last executing test programs: 14.575015821s ago: executing program 4 (id=14093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.471254363s ago: executing program 4 (id=14094): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x8000100) r1 = gettid() sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff888e01f771558043006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81788f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90ee1a1206d45d96d0b099fc73a940000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c19a1d08d03e571bc28b8e8edfb33740add6e2aa70fda5b2212c69632df560596cdb9c962e5e12287e38564bf10e78686a3e3d60251d46f4939a96dd83d183935b9d2d537586eddd438b5cf9a5631964e72afa130cc04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = fcntl$dupfd(r3, 0x0, r2) accept4$packet(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x1) 1.834607367s ago: executing program 3 (id=14275): unshare(0x68040200) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unshare(0x14000380) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r4, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xd7, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xd0, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000025c0)={'ip6gre0\x00', &(0x7f0000002580)=@ethtool_ts_info}) mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 688.273629ms ago: executing program 2 (id=14297): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) socket$inet(0xa, 0x801, 0x84) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 674.786641ms ago: executing program 3 (id=14298): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 487.153123ms ago: executing program 0 (id=14299): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 445.767948ms ago: executing program 3 (id=14300): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 299.401675ms ago: executing program 2 (id=14303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) 295.091905ms ago: executing program 1 (id=14304): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c4"], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 289.930446ms ago: executing program 4 (id=14214): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) 268.337048ms ago: executing program 3 (id=14305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 254.84586ms ago: executing program 4 (id=14306): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) timerfd_create(0x2, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x0, 0x0, @private2}], 0x38) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000300"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x7c8) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x69df, 0x55ec7737}) 240.126171ms ago: executing program 0 (id=14307): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) timerfd_create(0x2, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x0, 0x0, @private2}], 0x38) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000300"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x7c8) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x69df, 0x55ec7737}) 220.724964ms ago: executing program 1 (id=14308): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x4000054) 183.538608ms ago: executing program 4 (id=14309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(0x0, 0x64842, 0x108) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 171.55383ms ago: executing program 2 (id=14310): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x7c8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 167.57898ms ago: executing program 1 (id=14311): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) 166.65467ms ago: executing program 0 (id=14312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 148.292552ms ago: executing program 3 (id=14313): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x1, 0x700, 0xf09f, 0x7b5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x66, 0x0, 0x6, 0x2f, 0x0, @local, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa, 0x4, 0x10001, 0x400, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x3, @void, @value, @void, @value}, 0x50) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x1a, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 130.266884ms ago: executing program 1 (id=14314): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r0, r1, 0x2f, 0x4, 0x4, @void, @value}, 0x20) 123.345095ms ago: executing program 0 (id=14315): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 82.17545ms ago: executing program 1 (id=14316): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) 81.78549ms ago: executing program 0 (id=14317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) 80.60531ms ago: executing program 3 (id=14318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 72.1952ms ago: executing program 2 (id=14319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ea00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x806, 0x0) listen(r5, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) 65.864722ms ago: executing program 1 (id=14320): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) 3.324329ms ago: executing program 4 (id=14321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) 3.014709ms ago: executing program 0 (id=14322): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = memfd_secret(0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setrlimit(0xe, &(0x7f0000000240)={0x5, 0x81}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000001c0)={0x5, 0x0, '\x00', 0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.747029ms ago: executing program 2 (id=14323): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) timerfd_create(0x2, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x0, 0x0, @private2}], 0x38) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000300"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x7c8) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x69df, 0x55ec7737}) 0s ago: executing program 2 (id=14324): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) timerfd_create(0x2, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x0, 0x0, @private2}], 0x38) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000300"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x69df, 0x55ec7737}) kernel console output (not intermixed with test programs): main item tag 0x0 [ 1156.545045][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.552458][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.559962][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.567372][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.574826][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.582257][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.589708][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.597153][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.604637][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.612119][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.619518][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.627033][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.634431][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.641927][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.649514][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.656950][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.664423][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.670927][T22392] hub 6-0:1.0: USB hub found [ 1156.671878][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.671905][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.679534][T22392] hub 6-0:1.0: 8 ports detected [ 1156.684346][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.704316][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.711847][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.719265][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.726676][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.734091][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.741522][ T3324] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1156.750305][ T3324] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1156.793261][T22388] loop1: detected capacity change from 0 to 2048 [ 1156.839660][T22388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.850219][T22401] loop0: detected capacity change from 0 to 1024 [ 1156.875152][T22401] EXT4-fs: test_dummy_encryption option not supported [ 1156.889627][T22388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1156.907613][T22388] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1156.920198][T22388] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1156.920198][T22388] [ 1156.930046][T22388] EXT4-fs (loop1): Total free blocks count 0 [ 1156.936056][T22388] EXT4-fs (loop1): Free/Dirty block details [ 1156.942066][T22388] EXT4-fs (loop1): free_blocks=2415919104 [ 1156.947800][T22388] EXT4-fs (loop1): dirty_blocks=16 [ 1156.952948][T22388] EXT4-fs (loop1): Block reservation details [ 1156.958951][T22388] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1156.994569][ T29] audit: type=1326 audit(1729655050.262:107961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22416 comm="syz.3.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a083bdff9 code=0x7ffc0000 [ 1157.028084][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.047783][T22423] loop2: detected capacity change from 0 to 164 [ 1157.055957][T22423] Unable to read rock-ridge attributes [ 1157.064535][T22423] Unable to read rock-ridge attributes [ 1157.232791][T22431] loop2: detected capacity change from 0 to 128 [ 1157.311682][T22431] bond1: entered promiscuous mode [ 1157.316799][T22431] bond1: entered allmulticast mode [ 1157.337500][T22431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1157.357784][T22431] bond1 (unregistering): Released all slaves [ 1157.432775][T22443] 9pnet_fd: Insufficient options for proto=fd [ 1157.535596][T22452] 9pnet_fd: Insufficient options for proto=fd [ 1157.640770][T22460] hub 6-0:1.0: USB hub found [ 1157.645526][T22460] hub 6-0:1.0: 8 ports detected [ 1157.826033][T22471] 9pnet_fd: Insufficient options for proto=fd [ 1157.884762][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.914944][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.934420][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.959532][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.146963][T22496] loop0: detected capacity change from 0 to 164 [ 1158.159501][T22493] loop2: detected capacity change from 0 to 4096 [ 1158.166706][T22496] Unable to read rock-ridge attributes [ 1158.175430][T22496] Unable to read rock-ridge attributes [ 1158.205050][T22493] loop2: detected capacity change from 0 to 2048 [ 1158.219839][T22493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.235661][T22493] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1158.260164][T22493] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1158.272595][T22493] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1158.272595][T22493] [ 1158.282505][T22493] EXT4-fs (loop2): Total free blocks count 0 [ 1158.288595][T22493] EXT4-fs (loop2): Free/Dirty block details [ 1158.294524][T22493] EXT4-fs (loop2): free_blocks=2415919104 [ 1158.300327][T22493] EXT4-fs (loop2): dirty_blocks=16 [ 1158.305440][T22493] EXT4-fs (loop2): Block reservation details [ 1158.311479][T22493] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1158.341754][T20681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.381482][T22512] __nla_validate_parse: 12 callbacks suppressed [ 1158.381497][T22512] netlink: 1980 bytes leftover after parsing attributes in process `syz.0.13663'. [ 1158.513272][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13673'. [ 1158.525595][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13673'. [ 1158.537224][T22525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1158.542922][T22529] loop3: detected capacity change from 0 to 2048 [ 1158.581839][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13677'. [ 1158.589005][T22529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.594708][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13677'. [ 1158.605107][T22529] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.13674: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1158.629371][T22529] EXT4-fs (loop3): Remounting filesystem read-only [ 1158.655667][T19963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.675301][T22541] 9pnet_fd: Insufficient options for proto=fd [ 1158.770884][T22557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1158.877026][T22572] 9pnet_fd: Insufficient options for proto=fd [ 1159.024366][T22577] loop4: detected capacity change from 0 to 8192 [ 1159.085983][T22589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1159.153728][T22595] loop2: detected capacity change from 0 to 2048 [ 1159.229056][T22595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.263866][T22595] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1159.276259][T22595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1159.276259][T22595] [ 1159.285956][T22595] EXT4-fs (loop2): Total free blocks count 0 [ 1159.292075][T22595] EXT4-fs (loop2): Free/Dirty block details [ 1159.297979][T22595] EXT4-fs (loop2): free_blocks=0 [ 1159.303062][T22595] EXT4-fs (loop2): dirty_blocks=0 [ 1159.308137][T22595] EXT4-fs (loop2): Block reservation details [ 1159.314204][T22595] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 1159.333826][T22616] 9pnet_fd: Insufficient options for proto=fd [ 1159.428032][T20681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.490577][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13714'. [ 1159.503034][T22628] loop0: detected capacity change from 0 to 4096 [ 1159.520929][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13714'. [ 1159.531262][T22633] loop2: detected capacity change from 0 to 8192 [ 1159.571068][T22628] loop0: detected capacity change from 0 to 2048 [ 1159.602810][T22628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.619135][T22628] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1159.634598][T22646] 9pnet_fd: Insufficient options for proto=fd [ 1159.647867][T22628] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1159.660379][T22628] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1159.660379][T22628] [ 1159.670051][T22628] EXT4-fs (loop0): Total free blocks count 0 [ 1159.676078][T22628] EXT4-fs (loop0): Free/Dirty block details [ 1159.682008][T22628] EXT4-fs (loop0): free_blocks=2415919104 [ 1159.687757][T22628] EXT4-fs (loop0): dirty_blocks=16 [ 1159.692959][T22628] EXT4-fs (loop0): Block reservation details [ 1159.699015][T22628] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1159.708375][T22654] loop6: detected capacity change from 0 to 7 [ 1159.714797][T22654] Buffer I/O error on dev loop6, logical block 0, async page read [ 1159.722731][T22654] Buffer I/O error on dev loop6, logical block 0, async page read [ 1159.730729][T22654] loop6: unable to read partition table [ 1159.736947][T22654] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1159.736947][T22654] ) failed (rc=-5) [ 1159.771312][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.840413][T22676] 9pnet_fd: Insufficient options for proto=fd [ 1159.902553][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13727'. [ 1159.907714][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13726'. [ 1159.912349][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13727'. [ 1159.955316][T22692] loop4: detected capacity change from 0 to 1024 [ 1160.119223][T22692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.200583][T22752] loop0: detected capacity change from 0 to 2048 [ 1160.230901][T22758] loop1: detected capacity change from 0 to 164 [ 1160.238359][T22758] Unable to read rock-ridge attributes [ 1160.244952][T22758] Unable to read rock-ridge attributes [ 1160.366010][T22752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.453783][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.654483][T22796] loop0: detected capacity change from 0 to 2048 [ 1160.687480][T22803] 9pnet_fd: Insufficient options for proto=fd [ 1160.693929][T22796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.775047][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.803410][T21950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.901226][T22836] 9pnet_fd: Insufficient options for proto=fd [ 1160.967373][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x1 [ 1160.970333][T22842] 9pnet_fd: Insufficient options for proto=fd [ 1160.974837][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1160.988412][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1160.995933][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.003474][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.010997][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.018464][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.025916][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.033327][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.040748][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.049914][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.057332][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.064769][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.072300][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.079746][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.087150][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.094566][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.102030][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.109556][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.116940][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.124352][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.131773][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.139180][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.146629][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.154129][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.161634][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.169076][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.176470][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.183974][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.191382][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.198863][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.206259][ T3324] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1161.214125][ T3324] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1161.252812][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 1161.252826][ T29] audit: type=1326 audit(1729655054.522:108341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="syz.4.13770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.267318][T22852] loop4: detected capacity change from 0 to 164 [ 1161.282865][ T29] audit: type=1326 audit(1729655054.522:108342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="syz.4.13770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.312968][ T29] audit: type=1326 audit(1729655054.522:108343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="syz.4.13770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.313244][T22852] Unable to read rock-ridge attributes [ 1161.336835][ T29] audit: type=1326 audit(1729655054.522:108344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.365568][ T29] audit: type=1326 audit(1729655054.522:108345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.383004][T22852] Unable to read rock-ridge attributes [ 1161.388710][ T29] audit: type=1326 audit(1729655054.522:108346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.417461][ T29] audit: type=1326 audit(1729655054.522:108347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.440658][ T29] audit: type=1326 audit(1729655054.522:108348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.463883][ T29] audit: type=1326 audit(1729655054.522:108349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.487120][ T29] audit: type=1326 audit(1729655054.522:108350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22849 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb171f0dff9 code=0x7ffc0000 [ 1161.560843][T22859] loop2: detected capacity change from 0 to 128 [ 1161.584255][T22859] bond1: entered promiscuous mode [ 1161.589462][T22859] bond1: entered allmulticast mode [ 1161.595054][T22859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1161.610941][T22859] bond1 (unregistering): Released all slaves [ 1161.760192][T22879] 9pnet_fd: Insufficient options for proto=fd [ 1161.783570][T22873] 9pnet_fd: Insufficient options for proto=fd [ 1161.906309][T22895] loop3: detected capacity change from 0 to 2048 [ 1161.924911][T22895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.970370][T22895] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1161.982714][T22895] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1161.982714][T22895] [ 1161.992456][T22895] EXT4-fs (loop3): Total free blocks count 0 [ 1161.998480][T22895] EXT4-fs (loop3): Free/Dirty block details [ 1162.004479][T22895] EXT4-fs (loop3): free_blocks=0 [ 1162.009460][T22895] EXT4-fs (loop3): dirty_blocks=0 [ 1162.014521][T22895] EXT4-fs (loop3): Block reservation details [ 1162.020576][T22895] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1162.097401][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x1 [ 1162.105088][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.112609][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.120114][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.127553][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.134754][T22925] loop6: detected capacity change from 0 to 7 [ 1162.134993][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.141144][T22925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1162.148535][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.156374][T22925] Buffer I/O error on dev loop6, logical block 0, async page read [ 1162.156395][T22925] loop6: unable to read partition table [ 1162.156419][T22925] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1162.156419][T22925] ) failed (rc=-5) [ 1162.190730][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.198170][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.205627][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.216219][T19963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.234083][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.241553][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.249013][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.256462][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.263980][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.271414][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.278846][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.286287][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.293735][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.301195][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.308685][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.316170][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.323623][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.331079][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.338654][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.346221][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.353734][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.361253][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.368821][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.376369][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.383802][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.391211][ T24] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1162.399079][ T24] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1162.411794][T22934] loop3: detected capacity change from 0 to 2048 [ 1162.446110][T22934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.485039][T22951] loop1: detected capacity change from 0 to 2048 [ 1162.511505][T22951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.541662][T22951] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1162.554127][T22951] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1162.554127][T22951] [ 1162.563898][T22951] EXT4-fs (loop1): Total free blocks count 0 [ 1162.569957][T22951] EXT4-fs (loop1): Free/Dirty block details [ 1162.576202][T22951] EXT4-fs (loop1): free_blocks=0 [ 1162.581172][T22951] EXT4-fs (loop1): dirty_blocks=0 [ 1162.586200][T22951] EXT4-fs (loop1): Block reservation details [ 1162.592325][T22951] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 1162.610429][T19963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.789099][T22972] loop3: detected capacity change from 0 to 4096 [ 1162.805335][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.808977][T23021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1162.881423][T22972] loop3: detected capacity change from 0 to 2048 [ 1162.930570][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.938276][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.945808][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.953571][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.961218][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.968785][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.976277][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.983782][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.991393][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1162.998930][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.000263][T23036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.006403][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.018048][T23035] loop0: detected capacity change from 0 to 4096 [ 1163.022327][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.032331][T23029] 9pnet_fd: Insufficient options for proto=fd [ 1163.036024][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.049696][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.057389][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.064912][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.072568][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.073700][T23038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.080073][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.087555][T23038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.094925][ T24] hid-generic FFFC:10000:0001.0069: unknown main item tag 0x0 [ 1163.122180][T23036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.134983][T23035] loop0: detected capacity change from 0 to 2048 [ 1163.149861][ T24] hid-generic FFFC:10000:0001.0069: hidraw0: HID v0.01 Device [syz1] on syz0 [ 1163.150873][T22972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.173117][T23038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.180705][T23038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.206664][T23035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.207474][T23033] dvmrp0: entered allmulticast mode [ 1163.224253][T22972] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1163.243878][T23035] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1163.244023][T22972] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1163.271090][T22972] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1163.271090][T22972] [ 1163.280765][T22972] EXT4-fs (loop3): Total free blocks count 0 [ 1163.286772][T22972] EXT4-fs (loop3): Free/Dirty block details [ 1163.292736][T22972] EXT4-fs (loop3): free_blocks=2415919104 [ 1163.297580][T23035] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1163.298509][T22972] EXT4-fs (loop3): dirty_blocks=16 [ 1163.298527][T22972] EXT4-fs (loop3): Block reservation details [ 1163.310877][T23035] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1163.310877][T23035] [ 1163.315949][T22972] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1163.321935][T23035] EXT4-fs (loop0): Total free blocks count 0 [ 1163.332679][T23036] dvmrp0: left allmulticast mode [ 1163.337539][T23035] EXT4-fs (loop0): Free/Dirty block details [ 1163.337555][T23035] EXT4-fs (loop0): free_blocks=2415919104 [ 1163.360272][T23035] EXT4-fs (loop0): dirty_blocks=16 [ 1163.365455][T23035] EXT4-fs (loop0): Block reservation details [ 1163.371481][T23035] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1163.413407][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.431080][T19963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.463132][T23055] loop1: detected capacity change from 0 to 128 [ 1163.472335][T23058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1163.485635][T23057] loop0: detected capacity change from 0 to 2048 [ 1163.496053][T23055] bond1: entered promiscuous mode [ 1163.501314][T23055] bond1: entered allmulticast mode [ 1163.506642][T23055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1163.519356][T23055] bond1 (unregistering): Released all slaves [ 1163.561719][T23057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.601827][T23057] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.13812: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1163.665949][T23057] EXT4-fs (loop0): Remounting filesystem read-only [ 1163.675163][T23075] 9pnet_fd: Insufficient options for proto=fd [ 1163.733137][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.758091][T23080] loop3: detected capacity change from 0 to 164 [ 1163.766084][T23080] Unable to read rock-ridge attributes [ 1163.779731][T23080] Unable to read rock-ridge attributes [ 1163.864626][T23082] loop0: detected capacity change from 0 to 4096 [ 1163.926465][T23082] loop0: detected capacity change from 0 to 2048 [ 1164.050598][T23082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.082916][T23082] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1164.118208][T23082] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1164.130685][T23082] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1164.130685][T23082] [ 1164.140384][T23082] EXT4-fs (loop0): Total free blocks count 0 [ 1164.146364][T23082] EXT4-fs (loop0): Free/Dirty block details [ 1164.152288][T23082] EXT4-fs (loop0): free_blocks=2415919104 [ 1164.158013][T23082] EXT4-fs (loop0): dirty_blocks=16 [ 1164.163151][T23082] EXT4-fs (loop0): Block reservation details [ 1164.169169][T23082] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1164.252274][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.300912][T23107] hub 6-0:1.0: USB hub found [ 1164.305730][T23107] hub 6-0:1.0: 8 ports detected [ 1164.344646][T23109] 9pnet_fd: Insufficient options for proto=fd [ 1164.427161][T23112] loop0: detected capacity change from 0 to 2048 [ 1164.452323][T23112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.465857][T23112] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.13834: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1164.482793][T23112] EXT4-fs (loop0): Remounting filesystem read-only [ 1164.501610][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.567528][T23117] loop0: detected capacity change from 0 to 128 [ 1164.747328][T23117] bond1: entered promiscuous mode [ 1164.752524][T23117] bond1: entered allmulticast mode [ 1164.760053][T23117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1164.853346][T23117] bond1 (unregistering): Released all slaves [ 1164.896715][T23121] loop4: detected capacity change from 0 to 8192 [ 1165.013029][T23130] loop1: detected capacity change from 0 to 1024 [ 1165.039377][T23130] EXT4-fs: test_dummy_encryption option not supported [ 1165.132225][T23135] loop4: detected capacity change from 0 to 512 [ 1165.210716][T23135] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1165.246244][T23135] EXT4-fs (loop4): mount failed [ 1165.592639][T23156] loop0: detected capacity change from 0 to 164 [ 1165.615403][T23156] Unable to read rock-ridge attributes [ 1165.623582][T23156] Unable to read rock-ridge attributes [ 1165.691520][T23158] loop4: detected capacity change from 0 to 4096 [ 1165.756042][T23158] loop4: detected capacity change from 0 to 2048 [ 1165.802993][T23158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.835064][T23158] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1165.875028][T23158] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1165.887573][T23158] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1165.887573][T23158] [ 1165.897327][T23158] EXT4-fs (loop4): Total free blocks count 0 [ 1165.903361][T23158] EXT4-fs (loop4): Free/Dirty block details [ 1165.909326][T23158] EXT4-fs (loop4): free_blocks=2415919104 [ 1165.915125][T23158] EXT4-fs (loop4): dirty_blocks=16 [ 1165.920277][T23158] EXT4-fs (loop4): Block reservation details [ 1165.926322][T23158] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1165.979147][T21950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.002391][T23184] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1166.062429][T23186] loop4: detected capacity change from 0 to 2048 [ 1166.155261][T23198] loop2: detected capacity change from 0 to 2048 [ 1166.157823][T23186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.226511][T23198] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.13865: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1166.255793][T23198] EXT4-fs (loop2): Remounting filesystem read-only [ 1166.380552][T23223] loop4: detected capacity change from 0 to 1024 [ 1166.387174][T23223] EXT4-fs: test_dummy_encryption option not supported [ 1166.501120][T23229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.521896][T23229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.536921][T23229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.545659][T23229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.555467][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 1166.555484][ T29] audit: type=1326 audit(1729655059.822:108528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.605549][ T29] audit: type=1326 audit(1729655059.852:108529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.639400][ T29] audit: type=1326 audit(1729655059.912:108530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.734657][ T29] audit: type=1326 audit(1729655059.942:108531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.758590][ T29] audit: type=1326 audit(1729655059.942:108532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.782342][ T29] audit: type=1326 audit(1729655059.942:108533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.806090][ T29] audit: type=1326 audit(1729655059.942:108534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.830028][ T29] audit: type=1326 audit(1729655059.942:108535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.853903][ T29] audit: type=1326 audit(1729655059.942:108536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1166.877576][ T29] audit: type=1326 audit(1729655059.942:108537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23228 comm="syz.2.13871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6c8bdff9 code=0x7ffc0000 [ 1167.150726][T23293] loop3: detected capacity change from 0 to 4096 [ 1167.190953][T23293] loop3: detected capacity change from 0 to 2048 [ 1167.204022][T23300] loop0: detected capacity change from 0 to 1024 [ 1167.265533][T23305] loop1: detected capacity change from 0 to 164 [ 1167.281962][T23293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1167.282443][T23305] Unable to read rock-ridge attributes [ 1167.300622][T23293] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1167.314744][T23293] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1167.314744][T23293] [ 1167.324523][T23293] EXT4-fs (loop3): Total free blocks count 0 [ 1167.329762][T23305] Unable to read rock-ridge attributes [ 1167.330622][T23293] EXT4-fs (loop3): Free/Dirty block details [ 1167.341998][T23293] EXT4-fs (loop3): free_blocks=2415919104 [ 1167.348011][T23293] EXT4-fs (loop3): dirty_blocks=16 [ 1167.353197][T23293] EXT4-fs (loop3): Block reservation details [ 1167.357085][T23313] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1167.359333][T23293] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1167.378637][T23318] loop4: detected capacity change from 0 to 128 [ 1167.403839][T23318] bond1: entered promiscuous mode [ 1167.409073][T23318] bond1: entered allmulticast mode [ 1167.414393][T23318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1167.426554][T23318] bond1 (unregistering): Released all slaves [ 1167.436211][T23324] __nla_validate_parse: 5 callbacks suppressed [ 1167.436228][T23324] netlink: 124 bytes leftover after parsing attributes in process `syz.3.13883'. [ 1167.480991][T23330] loop1: detected capacity change from 0 to 1024 [ 1167.487745][T23330] EXT4-fs: test_dummy_encryption option not supported [ 1167.541518][T23339] loop4: detected capacity change from 0 to 164 [ 1167.548733][T23339] Unable to read rock-ridge attributes [ 1167.554854][T23339] Unable to read rock-ridge attributes [ 1167.572664][T23341] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.13887'. [ 1167.593374][T23344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.602072][T23344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.610936][T23344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.619606][T23344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.108242][T23353] loop0: detected capacity change from 0 to 1024 [ 1168.174478][T23361] FAULT_INJECTION: forcing a failure. [ 1168.174478][T23361] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.187244][T23361] CPU: 1 UID: 0 PID: 23361 Comm: syz.4.13898 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1168.199637][T23361] Tainted: [W]=WARN [ 1168.203532][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1168.213584][T23361] Call Trace: [ 1168.216858][T23361] [ 1168.219822][T23361] dump_stack_lvl+0xf2/0x150 [ 1168.224417][T23361] dump_stack+0x15/0x20 [ 1168.228631][T23361] should_fail_ex+0x223/0x230 [ 1168.233344][T23361] ? __alloc_skb+0x10b/0x310 [ 1168.237950][T23361] should_failslab+0x8f/0xb0 [ 1168.242561][T23361] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 1168.248429][T23361] __alloc_skb+0x10b/0x310 [ 1168.252906][T23361] tcp_stream_alloc_skb+0x2f/0x1e0 [ 1168.258035][T23361] tcp_sendmsg_locked+0x93a/0x2700 [ 1168.263223][T23361] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1168.268303][T23361] tcp_sendmsg+0x30/0x50 [ 1168.272614][T23361] inet_sendmsg+0x77/0xd0 [ 1168.277079][T23361] __sock_sendmsg+0x102/0x180 [ 1168.281784][T23361] __sys_sendto+0x1d6/0x260 [ 1168.286305][T23361] __x64_sys_sendto+0x78/0x90 [ 1168.291000][T23361] x64_sys_call+0x2959/0x2d60 [ 1168.295707][T23361] do_syscall_64+0xc9/0x1c0 [ 1168.300210][T23361] ? clear_bhb_loop+0x55/0xb0 [ 1168.304922][T23361] ? clear_bhb_loop+0x55/0xb0 [ 1168.309647][T23361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.315578][T23361] RIP: 0033:0x7fb171f0dff9 [ 1168.320063][T23361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.339872][T23361] RSP: 002b:00007fb170b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1168.348355][T23361] RAX: ffffffffffffffda RBX: 00007fb1720c5f80 RCX: 00007fb171f0dff9 [ 1168.356346][T23361] RDX: 994b6e03113064ae RSI: 0000000020000700 RDI: 0000000000000003 [ 1168.364326][T23361] RBP: 00007fb170b81090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.372318][T23361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.380334][T23361] R13: 0000000000000000 R14: 00007fb1720c5f80 R15: 00007fff0f29aac8 [ 1168.388331][T23361] [ 1168.398898][T23366] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13899'. [ 1168.423063][T23370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1168.468865][T23380] loop3: detected capacity change from 0 to 128 [ 1168.482563][T23380] bond1: entered promiscuous mode [ 1168.487655][T23380] bond1: entered allmulticast mode [ 1168.492843][T23382] loop6: detected capacity change from 0 to 7 [ 1168.493016][T23380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.501804][T23382] Buffer I/O error on dev loop6, logical block 0, async page read [ 1168.513025][T23383] loop2: detected capacity change from 0 to 512 [ 1168.513542][T23382] Buffer I/O error on dev loop6, logical block 0, async page read [ 1168.527716][T23382] loop6: unable to read partition table [ 1168.535274][T23380] bond1 (unregistering): Released all slaves [ 1168.536034][T23382] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1168.536034][T23382] ) failed (rc=-5) [ 1168.582013][T23383] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1168.599163][T23383] EXT4-fs (loop2): mount failed [ 1168.627626][T23388] loop3: detected capacity change from 0 to 128 [ 1168.643515][T23388] bond1: entered promiscuous mode [ 1168.648687][T23388] bond1: entered allmulticast mode [ 1168.655287][T23388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.669956][T23388] bond1 (unregistering): Released all slaves [ 1168.752468][T23394] 9pnet_fd: Insufficient options for proto=fd [ 1169.063198][T23401] 9pnet_fd: Insufficient options for proto=fd [ 1169.131991][T23409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1169.227570][T23416] loop4: detected capacity change from 0 to 128 [ 1169.241930][T23419] 9pnet_fd: Insufficient options for proto=fd [ 1169.243367][T23416] bond1: entered promiscuous mode [ 1169.253214][T23416] bond1: entered allmulticast mode [ 1169.261297][T23416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1169.281844][T23416] bond1 (unregistering): Released all slaves [ 1169.301786][T23424] 9pnet_fd: Insufficient options for proto=fd [ 1169.354485][T23433] loop1: detected capacity change from 0 to 2048 [ 1169.533694][T23462] loop4: detected capacity change from 0 to 8192 [ 1169.575543][T23477] syz.4.13930[23477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.575711][T23477] syz.4.13930[23477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.587727][T23477] syz.4.13930[23477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1170.055000][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13936'. [ 1170.077787][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13936'. [ 1170.233075][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13937'. [ 1170.242490][T23586] netlink: 112 bytes leftover after parsing attributes in process `syz.3.13939'. [ 1170.301404][T23594] loop3: detected capacity change from 0 to 2048 [ 1170.341666][T23594] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1170.354057][T23594] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1170.354057][T23594] [ 1170.363779][T23594] EXT4-fs (loop3): Total free blocks count 0 [ 1170.364977][T23602] loop0: detected capacity change from 0 to 2048 [ 1170.369822][T23594] EXT4-fs (loop3): Free/Dirty block details [ 1170.369839][T23594] EXT4-fs (loop3): free_blocks=0 [ 1170.387170][T23594] EXT4-fs (loop3): dirty_blocks=0 [ 1170.391438][T23606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.392420][T23594] EXT4-fs (loop3): Block reservation details [ 1170.404557][T23602] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.13943: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1170.407009][T23594] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1170.430204][T23606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.439657][T23606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.447059][T23602] EXT4-fs (loop0): Remounting filesystem read-only [ 1170.454919][T23606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.564884][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13950'. [ 1170.587732][T23623] netlink: 112 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1170.680768][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13953'. [ 1170.702558][T23637] loop0: detected capacity change from 0 to 2048 [ 1170.720180][T23637] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.13956: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1170.737369][T23637] EXT4-fs (loop0): Remounting filesystem read-only [ 1170.768226][T23643] FAULT_INJECTION: forcing a failure. [ 1170.768226][T23643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.781434][T23643] CPU: 1 UID: 0 PID: 23643 Comm: syz.0.13957 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1170.793799][T23643] Tainted: [W]=WARN [ 1170.797706][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1170.807783][T23643] Call Trace: [ 1170.811117][T23643] [ 1170.814065][T23643] dump_stack_lvl+0xf2/0x150 [ 1170.818688][T23643] dump_stack+0x15/0x20 [ 1170.822895][T23643] should_fail_ex+0x223/0x230 [ 1170.827633][T23643] should_fail+0xb/0x10 [ 1170.831881][T23643] should_fail_usercopy+0x1a/0x20 [ 1170.837013][T23643] _copy_from_user+0x1e/0xd0 [ 1170.841636][T23643] btf_new_fd+0x1fc/0x790 [ 1170.846019][T23643] bpf_btf_load+0x115/0x130 [ 1170.850545][T23643] __sys_bpf+0x686/0x7a0 [ 1170.854930][T23643] __x64_sys_bpf+0x43/0x50 [ 1170.859395][T23643] x64_sys_call+0x2625/0x2d60 [ 1170.864194][T23643] do_syscall_64+0xc9/0x1c0 [ 1170.868870][T23643] ? clear_bhb_loop+0x55/0xb0 [ 1170.873638][T23643] ? clear_bhb_loop+0x55/0xb0 [ 1170.878392][T23643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.884326][T23643] RIP: 0033:0x7f0401acdff9 [ 1170.888754][T23643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.908396][T23643] RSP: 002b:00007f0400747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1170.916847][T23643] RAX: ffffffffffffffda RBX: 00007f0401c85f80 RCX: 00007f0401acdff9 [ 1170.924837][T23643] RDX: 0000000000000028 RSI: 0000000020000280 RDI: 0000000000000012 [ 1170.932824][T23643] RBP: 00007f0400747090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.940905][T23643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.948959][T23643] R13: 0000000000000001 R14: 00007f0401c85f80 R15: 00007ffc4a1282c8 [ 1170.956961][T23643] [ 1171.161757][T23661] 9pnet_fd: Insufficient options for proto=fd [ 1171.168775][T23662] loop6: detected capacity change from 0 to 7 [ 1171.183254][T23662] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.199138][T23662] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.207093][T23662] loop6: unable to read partition table [ 1171.216124][T23662] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1171.216124][T23662] ) failed (rc=-5) [ 1171.293672][T23672] loop0: detected capacity change from 0 to 128 [ 1171.305932][T23668] loop4: detected capacity change from 0 to 8192 [ 1171.342321][T23674] loop0: detected capacity change from 0 to 2048 [ 1171.376885][T23674] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1171.389392][T23674] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1171.389392][T23674] [ 1171.399172][T23674] EXT4-fs (loop0): Total free blocks count 0 [ 1171.405188][T23674] EXT4-fs (loop0): Free/Dirty block details [ 1171.411183][T23674] EXT4-fs (loop0): free_blocks=0 [ 1171.416324][T23674] EXT4-fs (loop0): dirty_blocks=0 [ 1171.421419][T23674] EXT4-fs (loop0): Block reservation details [ 1171.427485][T23674] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1171.458429][T23629] 9pnet_fd: p9_fd_create_tcp (23629): problem connecting socket to 127.0.0.1 [ 1171.516037][T23693] loop0: detected capacity change from 0 to 128 [ 1171.546320][T23702] loop0: detected capacity change from 0 to 128 [ 1171.780979][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 1171.780997][ T29] audit: type=1326 audit(1729655065.052:108766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.814574][ T29] audit: type=1326 audit(1729655065.052:108767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.838585][ T29] audit: type=1326 audit(1729655065.052:108768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.862472][ T29] audit: type=1326 audit(1729655065.052:108769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.886270][ T29] audit: type=1326 audit(1729655065.052:108770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.910194][ T29] audit: type=1326 audit(1729655065.052:108771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.934013][ T29] audit: type=1326 audit(1729655065.052:108772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.957818][ T29] audit: type=1326 audit(1729655065.052:108773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1171.981600][ T29] audit: type=1326 audit(1729655065.052:108774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1172.003887][T23725] loop0: detected capacity change from 0 to 512 [ 1172.005391][ T29] audit: type=1326 audit(1729655065.052:108775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.0.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1172.043688][T23725] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1172.069111][T23725] EXT4-fs (loop0): mount failed [ 1172.090282][T23731] loop1: detected capacity change from 0 to 4096 [ 1172.116330][T23731] loop1: detected capacity change from 0 to 2048 [ 1172.143460][T23731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1172.160611][T23731] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1172.173006][T23731] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1172.173006][T23731] [ 1172.182812][T23731] EXT4-fs (loop1): Total free blocks count 0 [ 1172.188884][T23731] EXT4-fs (loop1): Free/Dirty block details [ 1172.194817][T23731] EXT4-fs (loop1): free_blocks=2415919104 [ 1172.200878][T23731] EXT4-fs (loop1): dirty_blocks=16 [ 1172.206010][T23731] EXT4-fs (loop1): Block reservation details [ 1172.212032][T23731] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1172.245159][T23740] loop0: detected capacity change from 0 to 2048 [ 1172.268657][T23744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.276219][T23744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.286200][T23744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.293710][T23744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.346633][T23748] 9pnet_fd: Insufficient options for proto=fd [ 1172.425682][T23761] loop4: detected capacity change from 0 to 1024 [ 1173.330374][T23788] loop1: detected capacity change from 0 to 128 [ 1173.344749][T23788] bond1: entered promiscuous mode [ 1173.349897][T23788] bond1: entered allmulticast mode [ 1173.355124][T23788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1173.367565][T23788] bond1 (unregistering): Released all slaves [ 1173.398767][T23794] __nla_validate_parse: 9 callbacks suppressed [ 1173.398783][T23794] netlink: 100 bytes leftover after parsing attributes in process `syz.4.14015'. [ 1173.459663][T23800] loop4: detected capacity change from 0 to 2048 [ 1173.491195][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14020'. [ 1173.500564][T23804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14020'. [ 1173.549586][T23814] loop0: detected capacity change from 0 to 128 [ 1173.628459][T23822] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14027'. [ 1173.675575][T23827] 9pnet_fd: Insufficient options for proto=fd [ 1173.710563][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14031'. [ 1173.722462][T23831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14031'. [ 1173.728652][T23833] loop4: detected capacity change from 0 to 8192 [ 1173.754466][T23839] 9pnet_fd: Insufficient options for proto=fd [ 1173.777789][T23843] loop0: detected capacity change from 0 to 128 [ 1173.849428][T23851] loop4: detected capacity change from 0 to 2048 [ 1173.864411][T23857] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14042'. [ 1173.866280][T23851] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1173.886035][T23851] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1173.886035][T23851] [ 1173.895819][T23851] EXT4-fs (loop4): Total free blocks count 0 [ 1173.901969][T23851] EXT4-fs (loop4): Free/Dirty block details [ 1173.907866][T23851] EXT4-fs (loop4): free_blocks=0 [ 1173.912871][T23851] EXT4-fs (loop4): dirty_blocks=0 [ 1173.918015][T23851] EXT4-fs (loop4): Block reservation details [ 1173.924101][T23851] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 1173.970563][T23861] 9pnet_fd: Insufficient options for proto=fd [ 1173.973043][T23859] loop0: detected capacity change from 0 to 2048 [ 1174.010911][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14045'. [ 1174.020238][T23865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14045'. [ 1174.064591][T23874] loop4: detected capacity change from 0 to 128 [ 1174.175450][T23898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1174.271449][T23916] netlink: 100 bytes leftover after parsing attributes in process `syz.4.14054'. [ 1174.327547][T23920] 9pnet_fd: Insufficient options for proto=fd [ 1174.371245][T23933] loop4: detected capacity change from 0 to 128 [ 1174.473519][T23948] loop4: detected capacity change from 0 to 512 [ 1174.489603][T23948] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1174.506349][T23948] EXT4-fs (loop4): mount failed [ 1174.540531][T23965] loop4: detected capacity change from 0 to 1024 [ 1174.547261][T23965] EXT4-fs: test_dummy_encryption option not supported [ 1174.597555][T23972] loop1: detected capacity change from 0 to 128 [ 1174.801426][T24002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.811572][T24002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.820836][T24002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.831136][T24002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.111164][T24055] loop0: detected capacity change from 0 to 2048 [ 1175.145491][T24055] EXT4-fs mount: 31 callbacks suppressed [ 1175.145510][T24055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.169525][T24055] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.14071: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1175.188025][T24055] EXT4-fs (loop0): Remounting filesystem read-only [ 1175.220127][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.490920][T24075] hub 6-0:1.0: USB hub found [ 1175.495678][T24075] hub 6-0:1.0: 8 ports detected [ 1175.539329][T24078] loop4: detected capacity change from 0 to 128 [ 1175.729869][T24084] loop4: detected capacity change from 0 to 2048 [ 1175.741229][T24084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.762482][T24084] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1175.774859][T24084] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1175.774859][T24084] [ 1175.784611][T24084] EXT4-fs (loop4): Total free blocks count 0 [ 1175.790638][T24084] EXT4-fs (loop4): Free/Dirty block details [ 1175.796594][T24084] EXT4-fs (loop4): free_blocks=0 [ 1175.801619][T24084] EXT4-fs (loop4): dirty_blocks=0 [ 1175.806735][T24084] EXT4-fs (loop4): Block reservation details [ 1175.812749][T24084] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 1175.853526][T21950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.076416][T24103] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1176.103385][T24106] FAULT_INJECTION: forcing a failure. [ 1176.103385][T24106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.116644][T24106] CPU: 0 UID: 0 PID: 24106 Comm: syz.4.14089 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1176.129145][T24106] Tainted: [W]=WARN [ 1176.133035][T24106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1176.143110][T24106] Call Trace: [ 1176.146415][T24106] [ 1176.149348][T24106] dump_stack_lvl+0xf2/0x150 [ 1176.153958][T24106] dump_stack+0x15/0x20 [ 1176.158137][T24106] should_fail_ex+0x223/0x230 [ 1176.162853][T24106] should_fail+0xb/0x10 [ 1176.167107][T24106] should_fail_usercopy+0x1a/0x20 [ 1176.172196][T24106] _copy_from_user+0x1e/0xd0 [ 1176.176813][T24106] copy_msghdr_from_user+0x54/0x2a0 [ 1176.182025][T24106] __sys_sendmmsg+0x21a/0x500 [ 1176.186913][T24106] ? trace_sys_enter+0x65/0xa0 [ 1176.191711][T24106] __x64_sys_sendmmsg+0x57/0x70 [ 1176.196634][T24106] x64_sys_call+0xa49/0x2d60 [ 1176.201358][T24106] do_syscall_64+0xc9/0x1c0 [ 1176.205896][T24106] ? clear_bhb_loop+0x55/0xb0 [ 1176.210590][T24106] ? clear_bhb_loop+0x55/0xb0 [ 1176.215361][T24106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.221423][T24106] RIP: 0033:0x7fb171f0dff9 [ 1176.225841][T24106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.245563][T24106] RSP: 002b:00007fb170b81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1176.253993][T24106] RAX: ffffffffffffffda RBX: 00007fb1720c5f80 RCX: 00007fb171f0dff9 [ 1176.262157][T24106] RDX: 0000000000000001 RSI: 0000000020004f00 RDI: 0000000000000003 [ 1176.270174][T24106] RBP: 00007fb170b81090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.278156][T24106] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.286213][T24106] R13: 0000000000000000 R14: 00007fb1720c5f80 R15: 00007fff0f29aac8 [ 1176.294228][T24106] [ 1176.425029][T24113] loop6: detected capacity change from 0 to 7 [ 1176.433274][T24113] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.443268][T24113] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.451152][T24113] loop6: unable to read partition table [ 1176.470494][T24113] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1176.470494][T24113] ) failed (rc=-5) [ 1176.552855][T24116] loop4: detected capacity change from 0 to 8192 [ 1176.578073][T24108] syz.1.14090[24108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1176.587215][T24120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.609812][T24120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.192055][T24129] loop1: detected capacity change from 0 to 128 [ 1177.241630][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 1177.241652][ T29] audit: type=1400 audit(1729655070.512:109085): avc: denied { name_bind } for pid=24138 comm="syz.0.14103" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1177.270947][T24141] 9pnet_fd: Insufficient options for proto=fd [ 1177.294567][ T29] audit: type=1326 audit(1729655070.562:109086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.316971][T24139] 9pnet_fd: Insufficient options for proto=fd [ 1177.334397][ T29] audit: type=1326 audit(1729655070.592:109087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.358345][ T29] audit: type=1326 audit(1729655070.592:109088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.382298][ T29] audit: type=1326 audit(1729655070.592:109089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.406173][ T29] audit: type=1326 audit(1729655070.592:109090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.430093][ T29] audit: type=1326 audit(1729655070.592:109091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.453945][ T29] audit: type=1326 audit(1729655070.592:109092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.1.14105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1177.827305][T24152] netlink: 'syz.1.14109': attribute type 10 has an invalid length. [ 1177.835730][T24152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.842853][T24152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.853060][T24152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.860315][T24152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.867648][T24152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.874785][T24152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.883984][T24152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1177.962557][T24155] loop6: detected capacity change from 0 to 7 [ 1177.968748][T24155] Buffer I/O error on dev loop6, logical block 0, async page read [ 1177.976560][T24155] Buffer I/O error on dev loop6, logical block 0, async page read [ 1177.984423][T24155] loop6: unable to read partition table [ 1177.990079][T24155] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1177.990079][T24155] ) failed (rc=-5) [ 1178.765987][T24158] loop1: detected capacity change from 0 to 164 [ 1178.775633][T24158] Unable to read rock-ridge attributes [ 1178.781876][T24158] Unable to read rock-ridge attributes [ 1178.804780][T24163] __nla_validate_parse: 6 callbacks suppressed [ 1178.804809][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14113'. [ 1178.844410][T24169] loop1: detected capacity change from 0 to 1024 [ 1178.862593][T24169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.921050][T24159] chnl_net:caif_netlink_parms(): no params data found [ 1178.964388][T24159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.971615][T24159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.978980][T24159] bridge_slave_0: entered allmulticast mode [ 1178.985737][T24159] bridge_slave_0: entered promiscuous mode [ 1178.992849][T24159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.999965][T24159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.007381][T24159] bridge_slave_1: entered allmulticast mode [ 1179.013930][T24159] bridge_slave_1: entered promiscuous mode [ 1179.032578][T24159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.043568][T24159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.063805][T24159] team0: Port device team_slave_0 added [ 1179.070512][T24159] team0: Port device team_slave_1 added [ 1179.086859][T24159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.093858][T24159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.119803][T24159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.131167][T24159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.138147][T24159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.164108][T24159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.190771][T24159] hsr_slave_0: entered promiscuous mode [ 1179.196935][T24159] hsr_slave_1: entered promiscuous mode [ 1179.202928][T24159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.210535][T24159] Cannot create hsr debugfs directory [ 1179.264618][T24159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.322407][T24159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.381850][T24159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.431643][T24159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.493156][T24159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1179.502030][T24159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1179.511022][T24159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1179.519931][T24159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1179.534763][T24159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.541892][T24159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.549302][T24159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.556429][T24159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.565049][T24174] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1179.594818][T24159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.607317][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.615703][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.631289][T24159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.642632][T16944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.649731][T16944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.661407][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.668529][T16940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.692679][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.718694][T24184] loop1: detected capacity change from 0 to 128 [ 1179.759637][T24159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.760995][T24189] 9pnet_fd: Insufficient options for proto=fd [ 1179.840742][T24159] veth0_vlan: entered promiscuous mode [ 1179.850184][T24159] veth1_vlan: entered promiscuous mode [ 1179.873030][T24159] veth0_macvtap: entered promiscuous mode [ 1179.884666][T24159] veth1_macvtap: entered promiscuous mode [ 1179.901117][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.911777][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.921681][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.932221][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.942086][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.952549][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.962399][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.972965][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.982818][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.993280][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.003164][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.013668][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.023653][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.034139][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.046783][T24159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.061986][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.072524][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.082394][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.092934][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.102809][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.113304][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.123218][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.133730][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.143641][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.154163][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.164031][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.174567][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.184575][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.195061][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.207944][T24159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.218753][T24159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.227506][T24159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.236621][T24159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.245399][T24159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.259602][ T29] audit: type=1326 audit(1729655073.532:109093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24242 comm="syz.0.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1180.283470][ T29] audit: type=1326 audit(1729655073.532:109094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24242 comm="syz.0.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0401acdff9 code=0x7ffc0000 [ 1180.374401][T24252] loop0: detected capacity change from 0 to 512 [ 1180.380473][T24262] loop2: detected capacity change from 0 to 164 [ 1180.387713][T24262] Unable to read rock-ridge attributes [ 1180.395886][T24262] Unable to read rock-ridge attributes [ 1180.410080][T24252] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1180.430615][T24252] EXT4-fs (loop0): mount failed [ 1180.449585][T24272] loop2: detected capacity change from 0 to 2048 [ 1180.470845][T24275] loop0: detected capacity change from 0 to 1024 [ 1180.490721][T24272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.494206][T24275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.541487][T24159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.765136][T24309] 9pnet_fd: Insufficient options for proto=fd [ 1180.805988][T24346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14129'. [ 1180.822530][T24346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14129'. [ 1180.863083][T16954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.916254][T16954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.969255][T24358] loop2: detected capacity change from 0 to 8192 [ 1180.978808][T16954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.011513][T24367] loop2: detected capacity change from 0 to 164 [ 1181.018907][T24367] Unable to read rock-ridge attributes [ 1181.024915][T24367] Unable to read rock-ridge attributes [ 1181.034505][T16954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.039969][T24369] syz.1.14136[24369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.044997][T24369] syz.1.14136[24369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.057821][T24369] syz.1.14136[24369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.113718][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14137'. [ 1181.134642][T24371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.142266][T24371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.150569][T24371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.158016][T24371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.197951][T16954] bridge_slave_1: left allmulticast mode [ 1181.203689][T16954] bridge_slave_1: left promiscuous mode [ 1181.209467][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.217687][T16954] bridge_slave_0: left allmulticast mode [ 1181.223393][T16954] bridge_slave_0: left promiscuous mode [ 1181.229089][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.271232][T24379] loop1: detected capacity change from 0 to 512 [ 1181.278594][T24379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1181.301775][T16954] dvmrp0 (unregistering): left allmulticast mode [ 1181.311079][T24379] EXT4-fs (loop1): 1 truncate cleaned up [ 1181.317224][T24379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.332368][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.395368][T16954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.407358][T16954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.418764][T16954] bond0 (unregistering): Released all slaves [ 1181.425802][T24385] syz.0.14141[24385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.425876][T24385] syz.0.14141[24385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.440586][T24343] chnl_net:caif_netlink_parms(): no params data found [ 1181.462066][T24385] syz.0.14141[24385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.501203][T16954] hsr_slave_0: left promiscuous mode [ 1181.538792][T16954] hsr_slave_1: left promiscuous mode [ 1181.547138][T24387] loop0: detected capacity change from 0 to 8192 [ 1181.557997][T16954] veth1_macvtap: left promiscuous mode [ 1181.563667][T16954] veth0_macvtap: left promiscuous mode [ 1181.569251][T16954] veth1_vlan: left promiscuous mode [ 1181.574489][T16954] veth0_vlan: left promiscuous mode [ 1181.722401][T24395] syz.0.14145[24395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.722541][T24395] syz.0.14145[24395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.742618][T24395] syz.0.14145[24395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.755435][T16954] team0 (unregistering): Port device team_slave_1 removed [ 1181.782576][T16954] team0 (unregistering): Port device team_slave_0 removed [ 1181.948994][T24343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.956178][T24343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.963960][T24343] bridge_slave_0: entered allmulticast mode [ 1181.971586][T24343] bridge_slave_0: entered promiscuous mode [ 1181.990828][T24343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.998119][T24343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.005572][T24343] bridge_slave_1: entered allmulticast mode [ 1182.012244][T24343] bridge_slave_1: entered promiscuous mode [ 1182.059354][T24343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.098260][T24343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.112095][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.132409][T24343] team0: Port device team_slave_0 added [ 1182.139748][T24343] team0: Port device team_slave_1 added [ 1182.154091][T24405] loop1: detected capacity change from 0 to 4096 [ 1182.162012][T24343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.169059][T24343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.180260][T24405] loop1: detected capacity change from 0 to 2048 [ 1182.195022][T24343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.213005][T24343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.220068][T24343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.246036][T24343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.260532][T24405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.269689][T24411] loop0: detected capacity change from 0 to 512 [ 1182.274903][T24405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1182.296258][T24405] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1182.308696][T24405] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1182.308696][T24405] [ 1182.318373][T24405] EXT4-fs (loop1): Total free blocks count 0 [ 1182.324353][T24405] EXT4-fs (loop1): Free/Dirty block details [ 1182.330327][T24405] EXT4-fs (loop1): free_blocks=2415919104 [ 1182.336070][T24405] EXT4-fs (loop1): dirty_blocks=16 [ 1182.341195][T24405] EXT4-fs (loop1): Block reservation details [ 1182.347192][T24405] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1182.357251][T24343] hsr_slave_0: entered promiscuous mode [ 1182.363533][T24343] hsr_slave_1: entered promiscuous mode [ 1182.370021][T24343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.377595][T24343] Cannot create hsr debugfs directory [ 1182.396749][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.461746][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 1182.461765][ T29] audit: type=1326 audit(1729655075.732:109180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.495291][ T29] audit: type=1326 audit(1729655075.732:109181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.519293][ T29] audit: type=1326 audit(1729655075.732:109182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.543149][ T29] audit: type=1326 audit(1729655075.732:109183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.566984][ T29] audit: type=1326 audit(1729655075.732:109184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.590828][ T29] audit: type=1326 audit(1729655075.732:109185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.614610][ T29] audit: type=1326 audit(1729655075.732:109186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.638476][ T29] audit: type=1326 audit(1729655075.732:109187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.662282][ T29] audit: type=1326 audit(1729655075.732:109188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.686104][ T29] audit: type=1326 audit(1729655075.732:109189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.1.14152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1182.968355][T24343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1182.992487][T24343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1183.010620][T24343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1183.030326][T24343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1183.101676][T24343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.147349][T24343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.161092][T16937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.168348][T16937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.183328][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.190599][T16954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.275403][T24343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.390549][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14155'. [ 1183.414332][T24343] veth0_vlan: entered promiscuous mode [ 1183.425317][T24343] veth1_vlan: entered promiscuous mode [ 1183.452778][T24343] veth0_macvtap: entered promiscuous mode [ 1183.470754][T24343] veth1_macvtap: entered promiscuous mode [ 1183.487516][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.498077][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.507962][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.518564][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.528419][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.538901][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.548832][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.559359][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.569226][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.579682][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.589539][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.600072][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.610064][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.620529][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.639084][T24343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.658762][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.669325][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.679193][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.689828][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.699688][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.710282][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.720632][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.731408][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.741386][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.751841][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.761787][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.772332][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.782314][T24343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.792818][T24343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.809539][T24343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.813929][T24452] loop0: detected capacity change from 0 to 2048 [ 1183.829834][T24343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.838648][T24343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.847378][T24343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.856101][T24343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.888522][T24452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.915744][T24452] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1183.928157][T24452] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1183.928157][T24452] [ 1183.937800][T24452] EXT4-fs (loop0): Total free blocks count 0 [ 1183.943839][T24452] EXT4-fs (loop0): Free/Dirty block details [ 1183.949870][T24452] EXT4-fs (loop0): free_blocks=0 [ 1183.954918][T24452] EXT4-fs (loop0): dirty_blocks=0 [ 1183.960123][T24452] EXT4-fs (loop0): Block reservation details [ 1183.966157][T24452] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 1183.983568][T24468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1184.009300][T24470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1184.045155][T24475] syzkaller0: entered allmulticast mode [ 1184.054241][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.057968][T24473] loop1: detected capacity change from 0 to 4096 [ 1184.074090][T24475] syzkaller0 (unregistering): left allmulticast mode [ 1184.104761][T24473] loop1: detected capacity change from 0 to 2048 [ 1184.106310][T24481] loop3: detected capacity change from 0 to 128 [ 1184.119635][T24473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.145856][T24473] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1184.162228][T24473] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1184.174693][T24473] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1184.174693][T24473] [ 1184.184387][T24473] EXT4-fs (loop1): Total free blocks count 0 [ 1184.188359][T24481] syz.3.14128: attempt to access beyond end of device [ 1184.188359][T24481] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 1184.190593][T24473] EXT4-fs (loop1): Free/Dirty block details [ 1184.210150][T24473] EXT4-fs (loop1): free_blocks=2415919104 [ 1184.215925][T24473] EXT4-fs (loop1): dirty_blocks=16 [ 1184.221075][T24473] EXT4-fs (loop1): Block reservation details [ 1184.227104][T24473] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1184.275260][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.455921][T24545] loop0: detected capacity change from 0 to 512 [ 1184.481990][T24549] loop3: detected capacity change from 0 to 2048 [ 1184.487695][T24546] loop1: detected capacity change from 0 to 4096 [ 1184.499570][T24549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.534002][T24546] loop1: detected capacity change from 0 to 2048 [ 1184.542950][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.553889][T24546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.565193][T24557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1184.578569][T24546] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1184.597704][T24546] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1184.602789][T24559] loop0: detected capacity change from 0 to 512 [ 1184.610254][T24546] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1184.610254][T24546] [ 1184.626293][T24546] EXT4-fs (loop1): Total free blocks count 0 [ 1184.632424][T24546] EXT4-fs (loop1): Free/Dirty block details [ 1184.638360][T24546] EXT4-fs (loop1): free_blocks=2415919104 [ 1184.644093][T24546] EXT4-fs (loop1): dirty_blocks=16 [ 1184.649240][T24546] EXT4-fs (loop1): Block reservation details [ 1184.655283][T24546] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1184.696515][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.728258][T24562] loop3: detected capacity change from 0 to 8192 [ 1184.866409][T24577] IPv6: NLM_F_CREATE should be specified when creating new route [ 1185.006134][T24588] loop3: detected capacity change from 0 to 512 [ 1185.019973][T24588] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1185.036644][T24588] EXT4-fs (loop3): mount failed [ 1185.072671][T24594] syz.3.14182[24594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.072906][T24594] syz.3.14182[24594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.085551][T24594] syz.3.14182[24594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.196263][T24600] loop0: detected capacity change from 0 to 4096 [ 1185.255376][T24600] loop0: detected capacity change from 0 to 2048 [ 1185.269824][T24600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.284135][T24600] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1185.299144][T24600] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1185.311624][T24600] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1185.311624][T24600] [ 1185.321461][T24600] EXT4-fs (loop0): Total free blocks count 0 [ 1185.327462][T24600] EXT4-fs (loop0): Free/Dirty block details [ 1185.333416][T24600] EXT4-fs (loop0): free_blocks=2415919104 [ 1185.339170][T24600] EXT4-fs (loop0): dirty_blocks=16 [ 1185.344353][T24600] EXT4-fs (loop0): Block reservation details [ 1185.350357][T24600] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1185.387886][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.471852][T24607] loop0: detected capacity change from 0 to 2048 [ 1185.500771][T24607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.531945][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.603233][T24613] syz.1.14188[24613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.603404][T24613] syz.1.14188[24613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.621723][T24613] syz.1.14188[24613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.684459][T24619] loop2: detected capacity change from 0 to 164 [ 1185.716538][T24619] Unable to read rock-ridge attributes [ 1185.732207][T24619] Unable to read rock-ridge attributes [ 1185.772380][T24623] syz.1.14193[24623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.873011][T24627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14195'. [ 1185.908574][T24626] loop1: detected capacity change from 0 to 2048 [ 1185.985528][T24630] loop0: detected capacity change from 0 to 4096 [ 1186.019813][T24630] loop0: detected capacity change from 0 to 2048 [ 1186.059359][T24626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.079604][T24626] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1186.091966][T24626] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1186.091966][T24626] [ 1186.101644][T24626] EXT4-fs (loop1): Total free blocks count 0 [ 1186.107641][T24626] EXT4-fs (loop1): Free/Dirty block details [ 1186.113640][T24626] EXT4-fs (loop1): free_blocks=0 [ 1186.118735][T24626] EXT4-fs (loop1): dirty_blocks=0 [ 1186.122320][T24630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.123758][T24626] EXT4-fs (loop1): Block reservation details [ 1186.123771][T24626] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 1186.156312][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14200'. [ 1186.157279][T24640] loop3: detected capacity change from 0 to 128 [ 1186.167972][T24630] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1186.193992][T24630] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1186.206425][T24630] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1186.206425][T24630] [ 1186.216117][T24630] EXT4-fs (loop0): Total free blocks count 0 [ 1186.222244][T24630] EXT4-fs (loop0): Free/Dirty block details [ 1186.228191][T24630] EXT4-fs (loop0): free_blocks=2415919104 [ 1186.234003][T24630] EXT4-fs (loop0): dirty_blocks=16 [ 1186.239166][T24630] EXT4-fs (loop0): Block reservation details [ 1186.242988][T24646] loop2: detected capacity change from 0 to 1024 [ 1186.245139][T24630] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1186.261606][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.273735][T24646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.279690][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.359078][T24656] loop3: detected capacity change from 0 to 8192 [ 1186.420593][T24662] loop0: detected capacity change from 0 to 512 [ 1186.429386][T24662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1186.445157][T24662] EXT4-fs (loop0): 1 truncate cleaned up [ 1186.451358][T24662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.485527][T24659] loop1: detected capacity change from 0 to 512 [ 1186.513780][T24659] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1186.544129][T24659] EXT4-fs (loop1): mount failed [ 1186.555787][T24673] loop3: detected capacity change from 0 to 164 [ 1186.562947][T24673] Unable to read rock-ridge attributes [ 1186.570756][T24673] Unable to read rock-ridge attributes [ 1186.646382][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14213'. [ 1186.774742][T24691] loop3: detected capacity change from 0 to 2048 [ 1186.819201][T24691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.851657][T24695] loop1: detected capacity change from 0 to 8192 [ 1186.856447][T24691] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1186.870372][T24691] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1186.870372][T24691] [ 1186.880038][T24691] EXT4-fs (loop3): Total free blocks count 0 [ 1186.886074][T24691] EXT4-fs (loop3): Free/Dirty block details [ 1186.892008][T24691] EXT4-fs (loop3): free_blocks=0 [ 1186.896953][T24691] EXT4-fs (loop3): dirty_blocks=0 [ 1186.902079][T24691] EXT4-fs (loop3): Block reservation details [ 1186.908078][T24691] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 1186.942265][T16940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.030101][T24705] IPv6: NLM_F_CREATE should be specified when creating new route [ 1187.038218][T24685] chnl_net:caif_netlink_parms(): no params data found [ 1187.053904][T24707] loop1: detected capacity change from 0 to 164 [ 1187.061556][T24707] Unable to read rock-ridge attributes [ 1187.062814][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.076474][T24707] Unable to read rock-ridge attributes [ 1187.077851][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.121826][T24159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.137002][T24714] loop3: detected capacity change from 0 to 4096 [ 1187.143038][T24712] loop1: detected capacity change from 0 to 2048 [ 1187.184050][T24714] loop3: detected capacity change from 0 to 2048 [ 1187.192072][T16940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.211760][T24712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.226859][T24714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.251729][T24714] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1187.265653][T24735] loop0: detected capacity change from 0 to 512 [ 1187.267294][T24685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.273321][T24714] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1187.279873][T24685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.292147][T24714] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1187.292147][T24714] [ 1187.303797][T24685] bridge_slave_0: entered allmulticast mode [ 1187.308936][T24714] EXT4-fs (loop3): Total free blocks count 0 [ 1187.315546][T24685] bridge_slave_0: entered promiscuous mode [ 1187.320770][T24714] EXT4-fs (loop3): Free/Dirty block details [ 1187.332854][T24714] EXT4-fs (loop3): free_blocks=2415919104 [ 1187.334667][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.338636][T24714] EXT4-fs (loop3): dirty_blocks=16 [ 1187.352750][T24714] EXT4-fs (loop3): Block reservation details [ 1187.358931][T24714] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1187.369992][T16940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.379019][T24735] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1187.403122][T24738] 9pnet_fd: Insufficient options for proto=fd [ 1187.410117][T24735] EXT4-fs (loop0): mount failed [ 1187.415066][T24685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.422227][T24685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.433380][T24685] bridge_slave_1: entered allmulticast mode [ 1187.440254][T24685] bridge_slave_1: entered promiscuous mode [ 1187.458582][T16940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.467526][T24744] loop2: detected capacity change from 0 to 1024 [ 1187.487504][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.499766][T24744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.515686][T24754] loop0: detected capacity change from 0 to 164 [ 1187.526905][T24754] Unable to read rock-ridge attributes [ 1187.534211][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 1187.534227][ T29] audit: type=1326 audit(1729655080.802:109362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.536820][T24754] Unable to read rock-ridge attributes [ 1187.540627][ T29] audit: type=1326 audit(1729655080.812:109363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.595287][ T29] audit: type=1326 audit(1729655080.842:109364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.602557][T24685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.619187][ T29] audit: type=1326 audit(1729655080.842:109365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.619220][ T29] audit: type=1326 audit(1729655080.842:109366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.619272][ T29] audit: type=1326 audit(1729655080.842:109367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.619298][ T29] audit: type=1326 audit(1729655080.842:109368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.1.14240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7f2bdff9 code=0x7ffc0000 [ 1187.745564][T24685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.757812][T24765] loop1: detected capacity change from 0 to 512 [ 1187.776556][T16940] bridge_slave_1: left allmulticast mode [ 1187.780803][ T29] audit: type=1326 audit(1729655081.042:109369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.3.14246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb41dff9 code=0x7ffc0000 [ 1187.782514][T16940] bridge_slave_1: left promiscuous mode [ 1187.806106][ T29] audit: type=1326 audit(1729655081.042:109370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.3.14246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb41dff9 code=0x7ffc0000 [ 1187.811811][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.835493][ T29] audit: type=1326 audit(1729655081.052:109371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24768 comm="syz.3.14246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcb41dff9 code=0x7ffc0000 [ 1187.867776][T16940] bridge_slave_0: left allmulticast mode [ 1187.873748][T16940] bridge_slave_0: left promiscuous mode [ 1187.879544][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.968203][T24777] loop3: detected capacity change from 0 to 4096 [ 1187.991011][T24777] loop3: detected capacity change from 0 to 2048 [ 1188.001612][T24779] loop1: detected capacity change from 0 to 512 [ 1188.020503][T24777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.020643][T24779] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.035508][T24777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1188.062495][T24777] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1188.062995][T24779] EXT4-fs (loop1): mount failed [ 1188.074980][T24777] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1188.074980][T24777] [ 1188.089516][T24777] EXT4-fs (loop3): Total free blocks count 0 [ 1188.095512][T24777] EXT4-fs (loop3): Free/Dirty block details [ 1188.101461][T24777] EXT4-fs (loop3): free_blocks=2415919104 [ 1188.107212][T24777] EXT4-fs (loop3): dirty_blocks=16 [ 1188.112343][T24777] EXT4-fs (loop3): Block reservation details [ 1188.118360][T24777] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1188.127316][T16940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.140543][T16940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.152258][T16940] bond0 (unregistering): Released all slaves [ 1188.160172][T24770] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.14245'. [ 1188.176767][T24685] team0: Port device team_slave_0 added [ 1188.193739][T24685] team0: Port device team_slave_1 added [ 1188.200734][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.210736][T24786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14251'. [ 1188.228332][T24685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.235497][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.256435][T24792] loop3: detected capacity change from 0 to 2048 [ 1188.261438][T24685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.262660][T24685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.285427][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.311480][T24685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.333163][T24792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.347790][T24792] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.14253: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1188.353708][T24159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.366699][T24792] EXT4-fs (loop3): Remounting filesystem read-only [ 1188.384231][T16940] hsr_slave_0: left promiscuous mode [ 1188.392475][T16940] hsr_slave_1: left promiscuous mode [ 1188.403432][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.423377][T16940] veth1_macvtap: left promiscuous mode [ 1188.428957][T16940] veth0_macvtap: left promiscuous mode [ 1188.432278][T24804] loop3: detected capacity change from 0 to 512 [ 1188.434484][T16940] veth1_vlan: left promiscuous mode [ 1188.445981][T16940] veth0_vlan: left promiscuous mode [ 1188.485736][T24812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14259'. [ 1188.582733][T24817] loop3: detected capacity change from 0 to 512 [ 1188.603764][T16940] team0 (unregistering): Port device team_slave_1 removed [ 1188.612258][T24817] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.626905][T24829] loop0: detected capacity change from 0 to 4096 [ 1188.639618][T24817] EXT4-fs (loop3): mount failed [ 1188.645214][T16940] team0 (unregistering): Port device team_slave_0 removed [ 1188.670159][T24829] loop0: detected capacity change from 0 to 2048 [ 1188.693000][T24829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.721321][T24829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1188.736858][T24829] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1188.745517][T24685] hsr_slave_0: entered promiscuous mode [ 1188.749232][T24829] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1188.749232][T24829] [ 1188.764679][T24829] EXT4-fs (loop0): Total free blocks count 0 [ 1188.770794][T24829] EXT4-fs (loop0): Free/Dirty block details [ 1188.776801][T24829] EXT4-fs (loop0): free_blocks=2415919104 [ 1188.782600][T24829] EXT4-fs (loop0): dirty_blocks=16 [ 1188.787764][T24829] EXT4-fs (loop0): Block reservation details [ 1188.791349][T24840] 9pnet_fd: Insufficient options for proto=fd [ 1188.793796][T24829] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1188.806619][T24685] hsr_slave_1: entered promiscuous mode [ 1188.813830][T24685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.822879][T24685] Cannot create hsr debugfs directory [ 1188.868886][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.927487][T24854] loop0: detected capacity change from 0 to 2048 [ 1188.955508][T24859] loop1: detected capacity change from 0 to 2048 [ 1188.963775][T24854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.990475][T24859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.017028][T24859] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.14267: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1189.026289][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14269'. [ 1189.044138][T24859] EXT4-fs (loop1): Remounting filesystem read-only [ 1189.051316][T20907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.064384][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.094647][T24880] bpf_get_probe_write_proto: 5 callbacks suppressed [ 1189.094666][T24880] syz.3.14272[24880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.101746][T24880] syz.3.14272[24880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.113653][T24880] syz.3.14272[24880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.173451][T24882] loop1: detected capacity change from 0 to 512 [ 1189.211144][T24882] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1189.242472][T24882] EXT4-fs (loop1): mount failed [ 1189.378993][T24927] loop3: detected capacity change from 0 to 512 [ 1189.420780][T24927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1189.447880][T24949] loop1: detected capacity change from 0 to 2048 [ 1189.459574][T24927] EXT4-fs (loop3): 1 truncate cleaned up [ 1189.467731][T24951] IPv6: NLM_F_CREATE should be specified when creating new route [ 1189.475901][T24927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.476988][T24949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.524879][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14281'. [ 1189.545296][T24685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1189.559486][T21623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.577640][T24685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1189.586680][T24685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1189.597517][T24685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1189.644481][T24685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.658185][T24685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.668940][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.676025][T16940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.688342][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.695457][T16950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.761495][T24685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1189.771981][T24685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1189.796463][T24968] loop6: detected capacity change from 0 to 7 [ 1189.816157][T24968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1189.827059][T24968] Buffer I/O error on dev loop6, logical block 0, async page read [ 1189.834988][T24968] loop6: unable to read partition table [ 1189.848428][T24968] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1189.848428][T24968] ) failed (rc=-5) [ 1189.848846][T24970] loop2: detected capacity change from 0 to 512 [ 1189.952363][T24685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.982705][T24985] syz.1.14291[24985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.982858][T24985] syz.1.14291[24985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.004909][T24985] syz.1.14291[24985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.138080][T24685] veth0_vlan: entered promiscuous mode [ 1190.165375][T24685] veth1_vlan: entered promiscuous mode [ 1190.183854][T24685] veth0_macvtap: entered promiscuous mode [ 1190.195796][T24685] veth1_macvtap: entered promiscuous mode [ 1190.212157][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.222743][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.232643][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.243194][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.253043][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.263623][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.273531][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.284157][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.294019][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.304566][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.314414][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.324925][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.334852][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.345327][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.355284][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.365752][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.376776][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.377747][T24685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.394220][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.395200][T25009] syz.2.14297[25009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.404692][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.404713][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.404731][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.446467][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.456928][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.466792][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.477250][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.487166][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.497680][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.507514][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.509314][T25009] syz.2.14297[25009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.517967][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.517989][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.549791][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.559690][T24685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.570159][T24685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.595122][T24685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.608063][T25009] syz.2.14297[25009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.626614][T24685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.647151][T24685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.656035][T24685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.664838][T24685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.676805][T25015] loop0: detected capacity change from 0 to 512 [ 1190.686500][T25019] syz.1.14302[25019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1190.699140][T25015] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1190.756821][T25015] EXT4-fs (loop0): mount failed [ 1190.837358][T25032] loop3: detected capacity change from 0 to 8192 [ 1190.910830][T25040] loop4: detected capacity change from 0 to 2048 [ 1190.933263][T25040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.993018][T25060] loop3: detected capacity change from 0 to 2048 [ 1191.007527][T16934] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 1191.020049][T16934] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1191.020049][T16934] [ 1191.029755][T16934] EXT4-fs (loop4): Total free blocks count 0 [ 1191.035747][T16934] EXT4-fs (loop4): Free/Dirty block details [ 1191.041731][T16934] EXT4-fs (loop4): free_blocks=0 [ 1191.046702][T16934] EXT4-fs (loop4): dirty_blocks=0 [ 1191.051825][T16934] EXT4-fs (loop4): Block reservation details [ 1191.057817][T16934] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 1191.065025][T24685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.077305][T24685] ================================================================== [ 1191.085420][T24685] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 1191.093017][T24685] [ 1191.095344][T24685] read-write to 0xffff888237d2ac68 of 1 bytes by task 25066 on cpu 1: [ 1191.103507][T24685] folio_add_lru+0xa3/0x1f0 [ 1191.108039][T24685] shmem_get_folio_gfp+0x7d6/0xd90 [ 1191.113193][T24685] shmem_fault+0xfa/0x250 [ 1191.117557][T24685] __do_fault+0xb6/0x200 [ 1191.121817][T24685] handle_mm_fault+0xe7f/0x2a80 [ 1191.126695][T24685] __get_user_pages+0xf2c/0x2670 [ 1191.131687][T24685] __mm_populate+0x25b/0x3b0 [ 1191.136324][T24685] vm_mmap_pgoff+0x1d6/0x290 [ 1191.140930][T24685] ksys_mmap_pgoff+0xd0/0x330 [ 1191.145625][T24685] x64_sys_call+0x1884/0x2d60 [ 1191.150330][T24685] do_syscall_64+0xc9/0x1c0 [ 1191.154836][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.160750][T24685] [ 1191.163079][T24685] read to 0xffff888237d2ac68 of 1 bytes by task 24685 on cpu 0: [ 1191.169003][T25070] 9pnet_fd: Insufficient options for proto=fd [ 1191.170710][T24685] __lru_add_drain_all+0x136/0x3f0 [ 1191.181899][T24685] lru_add_drain_all+0x10/0x20 [ 1191.186684][T24685] invalidate_bdev+0x47/0x70 [ 1191.191285][T24685] ext4_put_super+0x571/0x840 [ 1191.195977][T24685] generic_shutdown_super+0xe5/0x220 [ 1191.201280][T24685] kill_block_super+0x2a/0x70 [ 1191.205966][T24685] ext4_kill_sb+0x44/0x80 [ 1191.210307][T24685] deactivate_locked_super+0x7d/0x1c0 [ 1191.215689][T24685] deactivate_super+0x9f/0xb0 [ 1191.220380][T24685] cleanup_mnt+0x268/0x2e0 [ 1191.224813][T24685] __cleanup_mnt+0x19/0x20 [ 1191.229229][T24685] task_work_run+0x13a/0x1a0 [ 1191.233823][T24685] syscall_exit_to_user_mode+0xbe/0x130 [ 1191.239384][T24685] do_syscall_64+0xd6/0x1c0 [ 1191.243884][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.249783][T24685] [ 1191.252104][T24685] value changed: 0x05 -> 0x0a [ 1191.256778][T24685] [ 1191.259094][T24685] Reported by Kernel Concurrency Sanitizer on: [ 1191.265239][T24685] CPU: 0 UID: 0 PID: 24685 Comm: syz-executor Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1191.277654][T24685] Tainted: [W]=WARN [ 1191.281448][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1191.291497][T24685] ================================================================== [ 1191.305542][T25060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.331623][T25060] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.14318: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1191.434803][T25077] hub 6-0:1.0: USB hub found [ 1191.439644][T25077] hub 6-0:1.0: 8 ports detected [ 1192.153709][T25060] EXT4-fs (loop3): Remounting filesystem read-only [ 1192.173974][T24343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.