226][ T6110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.752'. [ 139.091502][ T6104] Invalid ELF header type: 3 != 1 [ 139.136399][ T6107] loop4: detected capacity change from 0 to 1024 [ 139.187705][ T6085] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.353494][ T6107] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 139.374349][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.378296][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.393529][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.396346][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.399877][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.402425][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.418265][ T6085] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.736067][ T5984] device veth0_vlan entered promiscuous mode [ 139.743339][ T5984] device veth1_vlan entered promiscuous mode [ 139.763703][ T6107] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 139.859222][ T5984] device veth0_macvtap entered promiscuous mode [ 139.883984][ T5984] device veth1_macvtap entered promiscuous mode [ 139.923520][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.932977][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.941269][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.951565][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.966757][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.976464][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.980298][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.189793][ T4076] Bluetooth: hci2: command 0x040f tx timeout [ 140.379958][ T6141] loop3: detected capacity change from 0 to 512 [ 140.453042][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.497037][ T6142] netlink: 48 bytes leftover after parsing attributes in process `syz.4.763'. [ 140.752192][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.164084][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.169126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.180877][ T6141] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 141.185388][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.188145][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.192136][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.234105][ T6141] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.764: corrupted inode contents [ 141.238937][ T6141] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.764: mark_inode_dirty error [ 141.242191][ T6141] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.764: corrupted inode contents [ 141.245416][ T6141] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.764: mark_inode_dirty error [ 141.261058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.266109][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.268712][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.275527][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.278293][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.281273][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.284915][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.288546][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.294686][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.297715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.320235][ T5984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.324001][ T5984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.326417][ T5984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.328557][ T5984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.433737][ T6085] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.446437][ T6085] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.466381][ T6085] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.486615][ T6085] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.519801][ T364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.622460][ T4712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.624749][ T4712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.633352][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.636053][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.638077][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.641096][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.658837][ T364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.751025][ T364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.061680][ T6156] loop3: detected capacity change from 0 to 1024 [ 142.413905][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 142.433203][ T364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.485475][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,errors=remount-ro,dioread_lock,user_xattr,quota,. Quota mode: writeback. [ 142.531573][ T6177] netlink: 'syz.1.775': attribute type 6 has an invalid length. [ 142.535884][ T6180] loop5: detected capacity change from 0 to 164 [ 142.552306][ T6177] netlink: 3653 bytes leftover after parsing attributes in process `syz.1.775'. [ 142.558959][ T6156] EXT4-fs (loop3): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 142.570094][ T6180] Unable to read rock-ridge attributes [ 143.615136][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.781'. [ 143.844102][ T6200] loop2: detected capacity change from 0 to 512 [ 144.230109][ T6200] EXT4-fs (loop2): Ignoring removed oldalloc option [ 144.282214][ T6200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm +}[@: Parent and EA inode have the same ino 15 [ 144.292443][ T6200] EXT4-fs (loop2): Remounting filesystem read-only [ 144.294055][ T6200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm +}[@: Parent and EA inode have the same ino 15 [ 144.340384][ T6200] EXT4-fs (loop2): Remounting filesystem read-only [ 144.342299][ T6200] EXT4-fs (loop2): 1 orphan inode deleted [ 144.365753][ T6200] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 144.446666][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 144.446679][ T26] audit: type=1326 audit(143.564:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.480879][ T26] audit: type=1326 audit(143.592:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.497667][ T6217] loop3: detected capacity change from 0 to 512 [ 144.509895][ T26] audit: type=1326 audit(143.592:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.514919][ T26] audit: type=1326 audit(143.592:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.574473][ T26] audit: type=1326 audit(143.592:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.595235][ T26] audit: type=1326 audit(143.592:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.600655][ T26] audit: type=1326 audit(143.601:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 144.656030][ T6217] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.790: bg 0: block 35: padding at end of block bitmap is not set [ 144.664712][ T6217] EXT4-fs (loop3): Remounting filesystem read-only [ 144.666336][ T6217] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 144.677445][ T6217] EXT4-fs (loop3): Remounting filesystem read-only [ 144.679093][ T6217] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.790: invalid indirect mapped block 4294967295 (level 1) [ 144.687732][ T6217] EXT4-fs (loop3): Remounting filesystem read-only [ 144.694028][ T6217] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.790: invalid indirect mapped block 4294967295 (level 2) [ 144.714970][ T6239] loop5: detected capacity change from 0 to 164 [ 144.741111][ T6217] EXT4-fs (loop3): Remounting filesystem read-only [ 144.742879][ T6217] EXT4-fs (loop3): 1 truncate cleaned up [ 144.744389][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,bsddf,. Quota mode: none. [ 144.763138][ T6239] Unable to read rock-ridge attributes [ 145.070481][ T26] audit: type=1326 audit(144.135:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 145.076290][ T26] audit: type=1326 audit(144.135:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 145.082102][ T26] audit: type=1326 audit(144.144:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=19 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 146.234841][ T6300] serio: Serial port ptm0 [ 146.312089][ T6310] loop3: detected capacity change from 0 to 164 [ 146.345437][ T6310] Unable to read rock-ridge attributes [ 147.671227][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.874757][ T6361] loop1: detected capacity change from 0 to 164 [ 147.962797][ T6364] sock: sock_timestamping_bind_phc: sock not bind to device [ 147.995344][ T6361] Unable to read rock-ridge attributes [ 148.007987][ T6364] lo speed is unknown, defaulting to 1000 [ 148.009502][ T6364] lo speed is unknown, defaulting to 1000 [ 148.011195][ T6364] lo speed is unknown, defaulting to 1000 [ 148.026993][ T6364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.037796][ T6364] lo speed is unknown, defaulting to 1000 [ 148.040026][ T6364] lo speed is unknown, defaulting to 1000 [ 148.041928][ T6364] lo speed is unknown, defaulting to 1000 [ 148.043795][ T6364] lo speed is unknown, defaulting to 1000 [ 148.045671][ T6364] lo speed is unknown, defaulting to 1000 [ 148.795821][ T6364] lo speed is unknown, defaulting to 1000 [ 149.105498][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.851'. [ 149.169089][ T6420] loop2: detected capacity change from 0 to 164 [ 149.237581][ T6420] Unable to read rock-ridge attributes [ 149.380751][ T364] device hsr_slave_0 left promiscuous mode [ 149.428997][ T364] device hsr_slave_1 left promiscuous mode [ 150.271695][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.273867][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.277307][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.279336][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.288578][ T364] device bridge_slave_1 left promiscuous mode [ 150.293309][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.359723][ T364] device bridge_slave_0 left promiscuous mode [ 150.361437][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.496136][ T364] device veth1_macvtap left promiscuous mode [ 150.497967][ T364] device veth0_macvtap left promiscuous mode [ 150.499601][ T364] device veth1_vlan left promiscuous mode [ 150.501570][ T364] device veth0_vlan left promiscuous mode [ 150.696511][ T364] team0 (unregistering): Port device team_slave_1 removed [ 150.706110][ T4756] infiniband syz1: ib_query_port failed (-19) [ 150.708284][ T364] team0 (unregistering): Port device team_slave_0 removed [ 150.719007][ T364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.781312][ T364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.900640][ T364] bond0 (unregistering): Released all slaves [ 150.992616][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.857'. [ 151.011931][ T6457] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 151.120800][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 151.120814][ T26] audit: type=1326 audit(149.803:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.863" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 151.133036][ T26] audit: type=1326 audit(149.812:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.170115][ T26] audit: type=1326 audit(149.812:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.175553][ T26] audit: type=1326 audit(149.831:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.863" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 151.224985][ T26] audit: type=1326 audit(149.831:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.251882][ T26] audit: type=1326 audit(149.831:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.252115][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.867'. [ 151.273188][ T26] audit: type=1326 audit(149.831:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.297080][ T26] audit: type=1326 audit(149.831:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.335781][ T26] audit: type=1326 audit(149.831:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.346180][ T26] audit: type=1326 audit(149.831:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 151.376273][ T6484] loop1: detected capacity change from 0 to 164 [ 151.381714][ T6473] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.385039][ T6473] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.478634][ T6484] Unable to read rock-ridge attributes [ 151.512685][ T6497] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.875'. [ 151.519431][ T6492] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.875'. [ 152.760734][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.878408][ T6537] loop5: detected capacity change from 0 to 128 [ 153.044256][ T6503] lo speed is unknown, defaulting to 1000 [ 153.078276][ T6529] rdma_rxe: rxe_register_device failed with error -23 [ 153.080069][ T6529] rdma_rxe: failed to add geneve1 [ 153.085741][ T6545] loop4: detected capacity change from 0 to 164 [ 153.172042][ T6545] Unable to read rock-ridge attributes [ 154.231746][ T6576] loop4: detected capacity change from 0 to 512 [ 154.363434][ T6583] loop3: detected capacity change from 0 to 2048 [ 154.390196][ T6576] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 154.467979][ T6583] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nombcache,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 154.810262][ T6559] lo speed is unknown, defaulting to 1000 [ 155.470117][ T4586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 345: padding at end of block bitmap is not set [ 155.499514][ T6615] loop2: detected capacity change from 0 to 164 [ 155.511371][ T4586] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1768 with error 117 [ 155.562781][ T4586] EXT4-fs (loop3): This should not happen!! Data will be lost [ 155.562781][ T4586] [ 155.570613][ T6614] loop4: detected capacity change from 0 to 512 [ 155.609773][ T6615] Unable to read rock-ridge attributes [ 155.659902][ T6614] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.911: Invalid inode bitmap blk 4 in block_group 0 [ 155.674267][ T6614] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,quota,lazytime,,errors=continue. Quota mode: writeback. [ 155.895245][ T6638] loop5: detected capacity change from 0 to 1024 [ 155.961740][ T6638] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.964522][ T6638] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 155.985977][ T6638] EXT4-fs (loop5): invalid journal inode [ 155.987592][ T6638] EXT4-fs (loop5): can't get journal size [ 156.135608][ T6651] loop1: detected capacity change from 0 to 512 [ 157.914449][ T6638] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.917: blocks 2-2 from inode overlap system zone [ 157.925975][ T6638] EXT4-fs (loop5): failed to initialize system zone (-117) [ 157.927969][ T6638] EXT4-fs (loop5): mount failed [ 157.992190][ T6651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.999836][ T6651] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.928: bg 0: block 248: padding at end of block bitmap is not set [ 158.008004][ T6651] __quota_error: 11 callbacks suppressed [ 158.008020][ T6651] Quota error (device loop1): write_blk: dquota write failed [ 158.011694][ T6651] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 158.014224][ T6651] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.928: Failed to acquire dquot type 1 [ 158.025682][ T6651] EXT4-fs (loop1): 1 truncate cleaned up [ 158.550156][ T6651] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 158.760490][ T6651] rdma_rxe: ignoring netdev event = 23 for syz_tun [ 158.764326][ T6651] rdma_rxe: syz_tun changed mtu to 39785 [ 158.767300][ T6651] infiniband syz0: set active [ 159.079536][ T26] audit: type=1326 audit(157.249:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 159.112115][ T26] audit: type=1326 audit(157.258:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 159.117504][ T26] audit: type=1326 audit(157.258:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=102 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 159.122622][ T26] audit: type=1326 audit(157.258:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 159.186973][ T26] audit: type=1326 audit(157.258:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 159.413877][ T26] audit: type=1326 audit(157.539:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 159.451655][ T6673] futex_wake_op: syz.5.924 tries to shift op by 144; fix this program [ 159.457789][ T26] audit: type=1326 audit(157.539:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 159.463304][ T26] audit: type=1326 audit(157.539:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 160.452339][ T6703] loop4: detected capacity change from 0 to 164 [ 160.511001][ T6703] Unable to read rock-ridge attributes [ 160.654974][ T6713] xt_hashlimit: max too large, truncated to 1048576 [ 160.741230][ T6709] loop5: detected capacity change from 0 to 8192 [ 161.872961][ T6730] netlink: 9 bytes leftover after parsing attributes in process `syz.2.942'. [ 161.877002][ T6730] device gretap0 entered promiscuous mode [ 161.883448][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 161.975324][ T6735] futex_wake_op: syz.3.947 tries to shift op by 144; fix this program [ 161.999345][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 162.029868][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 162.044326][ T6739] loop2: detected capacity change from 0 to 1024 [ 162.165925][ T6739] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 162.306864][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 162.475793][ T6768] loop5: detected capacity change from 0 to 164 [ 163.376978][ T6768] Unable to read rock-ridge attributes [ 163.408887][ T6782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.411927][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 163.473881][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.961'. [ 164.322112][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 164.322125][ T26] audit: type=1326 audit(162.150:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.360634][ T26] audit: type=1326 audit(162.178:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.387915][ T6789] futex_wake_op: syz.1.964 tries to shift op by 144; fix this program [ 164.424086][ T26] audit: type=1326 audit(162.178:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.446079][ T26] audit: type=1326 audit(162.178:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.463441][ T26] audit: type=1326 audit(162.178:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.494575][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 164.502821][ T26] audit: type=1326 audit(162.178:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.523278][ T6808] netlink: 56 bytes leftover after parsing attributes in process `syz.2.968'. [ 164.539118][ T26] audit: type=1326 audit(162.178:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.557522][ T26] audit: type=1326 audit(162.178:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.562938][ T26] audit: type=1326 audit(162.178:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.592876][ T26] audit: type=1326 audit(162.178:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.1.964" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 164.741227][ T6819] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.807611][ T6825] loop2: detected capacity change from 0 to 512 [ 165.193418][ T6825] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.222155][ T6825] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.971: bg 0: block 248: padding at end of block bitmap is not set [ 165.234442][ T6825] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.971: Failed to acquire dquot type 1 [ 165.258101][ T6825] EXT4-fs (loop2): 1 truncate cleaned up [ 165.269638][ T6825] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 166.544663][ T6819] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.907648][ T6819] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.450410][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 167.578482][ T6819] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.748126][ T6846] lo speed is unknown, defaulting to 1000 [ 168.010872][ T6870] ALSA: seq fatal error: cannot create timer (-22) [ 168.095622][ T6819] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.111213][ T6819] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.137127][ T6819] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.157164][ T6819] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.249047][ T6885] netlink: 'syz.5.991': attribute type 13 has an invalid length. [ 168.508407][ T6901] loop3: detected capacity change from 0 to 512 [ 168.960393][ T6901] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.990934][ T6901] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.993: bg 0: block 248: padding at end of block bitmap is not set [ 169.003929][ T6901] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.993: Failed to acquire dquot type 1 [ 169.017834][ T6901] EXT4-fs (loop3): 1 truncate cleaned up [ 169.744529][ T6901] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 170.535806][ T6885] gretap0: refused to change device tx_queue_len [ 170.537477][ T6885] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.831455][ T6926] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.845753][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 170.845767][ T26] audit: type=1326 audit(168.249:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.180367][ T26] audit: type=1326 audit(168.455:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.189932][ T6926] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.211696][ T26] audit: type=1326 audit(168.558:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.236244][ T26] audit: type=1326 audit(168.558:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.267979][ T26] audit: type=1326 audit(168.558:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.295560][ T26] audit: type=1326 audit(168.642:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.323389][ T26] audit: type=1326 audit(168.642:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.328794][ T26] audit: type=1326 audit(168.642:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.334678][ T26] audit: type=1326 audit(168.642:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.339885][ T26] audit: type=1326 audit(168.642:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb67a2d28 code=0x7ffc0000 [ 171.400162][ T6926] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.486110][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 171.529179][ T6926] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.577526][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 171.579240][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 171.581051][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 171.840769][ T6926] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.844804][ T1536] Bluetooth: hci1: command 0x0406 tx timeout [ 172.143181][ T6926] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.157827][ T6926] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.164203][ T6926] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.729427][ T6979] loop5: detected capacity change from 0 to 512 [ 173.273832][ T6979] EXT4-fs (loop5): orphan cleanup on readonly fs [ 173.293411][ T6979] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1020: bg 0: block 248: padding at end of block bitmap is not set [ 173.308612][ T6979] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1020: Failed to acquire dquot type 1 [ 173.319860][ T6979] EXT4-fs (loop5): 1 truncate cleaned up [ 173.326882][ T6979] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 174.930495][ T6989] device bond1 entered promiscuous mode [ 174.942868][ T6989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.962140][ T6989] bond1 (unregistering): Released all slaves [ 175.097661][ T6993] loop1: detected capacity change from 0 to 512 [ 175.522864][ T6993] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.586263][ T7006] loop4: detected capacity change from 0 to 128 [ 175.876659][ T7019] loop2: detected capacity change from 0 to 512 [ 176.705086][ T7019] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (4740) [ 176.849078][ T7025] serio: Serial port ptm0 [ 177.817399][ T7055] lo speed is unknown, defaulting to 1000 [ 178.044535][ T7066] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.205025][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 179.205037][ T26] audit: type=1107 audit(176.078:817): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 179.545721][ T26] audit: type=1326 audit(176.397:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 179.563374][ T26] audit: type=1326 audit(176.397:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=101 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 179.588973][ T26] audit: type=1326 audit(176.397:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.5.1066" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 179.660898][ T7121] loop1: detected capacity change from 0 to 512 [ 179.702997][ T7121] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.705755][ T7121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1078: bg 0: block 248: padding at end of block bitmap is not set [ 179.732316][ T7121] Quota error (device loop1): write_blk: dquota write failed [ 179.734798][ T7121] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 179.737588][ T7121] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1078: Failed to acquire dquot type 1 [ 179.765782][ T7130] device lo entered promiscuous mode [ 179.791530][ T7121] EXT4-fs (loop1): 1 truncate cleaned up [ 179.805395][ T7121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.904685][ T7121] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 179.936803][ T7121] Quota error (device loop1): write_blk: dquota write failed [ 179.940860][ T7121] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 179.950254][ T7121] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1078: Failed to acquire dquot type 1 [ 180.116837][ T7121] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 180.988783][ T4024] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 181.009439][ T7159] usb usb1: check_ctrlrecip: process 7159 (syz.5.1075) requesting ep 01 but needs 81 [ 181.011923][ T7159] usb usb1: usbfs: process 7159 (syz.5.1075) did not claim interface 0 before use [ 181.023449][ T7157] loop2: detected capacity change from 0 to 2048 [ 181.031682][ T4024] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 181.150303][ T7157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.207041][ T7157] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 181.231333][ T7157] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 181.268350][ T7157] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.268350][ T7157] [ 181.270821][ T7157] EXT4-fs (loop2): Total free blocks count 0 [ 181.290937][ T7157] EXT4-fs (loop2): Free/Dirty block details [ 181.292612][ T7157] EXT4-fs (loop2): free_blocks=2415919104 [ 181.294104][ T7157] EXT4-fs (loop2): dirty_blocks=32 [ 181.311838][ T4024] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 181.313699][ T7157] EXT4-fs (loop2): Block reservation details [ 181.315934][ T7157] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 181.316158][ T4024] infiniband syz0: set down [ 181.332537][ T4070] infiniband syz0: ib_query_port failed (-19) [ 181.335767][ T7177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.343605][ T5072] smc: removing ib device syz0 [ 181.344287][ T7177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.344287][ T7177] [ 181.886553][ T7209] loop3: detected capacity change from 0 to 512 [ 181.929890][ T7209] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 181.931623][ T7209] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 182.243661][ T7221] loop5: detected capacity change from 0 to 128 [ 182.306095][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 182.315309][ T7226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.318696][ T7226] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.081231][ T7221] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 183.091225][ T7221] FAT-fs (loop5): Filesystem has been set read-only [ 183.163141][ T7221] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 183.294050][ T7236] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.299819][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1096'. [ 183.343070][ T26] audit: type=1326 audit(179.942:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 183.354532][ T26] audit: type=1326 audit(179.951:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.5.1094" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 183.399705][ T7243] loop5: detected capacity change from 0 to 2048 [ 183.419923][ T7236] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.437999][ T7243] GPT:first_usable_lbas don't match. [ 183.440147][ T7243] GPT:34 != 290 [ 183.442410][ T7243] GPT: Use GNU Parted to correct GPT errors. [ 183.446628][ T7243] loop5: p1 p2 p3 [ 183.499238][ T7236] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.587193][ T7236] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.628732][ T7233] lo speed is unknown, defaulting to 1000 [ 183.690542][ T7257] loop5: detected capacity change from 0 to 512 [ 183.704806][ T7257] EXT4-fs (loop5): error: journal path ./bus is not a block device [ 183.819009][ T7236] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.872132][ T7236] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.906302][ T7236] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.030203][ T7236] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.087674][ T4125] udevd[4125]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 184.114511][ T6380] udevd[6380]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 184.137030][ T4128] udevd[4128]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 184.502781][ T7261] lo speed is unknown, defaulting to 1000 [ 184.636189][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 184.636203][ T26] audit: type=1326 audit(181.158:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 184.649815][ T26] audit: type=1326 audit(181.167:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 184.664714][ T26] audit: type=1326 audit(181.186:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb6d3a448 code=0x7ffc0000 [ 184.695789][ T7290] loop2: detected capacity change from 0 to 512 [ 184.780391][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 184.828023][ T26] audit: type=1326 audit(181.335:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 184.835711][ T26] audit: type=1326 audit(181.335:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 184.841194][ T26] audit: type=1326 audit(181.335:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.1110" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 184.967459][ T7277] lo speed is unknown, defaulting to 1000 [ 185.013464][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1117'. [ 185.052445][ T26] audit: type=1326 audit(181.541:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 185.062244][ T26] audit: type=1326 audit(181.551:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 185.070615][ T26] audit: type=1326 audit(181.551:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=82 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 185.076177][ T26] audit: type=1326 audit(181.551:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 185.089917][ T7306] loop3: detected capacity change from 0 to 1024 [ 185.206336][ T7306] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,nogrpid,dioread_lock,barrier=0x0000000000000004,max_dir_size_kb=0x00000000004007b1,norecovery,noinit_itable,mb_optimize_scan=0x0000000000000001,user_xattr,nolazytime,journal_dev=0x000,errors=continue. Quota mode: none. [ 185.471306][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 185.508446][ T7331] netlink: 'syz.2.1127': attribute type 4 has an invalid length. [ 185.516781][ T7332] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 185.999976][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.001741][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.004436][ T7277] device bridge_slave_0 entered promiscuous mode [ 186.028540][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.049703][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.071122][ T7277] device bridge_slave_1 entered promiscuous mode [ 186.200829][ T7358] loop2: detected capacity change from 0 to 512 [ 186.203786][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.270721][ T7362] netlink: 'syz.5.1139': attribute type 29 has an invalid length. [ 186.304076][ T7358] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.329290][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.338709][ T7362] netlink: 'syz.5.1139': attribute type 29 has an invalid length. [ 186.341374][ T7366] netlink: 'syz.5.1139': attribute type 29 has an invalid length. [ 186.357697][ T7358] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 186.479829][ T7365] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.500875][ T7277] team0: Port device team_slave_0 added [ 186.514523][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1141'. [ 186.568197][ T7277] team0: Port device team_slave_1 added [ 186.639285][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.644080][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.668100][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.692602][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.709015][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.737551][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.810803][ T7383] loop2: detected capacity change from 0 to 1024 [ 186.812793][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 186.888364][ T7277] device hsr_slave_0 entered promiscuous mode [ 186.919014][ T7383] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,nogrpid,dioread_lock,barrier=0x0000000000000004,max_dir_size_kb=0x00000000004007b1,norecovery,noinit_itable,mb_optimize_scan=0x0000000000000001,user_xattr,nolazytime,journal_dev=0x000,errors=continue. Quota mode: none. [ 186.924691][ T7277] device hsr_slave_1 entered promiscuous mode [ 186.950781][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.952731][ T7277] Cannot create hsr debugfs directory [ 187.060675][ T7398] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.150755][ T7387] lo speed is unknown, defaulting to 1000 [ 187.237288][ T7398] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.341210][ T7398] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.386230][ T7401] lo speed is unknown, defaulting to 1000 [ 187.439353][ T7398] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.480432][ T7410] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 187.508497][ T7] lo speed is unknown, defaulting to 1000 [ 187.590553][ T7414] loop3: detected capacity change from 0 to 128 [ 187.744072][ T7414] attempt to access beyond end of device [ 187.744072][ T7414] loop3: rw=2049, want=1041, limit=128 [ 187.797128][ T7414] attempt to access beyond end of device [ 187.797128][ T7414] loop3: rw=524288, want=1041, limit=128 [ 188.173987][ T7432] vhci_hcd: invalid port number 128 [ 188.175420][ T7432] vhci_hcd: default hub control req: 3f0a v0302 i0080 l0 [ 188.274020][ T7440] netlink: 'syz.5.1170': attribute type 4 has an invalid length. [ 188.397244][ T7435] lo speed is unknown, defaulting to 1000 [ 188.450902][ T7448] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 189.221024][ T4075] Bluetooth: hci1: command 0x041b tx timeout [ 189.292707][ T7451] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.330029][ T7457] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 189.378684][ T7457] team0 (unregistering): Port device team_slave_0 removed [ 189.391503][ T7457] team0 (unregistering): Port device team_slave_1 removed [ 190.293354][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 190.293367][ T26] audit: type=1326 audit(186.443:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.300524][ T7470] netlink: 'syz.4.1182': attribute type 4 has an invalid length. [ 190.312591][ T26] audit: type=1326 audit(186.452:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.323241][ T26] audit: type=1326 audit(186.461:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.333164][ T26] audit: type=1326 audit(186.461:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.341410][ T26] audit: type=1326 audit(186.461:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.350704][ T26] audit: type=1326 audit(186.461:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.356339][ T26] audit: type=1326 audit(186.461:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.362582][ T26] audit: type=1326 audit(186.461:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.5.1191" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb347dd28 code=0x7ffc0000 [ 190.369730][ T7473] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1185'. [ 190.762581][ T7493] loop5: detected capacity change from 0 to 164 [ 190.815649][ T7493] Unable to read rock-ridge attributes [ 190.821075][ T7493] Unable to read rock-ridge attributes [ 191.419626][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 191.476737][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 191.573658][ T7509] device veth1_to_team entered promiscuous mode [ 191.931231][ T7398] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.937082][ T7398] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.942415][ T7398] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.947944][ T7398] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.973479][ T364] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.231310][ T364] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.242759][ T7515] netlink: 'syz.3.1204': attribute type 13 has an invalid length. [ 192.250499][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.272249][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.291805][ T7515] gretap0: refused to change device tx_queue_len [ 192.296142][ T7515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.300705][ T7523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1208'. [ 192.304349][ T5272] lo speed is unknown, defaulting to 1000 [ 192.315817][ T364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.738279][ T364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.786713][ T7531] loop4: detected capacity change from 0 to 128 [ 192.982486][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 193.059977][ T4712] attempt to access beyond end of device [ 193.059977][ T4712] loop4: rw=1, want=697, limit=128 [ 193.083684][ T7277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.114647][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 193.128924][ T7277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.200533][ T7277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.247589][ T7277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.266916][ T26] audit: type=1326 audit(189.230:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 193.290048][ T26] audit: type=1326 audit(189.249:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 193.356364][ T7547] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.455225][ T7547] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.484034][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.508228][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.510792][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.520465][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.541989][ T7547] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.642802][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 193.646011][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.648799][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.651272][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.652946][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.661157][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.672588][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.690034][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.691947][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.718407][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.391752][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.394268][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.396897][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.399737][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.403019][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.406139][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.415700][ T7547] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.432578][ T7277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.444593][ T7277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.448426][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.450854][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.453449][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.458700][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.461223][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.463652][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.628986][ T7547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.636741][ T7547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.672254][ T7547] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.712635][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.716784][ T7547] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.723795][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.725841][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.776850][ T7564] rdma_op 00000000b06743db conn xmit_rdma 0000000000000000 [ 194.918197][ T7591] capability: warning: `syz.4.1230' uses 32-bit capabilities (legacy support in use) [ 195.152676][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.155324][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.247758][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.303135][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.537308][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.539642][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.964983][ T7277] device veth0_vlan entered promiscuous mode [ 195.971438][ T7277] device veth1_vlan entered promiscuous mode [ 196.041286][ T7625] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.055366][ T7630] netlink: 'syz.5.1240': attribute type 13 has an invalid length. [ 196.070183][ T7630] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.793145][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.794994][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.811520][ T7630] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.887930][ T7640] loop3: detected capacity change from 0 to 2048 [ 196.902757][ T7630] gretap0: refused to change device tx_queue_len [ 196.905818][ T7630] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.935133][ T7625] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.968770][ T7640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.033849][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.036755][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.098053][ T7625] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.107576][ T7277] device veth0_macvtap entered promiscuous mode [ 197.112311][ T7277] device veth1_macvtap entered promiscuous mode [ 197.147732][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.155045][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.157417][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.178565][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.185120][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.187734][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.194336][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.206034][ T7652] device pim6reg1 entered promiscuous mode [ 197.212293][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.222362][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.225807][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.273713][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 197.273726][ T26] audit: type=1107 audit(192.972:897): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 197.273783][ T7625] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.296750][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.307950][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.314810][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.317450][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.330757][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.335001][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.338854][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.511321][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.514374][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.522772][ T7277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.536961][ T7277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.539175][ T7277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.541343][ T7277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.045494][ T7654] lo speed is unknown, defaulting to 1000 [ 198.420114][ T7671] lo speed is unknown, defaulting to 1000 [ 198.537217][ T26] audit: type=1107 audit(194.150:898): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='o_s' [ 199.278898][ T364] device hsr_slave_0 left promiscuous mode [ 199.330312][ T364] device hsr_slave_1 left promiscuous mode [ 199.426502][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.428529][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.430923][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.432766][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.442371][ T364] device bridge_slave_1 left promiscuous mode [ 199.444901][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.494594][ T364] device bridge_slave_0 left promiscuous mode [ 199.496505][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.558526][ T364] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 199.651021][ T364] device veth1_macvtap left promiscuous mode [ 199.652415][ T364] device veth0_macvtap left promiscuous mode [ 199.654030][ T364] device veth1_vlan left promiscuous mode [ 199.655444][ T364] device veth0_vlan left promiscuous mode [ 199.718976][ T364] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 199.723622][ T364] infiniband syz!: set down [ 199.908735][ T364] team0 (unregistering): Port device team_slave_1 removed [ 199.917151][ T364] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 199.919055][ T364] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 199.922315][ T364] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 199.924411][ T364] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 199.926222][ T364] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 199.928294][ T364] team0 (unregistering): Port device team_slave_0 removed [ 199.932776][ T148] smc: removing ib device syz! [ 199.937273][ T364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.969849][ T364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.106628][ T364] bond0 (unregistering): Released all slaves [ 200.543055][ T7625] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.555408][ T7625] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.564421][ T7625] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.578741][ T7625] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.620889][ T26] audit: type=1326 audit(196.105:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 200.646114][ T26] audit: type=1326 audit(196.133:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 200.651488][ T26] audit: type=1326 audit(196.133:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 200.680961][ T7712] loop2: detected capacity change from 0 to 2048 [ 200.683213][ T5042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.693900][ T5042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.733301][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.753734][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.755893][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.759709][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.804305][ T7712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.869194][ T7729] usb usb1: check_ctrlrecip: process 7729 (syz.6.1104) requesting ep 01 but needs 81 [ 200.872070][ T7729] usb usb1: usbfs: process 7729 (syz.6.1104) did not claim interface 0 before use [ 201.032148][ T26] audit: type=1326 audit(196.498:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.2.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 201.038060][ T26] audit: type=1326 audit(196.498:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.2.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 201.069028][ T26] audit: type=1326 audit(196.498:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.2.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 201.079355][ T26] audit: type=1326 audit(196.498:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.2.1279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 201.127431][ T7739] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.163143][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1283'. [ 201.215984][ T7745] device bond1 entered promiscuous mode [ 201.217943][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.353214][ T7739] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.449329][ T7739] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.478351][ T7771] loop5: detected capacity change from 0 to 2048 [ 201.568267][ T7771] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.615594][ T7739] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.666419][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 201.806350][ T7739] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.870512][ T7797] loop5: detected capacity change from 0 to 128 [ 201.962434][ T7739] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.976915][ T7739] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.990237][ T7739] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.091724][ T26] audit: type=1326 audit(197.480:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.3.1305" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b4ebd28 code=0x7ffc0000 [ 202.153481][ T7814] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 202.155200][ T7814] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.157455][ T7814] vhci_hcd vhci_hcd.0: Device attached [ 202.264962][ T7821] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.327479][ T7828] hub 2-0:1.0: USB hub found [ 202.348614][ T7828] hub 2-0:1.0: 8 ports detected [ 202.393062][ T7821] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.526784][ T4076] usb 15-1: SetAddress Request (2) to port 0 [ 202.528652][ T4076] usb 15-1: new SuperSpeed USB device number 2 using vhci_hcd [ 202.540911][ T7842] loop2: detected capacity change from 0 to 164 [ 202.554693][ T7821] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.615672][ T7842] ISOFS: unable to read i-node block [ 202.617266][ T7842] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 202.644877][ T7821] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.758352][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 202.758367][ T26] audit: type=1326 audit(198.107:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.783647][ T26] audit: type=1326 audit(198.117:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.816719][ T26] audit: type=1326 audit(198.117:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.842465][ T7821] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.849040][ T26] audit: type=1326 audit(198.117:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.873295][ T7821] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.877510][ T26] audit: type=1326 audit(198.117:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.910750][ T26] audit: type=1326 audit(198.117:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.925635][ T7821] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.942626][ T26] audit: type=1326 audit(198.117:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.971064][ T26] audit: type=1326 audit(198.117:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 202.977767][ T7821] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.014912][ T7816] vhci_hcd: connection reset by peer [ 203.016612][ T5072] vhci_hcd: stop threads [ 203.017686][ T5072] vhci_hcd: release socket [ 203.022887][ T5072] vhci_hcd: disconnect device [ 203.036684][ T26] audit: type=1326 audit(198.126:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 203.066578][ T7861] loop2: detected capacity change from 0 to 512 [ 203.091681][ T26] audit: type=1326 audit(198.126:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51a1d28 code=0x7ffc0000 [ 203.163254][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 203.209736][ T7861] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 203.435086][ T7880] device bridge2 entered promiscuous mode [ 203.658637][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 203.686525][ T7883] device bond1 entered promiscuous mode [ 203.692932][ T7883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.890293][ T7901] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.986229][ T7901] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.011890][ T7907] loop4: detected capacity change from 0 to 512 [ 204.077084][ T7901] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.098590][ T7907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.110408][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'. [ 204.329990][ T7901] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.973308][ T7927] loop4: detected capacity change from 0 to 128 [ 205.048620][ T7927] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.279789][ T7932] loop4: detected capacity change from 0 to 1024 [ 205.289988][ T7934] netlink: 'syz.5.1345': attribute type 13 has an invalid length. [ 205.333032][ T7932] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 205.417921][ T7932] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 206.047198][ T7955] device geneve2 entered promiscuous mode [ 206.379602][ T7967] loop2: detected capacity change from 0 to 256 [ 206.679617][ T7979] loop2: detected capacity change from 0 to 512 [ 206.724534][ T7981] loop5: detected capacity change from 0 to 1024 [ 206.726400][ T7979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.746376][ T7979] EXT4-fs (loop2): 1 truncate cleaned up [ 206.747777][ T7979] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 206.829925][ T7981] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 207.129249][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 207.133133][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 207.153794][ T7996] loop5: detected capacity change from 0 to 2048 [ 207.210293][ T7996] EXT4-fs (loop5): Ignoring removed bh option [ 207.253909][ T7996] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 207.390319][ T8009] loop6: detected capacity change from 0 to 128 [ 207.735099][ T4489] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.741079][ T4489] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.747044][ T4489] EXT4-fs (loop5): This should not happen!! Data will be lost [ 207.747044][ T4489] [ 207.749375][ T4489] EXT4-fs (loop5): Total free blocks count 0 [ 207.750811][ T4489] EXT4-fs (loop5): Free/Dirty block details [ 207.752367][ T4489] EXT4-fs (loop5): free_blocks=2415919104 [ 207.753779][ T4489] EXT4-fs (loop5): dirty_blocks=8208 [ 207.755966][ T4489] EXT4-fs (loop5): Block reservation details [ 207.757616][ T4489] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 207.762453][ T4489] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 207.766231][ T4489] EXT4-fs (loop5): This should not happen!! Data will be lost [ 207.766231][ T4489] [ 207.925649][ T4076] usb 15-1: device descriptor read/8, error -110 [ 207.977451][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 207.987336][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1380'. [ 207.992337][ T8018] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.994865][ T8018] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.996981][ T8018] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.999214][ T8018] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.046186][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 208.408497][ T7901] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.410738][ T4076] usb usb15-port1: Cannot enable. Maybe the USB cable is bad? [ 208.412762][ T4076] usb usb15-port1: attempt power cycle [ 208.419027][ T7901] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.437266][ T7901] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.453165][ T7901] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.644528][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 208.677407][ T8040] device bond2 entered promiscuous mode [ 208.679088][ T8040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.781883][ T4076] usb usb15-port1: Cannot enable. Maybe the USB cable is bad? [ 208.889331][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 208.951920][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 208.951932][ T26] audit: type=1326 audit(203.907:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 208.959078][ T26] audit: type=1326 audit(203.907:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 208.994471][ T26] audit: type=1326 audit(203.916:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 208.999861][ T26] audit: type=1326 audit(203.916:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.029305][ T8071] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.034809][ T26] audit: type=1326 audit(203.916:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.056982][ T26] audit: type=1326 audit(203.916:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.080341][ T26] audit: type=1326 audit(203.916:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.093320][ T26] audit: type=1326 audit(203.916:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.103412][ T4076] usb usb15-port1: Cannot enable. Maybe the USB cable is bad? [ 209.105609][ T4076] usb usb15-port1: unable to enumerate USB device [ 209.111967][ T26] audit: type=1326 audit(203.916:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.125694][ T26] audit: type=1326 audit(203.916:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 209.159810][ T8071] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.288796][ T8071] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.395003][ T8071] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.527874][ T8071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.534022][ T8071] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.540342][ T8071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.547010][ T8071] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.677243][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.679680][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 209.684219][ T8110] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.686881][ T8110] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.688969][ T8110] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.691925][ T8110] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.723597][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1414'. [ 209.735881][ T8116] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 209.765977][ T8115] lo speed is unknown, defaulting to 1000 [ 209.783167][ T8120] netlink: 'syz.4.1413': attribute type 32 has an invalid length. [ 210.661654][ T8177] device bond1 entered promiscuous mode [ 210.663737][ T8177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.679616][ T8177] bond1 (unregistering): Released all slaves [ 210.837809][ T8210] loop6: detected capacity change from 0 to 164 [ 210.889601][ T8210] Unable to read rock-ridge attributes [ 211.717265][ T8310] loop5: detected capacity change from 0 to 128 [ 211.728028][ T8307] loop4: detected capacity change from 0 to 512 [ 211.791039][ T8307] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 211.804538][ T8307] EXT4-fs (loop4): orphan cleanup on readonly fs [ 211.842764][ T8307] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.887160][ T8307] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 211.913950][ T8307] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1455: bg 0: block 40: padding at end of block bitmap is not set [ 211.971619][ T8307] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 211.992866][ T8307] EXT4-fs (loop4): 1 truncate cleaned up [ 211.994364][ T8307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.052912][ T8307] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 212.178087][ T8329] loop5: detected capacity change from 0 to 128 [ 212.219226][ T8329] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.226421][ T8329] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.693871][ T8349] __nla_validate_parse: 3 callbacks suppressed [ 212.693886][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1467'. [ 212.697503][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1467'. [ 212.856057][ T8352] device wireguard0 entered promiscuous mode [ 212.962580][ T8359] device pim6reg1 entered promiscuous mode [ 213.219104][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 213.270308][ T8369] device bond1 entered promiscuous mode [ 213.288507][ T8369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.387419][ T8372] loop5: detected capacity change from 0 to 2048 [ 213.485527][ T8380] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.548257][ T8372] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 213.602823][ T8380] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.697610][ T8380] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.769327][ T8380] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.803732][ T8393] loop3: detected capacity change from 0 to 164 [ 214.257076][ T8259] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:26: bg 0: block 345: padding at end of block bitmap is not set [ 214.277043][ T8259] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 214.278408][ T8407] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.289908][ T8259] EXT4-fs (loop5): This should not happen!! Data will be lost [ 214.289908][ T8259] [ 214.419407][ T5052] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 67 with error 28 [ 214.433524][ T5052] EXT4-fs (loop5): This should not happen!! Data will be lost [ 214.433524][ T5052] [ 214.436118][ T5052] EXT4-fs (loop5): Total free blocks count 0 [ 214.437604][ T5052] EXT4-fs (loop5): Free/Dirty block details [ 214.439031][ T5052] EXT4-fs (loop5): free_blocks=0 [ 214.440202][ T5052] EXT4-fs (loop5): dirty_blocks=80 [ 214.441497][ T5052] EXT4-fs (loop5): Block reservation details [ 214.442948][ T5052] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 216.178186][ T8380] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.197491][ T8380] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.213061][ T8380] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.218337][ T8380] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.318180][ T8448] loop5: detected capacity change from 0 to 512 [ 216.374089][ T8448] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 216.376542][ T8448] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 216.544218][ T8456] loop4: detected capacity change from 0 to 164 [ 216.595488][ T8456] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 216.668300][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 216.668313][ T26] audit: type=1326 audit(211.119:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.1498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae911d28 code=0x7ffc0000 [ 216.703904][ T26] audit: type=1326 audit(211.156:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.1498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae911d28 code=0x7ffc0000 [ 216.709379][ T26] audit: type=1326 audit(211.156:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.1498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae911d28 code=0x7ffc0000 [ 216.750931][ T26] audit: type=1326 audit(211.156:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.1498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffffae911d28 code=0x7ffc0000 [ 216.766566][ T26] audit: type=1326 audit(211.156:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.1498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae911d28 code=0x7ffc0000 [ 216.773229][ T8464] loop6: detected capacity change from 0 to 164 [ 216.872709][ T8466] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 217.172510][ T8476] loop6: detected capacity change from 0 to 8192 [ 217.176582][ T8483] loop4: detected capacity change from 0 to 1024 [ 217.236895][ T8483] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.328518][ T8476] attempt to access beyond end of device [ 217.328518][ T8476] loop6: rw=0, want=57848, limit=8192 [ 217.334850][ T8476] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 217.338295][ T8476] FAT-fs (loop6): Filesystem has been set read-only [ 217.342105][ T8476] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 217.350125][ T8476] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 217.361507][ T26] audit: type=1326 audit(211.764:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 217.374393][ T26] audit: type=1326 audit(211.773:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 217.382315][ T26] audit: type=1326 audit(211.792:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 217.399336][ T26] audit: type=1326 audit(211.792:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 217.410818][ T26] audit: type=1326 audit(211.792:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6d0fd28 code=0x7ffc0000 [ 218.173789][ T8522] loop2: detected capacity change from 0 to 8192 [ 218.261915][ T8522] attempt to access beyond end of device [ 218.261915][ T8522] loop2: rw=0, want=57848, limit=8192 [ 218.280612][ T8522] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 218.282683][ T8522] FAT-fs (loop2): Filesystem has been set read-only [ 218.317770][ T8522] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 218.326412][ T8522] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 218.406972][ T8542] loop4: detected capacity change from 0 to 1024 [ 218.449305][ T8544] loop6: detected capacity change from 0 to 512 [ 218.490458][ T8542] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 218.521065][ T8547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.550085][ T8542] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,abort,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 218.569873][ T8544] EXT4-fs (loop6): 1 orphan inode deleted [ 218.589330][ T8544] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.592844][ T8542] EXT4-fs error (device loop4): ext4_remount:5855: comm syz.4.1529: Abort forced by user [ 218.609510][ T8547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.613780][ T8542] EXT4-fs (loop4): Remounting filesystem read-only [ 218.625222][ T8542] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 218.774112][ T8547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.000824][ T8544] [ 219.001600][ T8544] ====================================================== [ 219.003366][ T8544] WARNING: possible circular locking dependency detected [ 219.005243][ T8544] 5.15.178-syzkaller #0 Not tainted [ 219.006586][ T8544] ------------------------------------------------------ [ 219.008564][ T8544] syz.6.1530/8544 is trying to acquire lock: [ 219.010135][ T8544] ffff0000caf2cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 219.013219][ T8544] [ 219.013219][ T8544] but task is already holding lock: [ 219.015279][ T8544] ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 219.017995][ T8544] [ 219.017995][ T8544] which lock already depends on the new lock. [ 219.017995][ T8544] [ 219.020743][ T8544] [ 219.020743][ T8544] the existing dependency chain (in reverse order) is: [ 219.023071][ T8544] [ 219.023071][ T8544] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 219.025236][ T8544] __mutex_lock_common+0x194/0x2154 [ 219.026678][ T8544] mutex_lock_nested+0xa4/0xf8 [ 219.028144][ T8544] rfkill_register+0x44/0x7a4 [ 219.029579][ T8544] hci_register_dev+0x3e0/0x880 [ 219.030959][ T8544] vhci_create_device+0x2c4/0x568 [ 219.032493][ T8544] vhci_write+0x318/0x3b8 [ 219.033759][ T8544] vfs_write+0x884/0xb44 [ 219.035056][ T8544] ksys_write+0x15c/0x26c [ 219.036310][ T8544] __arm64_sys_write+0x7c/0x90 [ 219.037718][ T8544] invoke_syscall+0x98/0x2b8 [ 219.039047][ T8544] el0_svc_common+0x138/0x258 [ 219.040454][ T8544] do_el0_svc+0x58/0x14c [ 219.041782][ T8544] el0_svc+0x7c/0x1f0 [ 219.042947][ T8544] el0t_64_sync_handler+0x84/0xe4 [ 219.044449][ T8544] el0t_64_sync+0x1a0/0x1a4 [ 219.045809][ T8544] [ 219.045809][ T8544] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 219.047916][ T8544] __mutex_lock_common+0x194/0x2154 [ 219.049440][ T8544] mutex_lock_nested+0xa4/0xf8 [ 219.050905][ T8544] vhci_send_frame+0x8c/0x10c [ 219.052313][ T8544] hci_send_frame+0x194/0x2f0 [ 219.053701][ T8544] hci_tx_work+0x9ac/0x16cc [ 219.055062][ T8544] process_one_work+0x790/0x11b8 [ 219.056562][ T8544] worker_thread+0x910/0x1034 [ 219.057973][ T8544] kthread+0x37c/0x45c [ 219.059215][ T8544] ret_from_fork+0x10/0x20 [ 219.060581][ T8544] [ 219.060581][ T8544] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 219.063094][ T8544] __flush_work+0xf8/0x1c0 [ 219.064477][ T8544] flush_work+0x24/0x38 [ 219.065780][ T8544] hci_dev_do_close+0x16c/0x1060 [ 219.067269][ T8544] hci_unregister_dev+0x248/0x4d4 [ 219.068730][ T8544] vhci_release+0x74/0xc4 [ 219.070056][ T8544] __fput+0x1c4/0x800 [ 219.071328][ T8544] ____fput+0x20/0x30 [ 219.072530][ T8544] task_work_run+0x130/0x1e4 [ 219.073921][ T8544] do_exit+0x670/0x20bc [ 219.075227][ T8544] do_group_exit+0x110/0x268 [ 219.076612][ T8544] __wake_up_parent+0x0/0x60 [ 219.077997][ T8544] invoke_syscall+0x98/0x2b8 [ 219.079415][ T8544] el0_svc_common+0x138/0x258 [ 219.080785][ T8544] do_el0_svc+0x58/0x14c [ 219.082095][ T8544] el0_svc+0x7c/0x1f0 [ 219.083301][ T8544] el0t_64_sync_handler+0x84/0xe4 [ 219.084788][ T8544] el0t_64_sync+0x1a0/0x1a4 [ 219.086148][ T8544] [ 219.086148][ T8544] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 219.088289][ T8544] __mutex_lock_common+0x194/0x2154 [ 219.089861][ T8544] mutex_lock_nested+0xa4/0xf8 [ 219.091359][ T8544] bg_scan_update+0x9c/0x470 [ 219.092805][ T8544] process_one_work+0x790/0x11b8 [ 219.094332][ T8544] worker_thread+0x910/0x1034 [ 219.095736][ T8544] kthread+0x37c/0x45c [ 219.096998][ T8544] ret_from_fork+0x10/0x20 [ 219.098300][ T8544] [ 219.098300][ T8544] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 219.101066][ T8544] __lock_acquire+0x32d4/0x7638 [ 219.102422][ T8544] lock_acquire+0x240/0x77c [ 219.103803][ T8544] __flush_work+0xf8/0x1c0 [ 219.105206][ T8544] __cancel_work_timer+0x3ec/0x548 [ 219.106678][ T8544] cancel_work_sync+0x24/0x38 [ 219.107991][ T8544] hci_request_cancel_all+0xcc/0x2d0 [ 219.109550][ T8544] hci_dev_do_close+0x54/0x1060 [ 219.110990][ T8544] hci_rfkill_set_block+0xdc/0x1d0 [ 219.112548][ T8544] rfkill_set_block+0x18c/0x37c [ 219.113977][ T8544] rfkill_fop_write+0x594/0x750 [ 219.115451][ T8544] do_iter_write+0x33c/0x66c [ 219.116872][ T8544] do_writev+0x220/0x3ec [ 219.118234][ T8544] __arm64_sys_writev+0x80/0x94 [ 219.119724][ T8544] invoke_syscall+0x98/0x2b8 [ 219.121167][ T8544] el0_svc_common+0x138/0x258 [ 219.122642][ T8544] do_el0_svc+0x58/0x14c [ 219.123990][ T8544] el0_svc+0x7c/0x1f0 [ 219.125191][ T8544] el0t_64_sync_handler+0x84/0xe4 [ 219.126776][ T8544] el0t_64_sync+0x1a0/0x1a4 [ 219.128243][ T8544] [ 219.128243][ T8544] other info that might help us debug this: [ 219.128243][ T8544] [ 219.131099][ T8544] Chain exists of: [ 219.131099][ T8544] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 219.131099][ T8544] [ 219.135473][ T8544] Possible unsafe locking scenario: [ 219.135473][ T8544] [ 219.137518][ T8544] CPU0 CPU1 [ 219.138984][ T8544] ---- ---- [ 219.140448][ T8544] lock(rfkill_global_mutex); [ 219.141747][ T8544] lock(&data->open_mutex); [ 219.143751][ T8544] lock(rfkill_global_mutex); [ 219.145805][ T8544] lock((work_completion)(&hdev->bg_scan_update)); [ 219.147673][ T8544] [ 219.147673][ T8544] *** DEADLOCK *** [ 219.147673][ T8544] [ 219.149908][ T8544] 1 lock held by syz.6.1530/8544: [ 219.151367][ T8544] #0: ffff800016f39608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 219.154198][ T8544] [ 219.154198][ T8544] stack backtrace: [ 219.155799][ T8544] CPU: 0 PID: 8544 Comm: syz.6.1530 Not tainted 5.15.178-syzkaller #0 [ 219.158049][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.160836][ T8544] Call trace: [ 219.161736][ T8544] dump_backtrace+0x0/0x530 [ 219.163015][ T8544] show_stack+0x2c/0x3c [ 219.164162][ T8544] dump_stack_lvl+0x108/0x170 [ 219.165349][ T8544] dump_stack+0x1c/0x58 [ 219.166486][ T8544] print_circular_bug+0x150/0x1b8 [ 219.167891][ T8544] check_noncircular+0x2cc/0x378 [ 219.169278][ T8544] __lock_acquire+0x32d4/0x7638 [ 219.170689][ T8544] lock_acquire+0x240/0x77c [ 219.171990][ T8544] __flush_work+0xf8/0x1c0 [ 219.173212][ T8544] __cancel_work_timer+0x3ec/0x548 [ 219.174608][ T8544] cancel_work_sync+0x24/0x38 [ 219.175871][ T8544] hci_request_cancel_all+0xcc/0x2d0 [ 219.177321][ T8544] hci_dev_do_close+0x54/0x1060 [ 219.178665][ T8544] hci_rfkill_set_block+0xdc/0x1d0 [ 219.180101][ T8544] rfkill_set_block+0x18c/0x37c [ 219.181441][ T8544] rfkill_fop_write+0x594/0x750 [ 219.182787][ T8544] do_iter_write+0x33c/0x66c [ 219.184038][ T8544] do_writev+0x220/0x3ec [ 219.185245][ T8544] __arm64_sys_writev+0x80/0x94 [ 219.186558][ T8544] invoke_syscall+0x98/0x2b8 [ 219.187851][ T8544] el0_svc_common+0x138/0x258 [ 219.189201][ T8544] do_el0_svc+0x58/0x14c [ 219.190390][ T8544] el0_svc+0x7c/0x1f0 [ 219.191425][ T8544] el0t_64_sync_handler+0x84/0xe4 [ 219.192823][ T8544] el0t_64_sync+0x1a0/0x1a4 [ 219.231275][ T8547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.351971][ T8410] Set syz1 is full, maxelem 65536 reached [ 222.407335][ T8547] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.412259][ T8547] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.416753][ T8547] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.421060][ T8547] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0