last executing test programs: 44.496191963s ago: executing program 0 (id=754): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00') 44.472699503s ago: executing program 0 (id=755): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x11, 0x7, 0x0, &(0x7f00000001c0)) 44.406946743s ago: executing program 0 (id=756): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x336, &(0x7f0000000340)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x100005, 0x0, 0x8}, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x20004000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000003000000000000000a"], 0xb8}}, 0x0) 44.114831383s ago: executing program 0 (id=762): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000008500000050000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x9}}}, 0x24}}, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='kmem_cache_free\x00', r5}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 43.092446603s ago: executing program 0 (id=768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='us'], 0x0, 0x0) 42.473248452s ago: executing program 0 (id=778): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df107c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace76eaeed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f00000009c0)="9bf4187f3847f98574142f7e6a9247654de080e8066cf240192661b9f7fcbbbfe492850345260550b88b8c1a238762f603a3d15d969e4ed70def10f3d83c71c520d5", 0x42}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="14e9eb2b4328892813f7a65cbad23a6a1484ef0c6449786aeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a5b36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e462652b2660d66b39ed8f5c000000000000000000", 0x8f}, {&(0x7f0000000e40)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b85bebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e3bfe7ab4bdd2680b3802d9107ed76adfed1983590bbc83daa6b091481851f0dfb9098ea981cd8b6a50700b5e4476212282e96abe1cbbc4fed54d71d7b7bf627757e3f7f4e37cc066fd7d9c53966b27ade1118b9bb34fae069c8bd3ae39d9cb082d16a4671a3d16e52ff476ef55e33cfc4c04effda2ca92dfa3d67c95435639a3877fd6fa2e09c93107857e83fef70ed2f9a88c6b63a9edc7b57dfef305", 0xf4}], 0x2}}], 0x3, 0x24048844) 41.330987533s ago: executing program 32 (id=778): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df107c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace76eaeed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f00000009c0)="9bf4187f3847f98574142f7e6a9247654de080e8066cf240192661b9f7fcbbbfe492850345260550b88b8c1a238762f603a3d15d969e4ed70def10f3d83c71c520d5", 0x42}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="14e9eb2b4328892813f7a65cbad23a6a1484ef0c6449786aeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a5b36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e462652b2660d66b39ed8f5c000000000000000000", 0x8f}, {&(0x7f0000000e40)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b85bebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e3bfe7ab4bdd2680b3802d9107ed76adfed1983590bbc83daa6b091481851f0dfb9098ea981cd8b6a50700b5e4476212282e96abe1cbbc4fed54d71d7b7bf627757e3f7f4e37cc066fd7d9c53966b27ade1118b9bb34fae069c8bd3ae39d9cb082d16a4671a3d16e52ff476ef55e33cfc4c04effda2ca92dfa3d67c95435639a3877fd6fa2e09c93107857e83fef70ed2f9a88c6b63a9edc7b57dfef305", 0xf4}], 0x2}}], 0x3, 0x24048844) 9.003741291s ago: executing program 1 (id=1115): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) 8.00799355s ago: executing program 1 (id=1128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100bd000000000004", @ANYRES32=r4, @ANYBLOB='\b'], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.832055091s ago: executing program 1 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0, @ANYBLOB="05"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 6.6872095s ago: executing program 1 (id=1147): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 6.595891881s ago: executing program 1 (id=1149): connect$llc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r0) 6.435819181s ago: executing program 1 (id=1150): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f00000001c0), 0x0, 0x0) 2.5766417s ago: executing program 3 (id=1185): open(&(0x7f0000000000)='./bus\x00', 0x14bc63, 0x19a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2.45206424s ago: executing program 3 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000060a0104000000000000fbff0100000028000480240001800c0001007011596c6f6164001400028008000440000000000800034000000000140000001100010000000000000000000000000a"], 0x64}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) pipe2(&(0x7f00000002c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a4000ddffff0800020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x1670e68) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) read$snapshot(r7, 0x0, 0xffffffbf) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 2.34586858s ago: executing program 2 (id=1188): memfd_create(0x0, 0x1e) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fcntl$notify(r0, 0x402, 0x80000020) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0}]) 2.175549051s ago: executing program 2 (id=1189): ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 1.82143192s ago: executing program 4 (id=1194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x91}]}, 0x1c}}, 0x8000) 1.67021758s ago: executing program 5 (id=1195): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) unshare(0x24060400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001100)=""/4122, 0x101a}], 0x1) 1.48404083s ago: executing program 3 (id=1196): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.46447574s ago: executing program 2 (id=1197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 1.39754954s ago: executing program 5 (id=1198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000d9ffff3e03404d00000080000000000d3b25c555c7f1244ecafefea576c585065f5274f39a985a885bf0a2ddab0cf4e1afa2eb4e481b996e1fb802d2923ccf67c92fbd3b133ec98766e0d2945592c005f5a5219948bab88e7b574545a3d580e140efcef50da8749793befa9314139715f98ec4e17a10082732f0981d260898dcb91e5b5bdeb2c5461be5d297179cffbda293b897887a9b1e98721277cf7d577fb233f047fdb6644b52ccdab97b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x210, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='E', 0x1}], 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[0x0]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000900)="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", 0xdbf}, {&(0x7f00000002c0)="909e818d658035475c4117be232f0253d26097353ac0ecf97878dbe86450f172fb13756d07ef8ba2ce71433b6c8f18d1561556233fa568f1832df79433e72ecbae7824", 0x43}, {&(0x7f0000000040)}], 0x3) socket$inet6(0x10, 0x3, 0x0) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.34416262s ago: executing program 2 (id=1199): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.23984584s ago: executing program 2 (id=1200): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x0, 0x4, 0xf, 0x1}) msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="d8d3327dc9d53d27d3fe44a30228beab218047ef60da92334bb155be6331"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000026c0)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0fcbd0bd"], 0x17, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.099245891s ago: executing program 5 (id=1201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x1, 0x7fff7ffb}]}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1.00002198s ago: executing program 5 (id=1202): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001600)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg$unix(r4, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 836.91755ms ago: executing program 4 (id=1203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec8500000050000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) 775.32374ms ago: executing program 4 (id=1204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}]}, 0xde, 0x472, &(0x7f0000000dc0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000048dc9fa4ba343e89de630c0916d7e04fb942ccfc438e4da548cd7694073f38eca72ef998c9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="db3a6d6f72795f68756765746c625f6163636f756e74696e672c00"]) r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 616.11718ms ago: executing program 4 (id=1205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@usrjquota}]}, 0x3, 0x434, &(0x7f0000000940)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffac1e01010000000000000000fc0100000000000000000000000000006401010000000000000000000000000000000000000000000000ffffe0000001000000004e2000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff0000000000000000000000004e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000003"], 0x134}}, 0x0) 517.552211ms ago: executing program 4 (id=1206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x100005, 0x0, 0x8}, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x20004000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) 442.41943ms ago: executing program 4 (id=1207): ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x0) 276.40533ms ago: executing program 2 (id=1208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000000)='./file1\x00') 276.13215ms ago: executing program 3 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01"], 0xa4}, 0x1, 0x0, 0x0, 0x40000080}, 0x0) 235.54186ms ago: executing program 3 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 85.12206ms ago: executing program 5 (id=1211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001580)={0x1f, 0x2, 0x2}, 0x6) 155.08µs ago: executing program 3 (id=1212): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)) 0s ago: executing program 5 (id=1213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x91}]}, 0x1c}}, 0x8000) kernel console output (not intermixed with test programs): 98.001093][ T4759] device team_slave_1 entered promiscuous mode [ 98.091793][ T3623] loop4: p1 p2 p4 [ 98.096052][ T4759] device vlan2 entered promiscuous mode [ 98.102065][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 98.132141][ T4759] device team0 entered promiscuous mode [ 98.144455][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 98.149174][ T4761] loop2: detected capacity change from 0 to 512 [ 98.255942][ T4758] loop1: detected capacity change from 0 to 8192 [ 98.281998][ T4761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.304832][ T4761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.353263][ T4761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.172: bg 0: block 248: padding at end of block bitmap is not set [ 98.415800][ T4758] loop1: p1 p2 p4 [ 98.435845][ T4758] loop1: p2 size 167771137 extends beyond EOD, truncated [ 98.446759][ T4761] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.172: Failed to acquire dquot type 1 [ 98.472724][ T4761] EXT4-fs (loop2): 1 truncate cleaned up [ 98.486582][ T4761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.498455][ T4758] loop1: p4 size 65536 extends beyond EOD, truncated [ 98.517331][ T3623] loop3: p1 p2 p4 [ 98.532949][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 98.563072][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 98.677538][ T3623] loop4: p1 p2 p4 [ 98.700702][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 98.709195][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 98.716070][ T4761] syz.2.172 (4761) used greatest stack depth: 19352 bytes left [ 98.745110][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 99.423485][ T4789] loop0: detected capacity change from 0 to 2048 [ 99.577940][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.629025][ T4789] EXT4-fs: Ignoring removed bh option [ 99.667475][ T4789] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 99.713006][ T3623] loop1: p1 p2 p4 [ 99.736116][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 99.761109][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 99.853054][ T4251] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 99.986654][ T3623] loop4: p1 p2 p4 [ 100.008922][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 100.038352][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 100.044664][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 100.236085][ T3623] loop1: p1 p2 p4 [ 100.263034][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 100.285164][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 100.343087][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 100.343104][ T26] audit: type=1326 audit(1735555345.506:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 100.425124][ T3623] loop3: p1 p2 p4 [ 100.455636][ T26] audit: type=1326 audit(1735555345.536:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 100.535964][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 100.555854][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 100.613389][ T26] audit: type=1326 audit(1735555345.576:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 100.646747][ T26] audit: type=1326 audit(1735555345.576:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 100.901576][ T26] audit: type=1326 audit(1735555345.576:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.377598][ T26] audit: type=1326 audit(1735555345.576:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.495884][ T26] audit: type=1326 audit(1735555345.576:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.546743][ T3623] loop3: p1 p2 p4 [ 101.557241][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 101.595623][ T26] audit: type=1326 audit(1735555345.576:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.602079][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 101.704667][ T26] audit: type=1326 audit(1735555345.576:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.785653][ T26] audit: type=1326 audit(1735555345.576:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 101.810924][ T3623] loop1: p1 p2 p4 [ 101.825825][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 101.851285][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 101.956791][ T4830] loop0: detected capacity change from 0 to 2048 [ 102.000426][ T4835] xt_hashlimit: max too large, truncated to 1048576 [ 102.042301][ T4830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.082242][ T3623] loop3: p1 p2 p4 [ 102.095833][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 102.105840][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 102.109576][ T4835] Cannot find set identified by id 0 to match [ 102.127359][ T4830] EXT4-fs: Ignoring removed bh option [ 102.174986][ T4830] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 102.183769][ T3623] loop3: p1 p2 p4 [ 102.189014][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 102.199803][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 102.506260][ T4251] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 102.684068][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 102.945125][ T3623] loop1: p1 p2 p4 [ 102.964775][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 102.989341][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 103.154846][ T3623] loop4: p1 p2 p4 [ 103.177929][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 103.196953][ T4854] loop0: detected capacity change from 0 to 128 [ 103.220051][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 103.260078][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.391337][ T3623] loop1: p1 p2 p4 [ 103.396421][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 103.435918][ T4854] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.483636][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 103.595344][ T3623] loop3: p1 p2 p4 [ 103.629579][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 103.661966][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 103.815743][ T3623] loop1: p1 p2 p4 [ 103.821554][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 103.866767][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 103.952959][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 103.998005][ T3623] loop4: p1 p2 p4 [ 104.002990][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 104.037192][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 104.189073][ T3623] loop1: p1 p2 p4 [ 104.194202][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 104.215872][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 104.218038][ T4869] loop0: detected capacity change from 0 to 512 [ 104.297240][ T4869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.297325][ T4869] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.374255][ T4869] Process accounting resumed [ 104.468141][ T3623] loop4: p1 p2 p4 [ 104.469341][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 104.486946][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 104.512162][ T4869] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 104.621974][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 104.666740][ T3623] loop3: p1 p2 p4 [ 104.668083][ T3623] loop3: p2 size 167771137 extends beyond EOD, truncated [ 104.669078][ T3623] loop3: p4 size 65536 extends beyond EOD, truncated [ 104.759988][ T3623] loop1: p1 p2 p4 [ 104.763369][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 104.764309][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 104.789913][ T4882] loop2: detected capacity change from 0 to 128 [ 105.394373][ T3623] loop1: p1 p2 p4 [ 105.443031][ T3623] loop1: p2 size 167771137 extends beyond EOD, truncated [ 105.466663][ T3623] loop1: p4 size 65536 extends beyond EOD, truncated [ 105.765359][ T3623] loop4: p1 p2 p4 [ 105.773908][ T3623] loop4: p2 size 167771137 extends beyond EOD, truncated [ 105.799999][ T3623] loop4: p4 size 65536 extends beyond EOD, truncated [ 106.315309][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 106.427932][ T4879] device syz_tun entered promiscuous mode [ 106.433822][ T4879] device macvtap1 entered promiscuous mode [ 106.455966][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.545637][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 106.545652][ T26] audit: type=1326 audit(1735555351.706:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 106.665925][ T41] usb 2-1: device descriptor read/64, error -71 [ 106.696697][ T26] audit: type=1326 audit(1735555351.796:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 106.885696][ T26] audit: type=1326 audit(1735555351.796:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 106.945915][ T41] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.964210][ T26] audit: type=1326 audit(1735555351.796:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.075803][ T26] audit: type=1326 audit(1735555351.816:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.135598][ T41] usb 2-1: device descriptor read/64, error -71 [ 107.196944][ T26] audit: type=1326 audit(1735555351.816:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.257659][ T41] usb usb2-port1: attempt power cycle [ 107.305664][ T26] audit: type=1326 audit(1735555351.816:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.409896][ T26] audit: type=1326 audit(1735555351.816:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.515670][ T26] audit: type=1326 audit(1735555351.826:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.538671][ T4918] netlink: 72 bytes leftover after parsing attributes in process `syz.0.225'. [ 107.564369][ T26] audit: type=1326 audit(1735555351.826:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 107.649495][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 107.735725][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.796972][ T41] usb 2-1: device descriptor read/8, error -71 [ 107.908775][ T4924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.228'. [ 107.923320][ T4928] tmpfs: Bad value for 'mpol' [ 108.076847][ T41] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.136036][ T41] usb 2-1: device descriptor read/8, error -71 [ 108.255990][ T41] usb usb2-port1: unable to enumerate USB device [ 108.531703][ T4938] loop0: detected capacity change from 0 to 512 [ 108.576966][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.723225][ T4938] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.808561][ T4938] EXT4-fs (loop0): unmounting filesystem. [ 108.886480][ T4947] netlink: 72 bytes leftover after parsing attributes in process `syz.3.238'. [ 109.193393][ T4956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.242'. [ 109.763829][ T4973] loop2: detected capacity change from 0 to 512 [ 109.842643][ T4973] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 109.885654][ T4973] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 109.901228][ T4973] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.250: Corrupt directory, running e2fsck is recommended [ 109.925218][ T4973] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 110.008622][ T4973] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.250: corrupted in-inode xattr [ 110.084153][ T4973] EXT4-fs (loop2): Remounting filesystem read-only [ 110.130497][ T4973] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.250: couldn't read orphan inode 15 (err -117) [ 110.170499][ T4979] xt_connbytes: Forcing CT accounting to be enabled [ 110.182847][ T4973] EXT4-fs (loop2): Remounting filesystem read-only [ 110.189578][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.204139][ T4979] Cannot find add_set index 0 as target [ 110.293336][ T4983] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.360494][ T4985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.255'. [ 110.374421][ T4983] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 110.396208][ T4983] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.250: Corrupt directory, running e2fsck is recommended [ 110.495176][ T4989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 110.868545][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 110.988505][ T5005] loop1: detected capacity change from 0 to 764 [ 111.240681][ T5015] syz.3.267[5015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.240793][ T5015] syz.3.267[5015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.341280][ T5019] netlink: 72 bytes leftover after parsing attributes in process `syz.2.269'. [ 111.400566][ T5022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 112.220934][ T5053] loop3: detected capacity change from 0 to 128 [ 112.306810][ T5061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.284'. [ 112.399724][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.480900][ T5067] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 112.493006][ T5053] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.494570][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.512472][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.559342][ T5065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.286'. [ 112.694605][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 112.694622][ T26] audit: type=1326 audit(1735555357.856:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 112.815662][ T26] audit: type=1326 audit(1735555357.906:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 112.875046][ T26] audit: type=1326 audit(1735555357.906:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 112.918227][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 113.022885][ T26] audit: type=1326 audit(1735555357.906:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 113.145745][ T26] audit: type=1326 audit(1735555357.906:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 113.250205][ T26] audit: type=1326 audit(1735555357.906:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 113.250248][ T26] audit: type=1326 audit(1735555357.906:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 113.250285][ T26] audit: type=1326 audit(1735555357.946:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 113.250322][ T26] audit: type=1326 audit(1735555357.946:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 113.250357][ T26] audit: type=1326 audit(1735555357.946:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5075 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 113.423241][ T5097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 113.497496][ T5101] loop4: detected capacity change from 0 to 512 [ 113.531606][ T5101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.531626][ T5101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.553880][ T5101] EXT4-fs (loop4): 1 truncate cleaned up [ 113.553913][ T5101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.721539][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 113.780989][ T5112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.301'. [ 114.224941][ T5084] tty tty4: ldisc open failed (-12), clearing slot 3 [ 114.615953][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 114.713139][ T5145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.311'. [ 114.953307][ T5156] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 115.134431][ T5161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.317'. [ 115.367199][ T5170] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 116.418288][ T5205] netlink: 'syz.2.335': attribute type 12 has an invalid length. [ 116.662285][ T5213] device pim6reg1 entered promiscuous mode [ 116.745466][ T5216] __nla_validate_parse: 5 callbacks suppressed [ 116.745482][ T5216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 116.794939][ T5217] loop1: detected capacity change from 0 to 512 [ 116.810502][ T5217] journal_path: Lookup failure for './bus' [ 116.826946][ T5217] EXT4-fs: error: could not find journal device path [ 116.886833][ T4447] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.192168][ T5228] loop3: detected capacity change from 0 to 128 [ 117.323871][ T5231] netlink: 72 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.433687][ T5228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.502187][ T5243] loop0: detected capacity change from 0 to 256 [ 117.537703][ T5228] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.583616][ T5243] FAT-fs (loop0): Directory bread(block 64) failed [ 117.593531][ T5243] FAT-fs (loop0): Directory bread(block 65) failed [ 117.605483][ T5243] FAT-fs (loop0): Directory bread(block 66) failed [ 117.612614][ T5243] FAT-fs (loop0): Directory bread(block 67) failed [ 117.620167][ T5243] FAT-fs (loop0): Directory bread(block 68) failed [ 117.639741][ T5243] FAT-fs (loop0): Directory bread(block 69) failed [ 117.671363][ T5243] FAT-fs (loop0): Directory bread(block 70) failed [ 117.691573][ T5243] FAT-fs (loop0): Directory bread(block 71) failed [ 117.715724][ T5243] FAT-fs (loop0): Directory bread(block 72) failed [ 117.742937][ T5243] FAT-fs (loop0): Directory bread(block 73) failed [ 117.792238][ T5234] loop1: detected capacity change from 0 to 8192 [ 117.810241][ T5250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'. [ 117.819362][ T5249] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 117.890228][ T5251] IPVS: stopping master sync thread 5249 ... [ 117.910136][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 117.910153][ T26] audit: type=1800 audit(1735555363.076:310): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.347" name="bus" dev="loop1" ino=1048598 res=0 errno=0 [ 117.976012][ T5234] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 118.013970][ T5234] FAT-fs (loop1): Filesystem has been set read-only [ 118.104938][ T5245] ebtables: ebtables: counters copy to user failed while replacing table [ 118.241949][ T26] audit: type=1326 audit(1735555363.406:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5256 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 118.326814][ T26] audit: type=1326 audit(1735555363.456:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5256 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 118.421642][ T26] audit: type=1326 audit(1735555363.486:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5256 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 118.469442][ T5261] loop1: detected capacity change from 0 to 512 [ 118.526346][ T5261] EXT4-fs: Ignoring removed i_version option [ 118.547308][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 118.562927][ T5261] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.613033][ T5261] EXT4-fs (loop1): 1 truncate cleaned up [ 118.677318][ T5261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.795467][ T5269] loop3: detected capacity change from 0 to 2048 [ 118.846792][ T5269] loop3: p1 < > p4 [ 118.861626][ T5269] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.159633][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 119.260340][ T5281] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 119.374877][ T26] audit: type=1326 audit(1735555364.536:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 119.481975][ T26] audit: type=1326 audit(1735555364.536:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 119.594899][ T26] audit: type=1326 audit(1735555364.536:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 119.688823][ T26] audit: type=1326 audit(1735555364.536:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 119.763276][ T5292] loop1: detected capacity change from 0 to 2048 [ 119.799182][ T26] audit: type=1326 audit(1735555364.536:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 119.859236][ T5292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.894623][ T26] audit: type=1326 audit(1735555364.536:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 120.060344][ T5292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.365: bg 0: block 144: padding at end of block bitmap is not set [ 120.184551][ T5292] EXT4-fs (loop1): Remounting filesystem read-only [ 120.279967][ T5304] netlink: 84 bytes leftover after parsing attributes in process `syz.2.366'. [ 120.330387][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 120.558725][ T5312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 120.902353][ T5321] loop1: detected capacity change from 0 to 2048 [ 120.949965][ T5324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.374'. [ 121.129639][ T5321] loop1: p1 < > p4 [ 121.162320][ T5321] loop1: p4 size 8388608 extends beyond EOD, truncated [ 121.191935][ T5332] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 121.233868][ T5332] netlink: 'syz.3.376': attribute type 19 has an invalid length. [ 121.255328][ T5332] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.376'. [ 121.410541][ T5337] loop0: detected capacity change from 0 to 512 [ 121.425131][ T4447] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.450955][ T5337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.478977][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 121.505201][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 121.595416][ T5347] loop1: detected capacity change from 0 to 512 [ 121.610873][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 121.625486][ T5337] EXT4-fs (loop0): 1 truncate cleaned up [ 121.631673][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 121.648614][ T5337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.797842][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.825848][ T5347] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.952693][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 121.964101][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 122.103106][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 122.228461][ T5369] netlink: 72 bytes leftover after parsing attributes in process `syz.2.386'. [ 122.733707][ T5386] loop1: detected capacity change from 0 to 256 [ 123.262717][ T5397] loop1: detected capacity change from 0 to 128 [ 123.654789][ T5401] loop1: detected capacity change from 0 to 764 [ 123.929309][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 123.929327][ T26] audit: type=1326 audit(1735555369.096:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.011672][ T5406] loop2: detected capacity change from 0 to 512 [ 124.026816][ T26] audit: type=1326 audit(1735555369.146:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.085040][ T5406] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 124.160382][ T5406] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.167623][ T26] audit: type=1326 audit(1735555369.146:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.190130][ T26] audit: type=1326 audit(1735555369.146:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.200938][ T5406] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 124.214000][ T26] audit: type=1326 audit(1735555369.146:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.245667][ T26] audit: type=1326 audit(1735555369.146:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.268964][ T5406] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.283998][ T26] audit: type=1326 audit(1735555369.146:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.307470][ T5406] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 124.314808][ T5406] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.403: casefold flag without casefold feature [ 124.350925][ T26] audit: type=1326 audit(1735555369.146:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.398115][ T5406] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.403: couldn't read orphan inode 16 (err -117) [ 124.426411][ T26] audit: type=1326 audit(1735555369.146:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 124.475682][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.630787][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 124.987109][ T5435] loop1: detected capacity change from 0 to 2048 [ 125.038014][ T5432] loop3: detected capacity change from 0 to 4096 [ 125.066593][ T5435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.085070][ T5435] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 125.124743][ T5432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.183815][ T5448] loop4: detected capacity change from 0 to 1024 [ 125.187993][ T5444] loop0: detected capacity change from 0 to 512 [ 125.239223][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.270818][ T4447] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.281933][ T5444] xt_hashlimit: max too large, truncated to 1048576 [ 125.316900][ T5444] Cannot find set identified by id 0 to match [ 125.321560][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 125.352233][ T5448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 125.419946][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 125.511771][ T5454] loop1: detected capacity change from 0 to 512 [ 125.524833][ T5456] loop2: detected capacity change from 0 to 128 [ 125.544241][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 125.567014][ T5454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.638141][ T5454] EXT4-fs (loop1): 1 truncate cleaned up [ 125.644107][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.992405][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 126.297274][ T5477] loop1: detected capacity change from 0 to 256 [ 126.432678][ T5477] syz.1.430: attempt to access beyond end of device [ 126.432678][ T5477] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 126.483115][ T5483] loop0: detected capacity change from 0 to 2048 [ 126.523529][ T5484] syz.1.430: attempt to access beyond end of device [ 126.523529][ T5484] loop1: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 126.545390][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.591743][ T5484] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 126.602593][ T5484] syz.1.430: attempt to access beyond end of device [ 126.602593][ T5484] loop1: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 126.753369][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 126.993510][ T5499] loop4: detected capacity change from 0 to 128 [ 127.053815][ T5499] syz.4.438: attempt to access beyond end of device [ 127.053815][ T5499] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 127.080870][ T5499] syz.4.438: attempt to access beyond end of device [ 127.080870][ T5499] loop4: rw=0, sector=97, nr_sectors = 32 limit=128 [ 127.181956][ T5499] syz.4.438: attempt to access beyond end of device [ 127.181956][ T5499] loop4: rw=0, sector=145, nr_sectors = 3 limit=128 [ 127.509986][ T5518] capability: warning: `syz.4.446' uses 32-bit capabilities (legacy support in use) [ 127.755517][ T5530] loop4: detected capacity change from 0 to 512 [ 127.785353][ T5530] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.802191][ T5530] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.841582][ T5530] EXT4-fs warning (device loop4): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.866715][ T5530] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 127.885392][ T5530] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.452: casefold flag without casefold feature [ 127.919591][ T5530] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.452: couldn't read orphan inode 16 (err -117) [ 127.964188][ T5530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.095302][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 128.168631][ T5547] loop3: detected capacity change from 0 to 512 [ 128.197440][ T5547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.225164][ T5547] EXT4-fs (loop3): 1 orphan inode deleted [ 128.242823][ T5547] EXT4-fs (loop3): 1 truncate cleaned up [ 128.269019][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.353636][ T5547] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.3.461: path /91/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 128.394098][ T5547] EXT4-fs (loop3): Remounting filesystem read-only [ 128.520385][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 129.023344][ T5580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 129.149212][ T5577] loop2: detected capacity change from 0 to 8192 [ 129.371796][ T5592] IPVS: Error joining to the multicast group [ 129.806532][ T5602] syz.0.486[5602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.806642][ T5602] syz.0.486[5602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.852388][ T5606] usb usb4: usbfs: interface 0 claimed by hub while 'syz.1.488' sets config #0 [ 130.158562][ T5614] loop3: detected capacity change from 0 to 512 [ 130.413048][ T5614] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.493: casefold flag without casefold feature [ 130.667025][ T5614] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.493: couldn't read orphan inode 15 (err -117) [ 130.895923][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.016059][ T5614] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 131.072664][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 131.072681][ T26] audit: type=1326 audit(1735555376.236:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 131.101322][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.140510][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 131.923462][ T26] audit: type=1326 audit(1735555376.256:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 132.205970][ T26] audit: type=1326 audit(1735555376.286:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 132.283768][ T5641] loop0: detected capacity change from 0 to 512 [ 132.329229][ T26] audit: type=1326 audit(1735555376.296:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 132.412026][ T26] audit: type=1326 audit(1735555376.296:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a4f85d29 code=0x7ffc0000 [ 132.431724][ T5645] loop4: detected capacity change from 0 to 512 [ 132.434223][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.452212][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.461325][ T5641] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.481578][ T5645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.543977][ T5645] EXT4-fs (loop4): 1 truncate cleaned up [ 132.574007][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.598767][ T5641] syz.0.499 (5641) used greatest stack depth: 18784 bytes left [ 132.629997][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 132.709110][ T26] audit: type=1326 audit(1735555377.876:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 132.761997][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 132.784644][ T26] audit: type=1326 audit(1735555377.876:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 132.813275][ T5664] loop0: detected capacity change from 0 to 164 [ 132.827813][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.827909][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.875640][ T26] audit: type=1326 audit(1735555377.876:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 132.938803][ T26] audit: type=1326 audit(1735555377.906:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 133.076859][ T5671] random: crng reseeded on system resumption [ 133.790850][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 134.513517][ T5696] loop3: detected capacity change from 0 to 1024 [ 134.535223][ T5696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.597098][ T5696] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 134.616816][ T5696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.654386][ T5696] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 134.705105][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 134.742148][ T5696] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.520: mark_inode_dirty error [ 134.795244][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 134.816413][ T5696] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.520: Invalid block bitmap block 3 in block_group 0 [ 134.845821][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 134.852510][ T5696] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 134.895617][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 134.902252][ T5696] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.520: mark_inode_dirty error [ 134.925653][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 134.932273][ T5696] Quota error (device loop3): write_blk: dquota write failed [ 134.975030][ T5696] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm syz.3.520: lblock 6 mapped to illegal pblock 1 (length 1) [ 134.998943][ T5705] netlink: 25 bytes leftover after parsing attributes in process `syz.4.522'. [ 135.025691][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.032339][ T5696] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 48: comm syz.3.520: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.048340][ T5705] device gretap0 entered promiscuous mode [ 135.082796][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.095996][ T5696] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.520: Failed to acquire dquot type 0 [ 135.126301][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.141699][ T5706] netlink: 5 bytes leftover after parsing attributes in process `syz.4.522'. [ 135.151082][ T5696] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 49: comm syz.3.520: lblock 1 mapped to illegal pblock 49 (length 1) [ 135.166690][ T5706] 0ªX¹¦Dö»: renamed from gretap0 [ 135.174465][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.183369][ T5706] device 00ªX¹¦Dö» left promiscuous mode [ 135.189353][ T5696] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.520: Failed to acquire dquot type 0 [ 135.222957][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.231359][ T5696] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 135.447423][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.475722][ T5696] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #15: comm syz.3.520: mark_inode_dirty error [ 135.498655][ T5696] EXT4-fs (loop3): Remounting filesystem read-only [ 135.632366][ T5696] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 135.887369][ T5696] EXT4-fs (loop3): 1 orphan inode deleted [ 136.014140][ T5696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.247320][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 136.247336][ T26] audit: type=1326 audit(1735555381.416:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5271985d29 code=0x0 [ 136.405145][ T26] audit: type=1326 audit(1735555381.566:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.465662][ T26] audit: type=1326 audit(1735555381.606:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.545604][ T26] audit: type=1326 audit(1735555381.606:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.576795][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 136.629336][ T26] audit: type=1326 audit(1735555381.606:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.666428][ T5725] loop0: detected capacity change from 0 to 128 [ 136.693111][ T26] audit: type=1326 audit(1735555381.606:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.732895][ T5725] netlink: 104 bytes leftover after parsing attributes in process `syz.0.530'. [ 136.772301][ T26] audit: type=1326 audit(1735555381.606:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.834825][ T26] audit: type=1326 audit(1735555381.606:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 136.853248][ T5729] loop2: detected capacity change from 0 to 1024 [ 136.962157][ T5729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.037406][ T26] audit: type=1800 audit(1735555382.206:447): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.532" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 137.082783][ T5729] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 137.254278][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 137.382140][ T5748] loop3: detected capacity change from 0 to 512 [ 137.411716][ T26] audit: type=1326 audit(1735555382.576:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 137.420653][ T5737] loop1: detected capacity change from 0 to 8192 [ 137.479131][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.502702][ T5748] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.711077][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 138.030995][ T5784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.553'. [ 138.487389][ T5796] netem: change failed [ 139.161621][ T5814] syz.0.566[5814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.161731][ T5814] syz.0.566[5814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.384224][ T5825] random: crng reseeded on system resumption [ 139.509975][ T5829] loop0: detected capacity change from 0 to 2048 [ 139.837753][ T5839] netlink: 48 bytes leftover after parsing attributes in process `syz.2.576'. [ 139.854316][ T5841] syz.4.578[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.854454][ T5841] syz.4.578[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.155280][ T5853] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 140.179274][ T5850] loop2: detected capacity change from 0 to 2048 [ 140.275000][ T5850] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a816c198, mo2=0002] [ 140.314074][ T5850] System zones: 0-7 [ 140.345403][ T5850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.491527][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 140.713561][ T5880] loop1: detected capacity change from 0 to 1024 [ 140.731179][ T5880] EXT4-fs: Ignoring removed bh option [ 140.797524][ T5880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.854474][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 141.155715][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 141.306501][ T5906] loop4: detected capacity change from 0 to 512 [ 141.327101][ T5906] EXT4-fs: Ignoring removed i_version option [ 141.346210][ T5906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.405049][ T5906] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 141.415794][ T5906] System zones: 0-2, 18-18, 34-35 [ 141.434680][ T5906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.454218][ T5906] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.504815][ T5906] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.660172][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 141.841402][ T5918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 141.848429][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.881050][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 141.909177][ T5919] vhci_hcd: connection closed [ 141.913141][ T4349] vhci_hcd: stop threads [ 141.955051][ T4349] vhci_hcd: release socket [ 141.969135][ T4349] vhci_hcd: disconnect device [ 142.164572][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 142.164589][ T26] audit: type=1326 audit(1735555387.326:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.240113][ T26] audit: type=1326 audit(1735555387.356:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.301343][ T26] audit: type=1326 audit(1735555387.366:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.377524][ T26] audit: type=1326 audit(1735555387.366:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.420482][ T26] audit: type=1326 audit(1735555387.366:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.546114][ T26] audit: type=1326 audit(1735555387.376:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.595718][ T26] audit: type=1326 audit(1735555387.376:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.624984][ T5942] loop0: detected capacity change from 0 to 512 [ 142.643340][ T5944] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.661184][ T26] audit: type=1326 audit(1735555387.376:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.684251][ T5944] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.688126][ T5942] EXT4-fs: Invalid want_extra_isize 8284 [ 142.726495][ T26] audit: type=1326 audit(1735555387.376:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 142.809837][ T26] audit: type=1326 audit(1735555387.376:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7775785d29 code=0x7ffc0000 [ 144.042100][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 144.152139][ T5997] loop3: detected capacity change from 0 to 512 [ 144.170058][ T5995] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.199567][ T5997] EXT4-fs: inline encryption not supported [ 144.309300][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.330761][ T5997] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.500922][ T6015] loop6: detected capacity change from 0 to 7 [ 144.517056][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 144.560443][ T6015] Dev loop6: unable to read RDB block 7 [ 144.601087][ T6015] loop6: unable to read partition table [ 144.626543][ T6015] loop6: partition table beyond EOD, truncated [ 144.648592][ T6015] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 144.648592][ T6015] ) failed (rc=-5) [ 145.223931][ T953] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 145.247303][ T953] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 145.273015][ T953] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 145.317578][ T953] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 146.292576][ T6086] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.666' sets config #236 [ 146.616553][ T6096] loop4: detected capacity change from 0 to 128 [ 147.766427][ T6116] loop2: detected capacity change from 0 to 512 [ 147.791266][ T6120] netlink: 3 bytes leftover after parsing attributes in process `syz.0.682'. [ 147.806841][ T6120] device batadv1 entered promiscuous mode [ 147.835475][ T6116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.889577][ T6116] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.937926][ T6116] Process accounting resumed [ 147.946655][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.683'. [ 148.001080][ T6116] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 148.138074][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 148.194559][ T26] kauditd_printk_skb: 336 callbacks suppressed [ 148.194577][ T26] audit: type=1326 audit(1735555393.356:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 148.293708][ T26] audit: type=1326 audit(1735555393.396:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 148.357658][ T26] audit: type=1326 audit(1735555393.396:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 148.445913][ T26] audit: type=1326 audit(1735555393.396:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 148.583514][ T26] audit: type=1326 audit(1735555393.396:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.037945][ T26] audit: type=1326 audit(1735555393.396:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.429534][ T26] audit: type=1326 audit(1735555393.396:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.549893][ T26] audit: type=1326 audit(1735555393.396:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.640444][ T26] audit: type=1326 audit(1735555393.396:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.794042][ T26] audit: type=1326 audit(1735555393.396:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 149.848431][ T6174] device hsr_slave_0 left promiscuous mode [ 149.863084][ T6174] device hsr_slave_1 left promiscuous mode [ 150.924306][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 150.949207][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 150.959066][ T6190] loop1: detected capacity change from 0 to 256 [ 150.977638][ T6190] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.036749][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 151.445325][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 152.201556][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 152.217900][ T6213] loop0: detected capacity change from 0 to 128 [ 152.248456][ T6212] loop3: detected capacity change from 0 to 512 [ 152.261770][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 152.289761][ T6212] ext4: Unknown parameter 'uid<00000000000000000000' [ 152.327903][ T6213] netlink: 104 bytes leftover after parsing attributes in process `syz.0.714'. [ 152.746936][ T6226] loop3: detected capacity change from 0 to 512 [ 152.766380][ T6226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.447117][ T6226] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.713: corrupted in-inode xattr [ 153.459673][ T6226] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.713: couldn't read orphan inode 15 (err -117) [ 153.483849][ T6226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.540124][ T6222] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.713: bad inode number: 8 [ 153.566502][ T6222] 9pnet_fd: Insufficient options for proto=fd [ 153.578827][ T6222] lo speed is unknown, defaulting to 1000 [ 153.585890][ T6222] lo speed is unknown, defaulting to 1000 [ 153.595454][ T6222] lo speed is unknown, defaulting to 1000 [ 153.607680][ T6222] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.621782][ T6222] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.649734][ T6222] lo speed is unknown, defaulting to 1000 [ 153.658712][ T6222] lo speed is unknown, defaulting to 1000 [ 153.665904][ T6222] lo speed is unknown, defaulting to 1000 [ 153.672686][ T6222] lo speed is unknown, defaulting to 1000 [ 153.679737][ T6222] lo speed is unknown, defaulting to 1000 [ 153.949290][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 154.067482][ T6251] loop0: detected capacity change from 0 to 128 [ 154.107447][ T6253] loop2: detected capacity change from 0 to 128 [ 154.169469][ T6251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.728'. [ 154.920445][ T6253] syz.2.725: attempt to access beyond end of device [ 154.920445][ T6253] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 155.067581][ T6263] loop4: detected capacity change from 0 to 1024 [ 155.078747][ T6263] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 155.095756][ T6263] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.113944][ T6263] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 155.178981][ T6263] journal_init_common: Cannot get buffer for journal superblock [ 155.195667][ T6263] EXT4-fs (loop4): Could not load journal inode [ 155.207748][ T6267] loop0: detected capacity change from 0 to 1024 [ 155.241539][ T6267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.281184][ T6267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.373326][ T6263] loop4: detected capacity change from 0 to 1024 [ 155.453403][ T6263] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.467018][ T6277] loop3: detected capacity change from 0 to 8192 [ 155.476250][ T6263] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.502688][ T6277] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.514042][ T6263] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 155.534212][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.547902][ T6263] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm +}[@: mark_inode_dirty error [ 155.563051][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.566479][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 155.566495][ T26] audit: type=1326 audit(1735555400.726:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.570460][ T6263] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm +}[@: Invalid block bitmap block 3 in block_group 0 [ 155.587450][ T26] audit: type=1326 audit(1735555400.746:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.645970][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.647878][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 155.654357][ T6263] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 155.693133][ T26] audit: type=1326 audit(1735555400.746:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.745756][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.766126][ T6263] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm +}[@: mark_inode_dirty error [ 155.779755][ T6284] loop0: detected capacity change from 0 to 256 [ 155.805761][ T26] audit: type=1326 audit(1735555400.746:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.842988][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.858871][ T6263] Quota error (device loop4): write_blk: dquota write failed [ 155.885785][ T26] audit: type=1326 audit(1735555400.746:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.913631][ T6263] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm +}[@: lblock 6 mapped to illegal pblock 1 (length 1) [ 155.952191][ T26] audit: type=1326 audit(1735555400.746:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 155.980530][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 155.987617][ T6263] Quota error (device loop4): write_blk: dquota write failed [ 155.996160][ T6263] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 156.056426][ T26] audit: type=1326 audit(1735555400.746:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 156.086973][ T6263] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm +}[@: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.129202][ T6292] loop1: detected capacity change from 0 to 128 [ 156.139037][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 156.146150][ T6263] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm +}[@: Failed to acquire dquot type 0 [ 156.161190][ T6292] netlink: 104 bytes leftover after parsing attributes in process `syz.1.743'. [ 156.178492][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 156.227796][ T6263] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm +}[@: lblock 1 mapped to illegal pblock 49 (length 1) [ 156.393107][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 156.491132][ T6263] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm +}[@: Failed to acquire dquot type 0 [ 156.825859][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 156.849092][ T6263] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 156.901899][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 156.942295][ T6263] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm +}[@: mark_inode_dirty error [ 156.956559][ T6298] loop0: detected capacity change from 0 to 512 [ 157.000244][ T6298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.019505][ T6263] EXT4-fs (loop4): Remounting filesystem read-only [ 157.041836][ T6263] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 157.052859][ T6263] EXT4-fs (loop4): 1 orphan inode deleted [ 157.059367][ T6263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.100354][ T6298] EXT4-fs (loop0): 1 truncate cleaned up [ 157.137111][ T6298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.147048][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 157.233463][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 157.243908][ T6307] loop4: detected capacity change from 0 to 128 [ 157.267868][ T6307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.294242][ T6307] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.556424][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 157.595379][ T6325] loop0: detected capacity change from 0 to 128 [ 157.653328][ T6325] netlink: 104 bytes leftover after parsing attributes in process `syz.0.756'. [ 157.966328][ T6340] loop0: detected capacity change from 0 to 164 [ 158.106448][ T6340] Unable to read rock-ridge attributes [ 158.693525][ T6343] Unable to read rock-ridge attributes [ 158.840675][ T4251] Unable to read rock-ridge attributes [ 158.866106][ T4251] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.876226][ T4251] Unable to read rock-ridge attributes [ 158.895112][ T4251] Unable to read rock-ridge attributes [ 158.902662][ T4251] Unable to read rock-ridge attributes [ 158.908984][ T4251] Unable to read rock-ridge attributes [ 158.947640][ T4251] ISOFS: unable to read i-node block [ 158.966000][ T4251] Unable to read rock-ridge attributes [ 158.971649][ T4251] ISOFS: unable to read i-node block [ 159.073929][ T6355] loop1: detected capacity change from 0 to 2048 [ 159.167025][ T6361] loop4: detected capacity change from 0 to 128 [ 159.170032][ T6355] loop1: p3 < > p4 < > [ 159.190094][ T6355] loop1: partition table partially beyond EOD, truncated [ 159.202491][ T6361] netlink: 104 bytes leftover after parsing attributes in process `syz.4.772'. [ 159.218179][ T6355] loop1: p3 start 4284289 is beyond EOD, truncated [ 159.733924][ T4350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.318386][ T4350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.690252][ T4350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.743827][ T6389] loop4: detected capacity change from 0 to 128 [ 160.842590][ T4350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.852948][ T6389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.784'. [ 161.304653][ T6400] ALSA: seq fatal error: cannot create timer (-19) [ 161.366355][ T4252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.384812][ T4252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.392861][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 161.402544][ T4252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.416795][ T4252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.424501][ T4252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.433007][ T4252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.529330][ T6407] lo speed is unknown, defaulting to 1000 [ 161.625094][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.790'. [ 161.772513][ T6418] loop3: detected capacity change from 0 to 764 [ 162.209301][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 162.209319][ T26] audit: type=1326 audit(1735555407.376:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.285603][ T26] audit: type=1326 audit(1735555407.376:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.315136][ T26] audit: type=1326 audit(1735555407.376:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.400522][ T26] audit: type=1326 audit(1735555407.376:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.477542][ T6407] chnl_net:caif_netlink_parms(): no params data found [ 162.503775][ T26] audit: type=1326 audit(1735555407.376:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.568404][ T26] audit: type=1326 audit(1735555407.376:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.646069][ T26] audit: type=1326 audit(1735555407.406:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.698972][ T26] audit: type=1326 audit(1735555407.416:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.765591][ T26] audit: type=1326 audit(1735555407.416:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 162.866847][ T26] audit: type=1326 audit(1735555407.926:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 163.090859][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.100544][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.119375][ T6407] device bridge_slave_0 entered promiscuous mode [ 163.169002][ T4350] device hsr_slave_0 left promiscuous mode [ 163.190390][ T4350] device hsr_slave_1 left promiscuous mode [ 163.215674][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.232146][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.243010][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.253887][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.262517][ T4350] device bridge_slave_1 left promiscuous mode [ 163.271470][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.284387][ T4350] device bridge_slave_0 left promiscuous mode [ 163.291102][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.432864][ T4350] device veth1_macvtap left promiscuous mode [ 163.442131][ T4350] device veth0_macvtap left promiscuous mode [ 163.452025][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 163.453532][ T4350] device veth1_vlan left promiscuous mode [ 163.475217][ T4350] device veth0_vlan left promiscuous mode [ 163.525987][ T4252] Bluetooth: hci2: command 0x0409 tx timeout [ 163.886038][ T6470] loop1: detected capacity change from 0 to 128 [ 163.954079][ T6470] netlink: 104 bytes leftover after parsing attributes in process `syz.1.811'. [ 164.566618][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 164.619889][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.819'. [ 164.687106][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 164.770715][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.855395][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.042943][ T6494] loop3: detected capacity change from 0 to 128 [ 165.072722][ T6494] netlink: 104 bytes leftover after parsing attributes in process `syz.3.822'. [ 165.612699][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 165.814700][ T4350] bond0 (unregistering): Released all slaves [ 165.911161][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.922805][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.931398][ T6407] device bridge_slave_1 entered promiscuous mode [ 165.990234][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.024367][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.154404][ T6407] team0: Port device team_slave_0 added [ 166.214391][ T6407] team0: Port device team_slave_1 added [ 166.215904][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.827'. [ 166.285442][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.310191][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.372184][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.394975][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.415827][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.437078][ T6513] loop4: detected capacity change from 0 to 1024 [ 166.484725][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.496377][ T6513] EXT4-fs: Ignoring removed oldalloc option [ 166.511634][ T6515] loop2: detected capacity change from 0 to 2048 [ 166.546121][ T6519] loop1: detected capacity change from 0 to 128 [ 166.582121][ T6513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.594185][ T6523] loop3: detected capacity change from 0 to 512 [ 166.594269][ T6519] netlink: 104 bytes leftover after parsing attributes in process `syz.1.832'. [ 166.619755][ T6515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.665461][ T6523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.670292][ T6407] device hsr_slave_0 entered promiscuous mode [ 166.694061][ T6407] device hsr_slave_1 entered promiscuous mode [ 166.702415][ T6523] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.730699][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 166.791274][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 166.861174][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 167.074257][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 167.228233][ T6407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.253994][ T6407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.270617][ T6407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.293888][ T6407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.418901][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 167.418919][ T26] audit: type=1326 audit(1735555412.586:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 167.511662][ T26] audit: type=1326 audit(1735555412.616:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 167.527273][ T6549] loop2: detected capacity change from 0 to 128 [ 167.570641][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.584334][ T26] audit: type=1326 audit(1735555412.616:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 167.590983][ T6549] netlink: 104 bytes leftover after parsing attributes in process `syz.2.844'. [ 167.639298][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.659116][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.674432][ T26] audit: type=1326 audit(1735555412.616:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 167.700667][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.706763][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 167.731294][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.742861][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.782833][ T26] audit: type=1326 audit(1735555412.616:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 167.788147][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.812251][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.891756][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.922349][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.942902][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.963780][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.972089][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.004659][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.025004][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.067695][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.079804][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.096568][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.117305][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.148588][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.165436][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.186767][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.205288][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.226794][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.255242][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.289366][ T6563] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 168.305156][ T6563] netlink: 'syz.3.850': attribute type 19 has an invalid length. [ 168.313685][ T6563] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.850'. [ 168.466456][ T26] audit: type=1326 audit(1735555413.636:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 168.514123][ T26] audit: type=1326 audit(1735555413.636:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 168.562693][ T26] audit: type=1326 audit(1735555413.656:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 168.625876][ T26] audit: type=1326 audit(1735555413.656:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 168.688027][ T26] audit: type=1326 audit(1735555413.656:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 168.752761][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.761805][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.789481][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.980178][ T6578] loop3: detected capacity change from 0 to 256 [ 169.011874][ T6578] FAT-fs (loop3): bogus number of FAT sectors [ 169.035615][ T6578] FAT-fs (loop3): Can't find a valid FAT filesystem [ 169.274563][ T6589] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.505689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.536005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.594316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.619203][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.648682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.670330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.703040][ T6407] device veth0_vlan entered promiscuous mode [ 169.711440][ T6598] hub 2-0:1.0: USB hub found [ 169.742227][ T6598] hub 2-0:1.0: 1 port detected [ 169.765789][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 169.767914][ T6407] device veth1_vlan entered promiscuous mode [ 169.899081][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.916412][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.934349][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.962075][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.990273][ T6407] device veth0_macvtap entered promiscuous mode [ 170.017604][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.042066][ T6407] device veth1_macvtap entered promiscuous mode [ 170.077884][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.105663][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.125652][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.145797][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.176941][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.188867][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.212694][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.223841][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.237287][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.253266][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.278928][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.317585][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.345617][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.365659][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.385770][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.413882][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.441348][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.466915][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.485217][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.522094][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.541718][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.561333][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.596415][ T6407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.614209][ T6407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.633382][ T6407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.652563][ T6407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.761582][ T6603] loop4: detected capacity change from 0 to 32768 [ 170.801806][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.822873][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.834287][ T6603] loop4: p1 p3 < p5 p6 > p4 [ 170.850255][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.861163][ T6603] loop4: p4 size 83886080 extends beyond EOD, truncated [ 170.885249][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.888139][ T6603] loop4: p4 could not be added: -ENOMEM [ 170.911433][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.934642][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.393931][ T6628] loop5: detected capacity change from 0 to 2048 [ 171.512647][ T6628] GPT:first_usable_lbas don't match. [ 171.531375][ T6628] GPT:34 != 290 [ 171.555304][ T6628] GPT: Use GNU Parted to correct GPT errors. [ 171.585431][ T6628] loop5: p1 p2 p3 [ 172.686924][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 172.686942][ T26] audit: type=1326 audit(1735555417.856:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 172.776894][ T26] audit: type=1326 audit(1735555417.856:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 172.850162][ T26] audit: type=1326 audit(1735555417.856:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 172.905614][ T26] audit: type=1326 audit(1735555417.856:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.211608][ T6679] loop4: detected capacity change from 0 to 512 [ 173.291943][ T6679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.292056][ T6679] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.315264][ T26] audit: type=1326 audit(1735555418.476:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.317954][ T26] audit: type=1326 audit(1735555418.476:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.318007][ T26] audit: type=1326 audit(1735555418.486:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.318043][ T26] audit: type=1326 audit(1735555418.486:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.318074][ T26] audit: type=1326 audit(1735555418.486:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.318107][ T26] audit: type=1326 audit(1735555418.486:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 173.415067][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.419356][ T6683] ALSA: seq fatal error: cannot create timer (-19) [ 173.501615][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 173.549469][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.660204][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 174.045883][ T6703] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'. [ 174.094198][ T6697] loop3: detected capacity change from 0 to 2048 [ 174.176590][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 174.186244][ T6697] loop3: p1 < > p2 p3 < p5 > p4 [ 174.191266][ T6697] loop3: partition table partially beyond EOD, truncated [ 174.204497][ T6697] loop3: p1 start 4278190080 is beyond EOD, truncated [ 174.226563][ T6697] loop3: p2 start 16908800 is beyond EOD, truncated [ 174.248822][ T6697] loop3: p4 start 11326 is beyond EOD, truncated [ 174.261954][ T6697] loop3: p5 start 16908800 is beyond EOD, truncated [ 174.326434][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'. [ 174.539657][ T6716] loop5: detected capacity change from 0 to 512 [ 174.548488][ T6717] tipc: Started in network mode [ 174.561368][ T6717] tipc: Node identity ac14140f, cluster identity 4711 [ 174.567494][ T6716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.581255][ T6717] tipc: New replicast peer: 255.255.255.255 [ 174.599514][ T6717] tipc: Enabled bearer , priority 10 [ 174.622055][ T6716] EXT4-fs (loop5): 1 truncate cleaned up [ 174.645619][ T6716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.883677][ T6407] EXT4-fs (loop5): unmounting filesystem. [ 175.098480][ T6728] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 175.186993][ T6733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.916'. [ 175.715648][ T953] tipc: Node number set to 2886997007 [ 176.331610][ T6770] netlink: 104 bytes leftover after parsing attributes in process `syz.4.930'. [ 177.093657][ T6797] netlink: 104 bytes leftover after parsing attributes in process `syz.3.943'. [ 177.201929][ T6799] loop2: detected capacity change from 0 to 512 [ 177.331372][ T6775] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.479606][ T6799] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.497871][ T6799] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 177.513547][ T6799] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 177.523000][ T6799] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.939: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 177.546061][ T6799] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.939: couldn't read orphan inode 13 (err -117) [ 177.568302][ T6799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.616292][ T6799] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.939: deleted inode referenced: 12 [ 177.728144][ T6775] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.771192][ T6775] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 177.786599][ T6775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.793122][ T6775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.799377][ T6775] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 177.806899][ T6775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.812947][ T6775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.819847][ T6775] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 177.831799][ T6775] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.838137][ T6775] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 177.855066][ T6775] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 177.871196][ T6775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.914596][ T6775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.980493][ T6775] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 178.397851][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 178.494045][ T6822] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.510763][ T6824] Cannot find add_set index 0 as target [ 178.565678][ T4252] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.566359][ T6822] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.628329][ T6822] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.706078][ T6822] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.913113][ T6822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.954519][ T6822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.993623][ T6822] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.039505][ T6822] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.084787][ T6837] netlink: 104 bytes leftover after parsing attributes in process `syz.2.956'. [ 179.103384][ T6838] bridge0: port 3(vlan2) entered blocking state [ 179.120931][ T6838] bridge0: port 3(vlan2) entered disabled state [ 179.279970][ T6841] sg_write: data in/out 525275/547 bytes for SCSI command 0x0-- guessing data in; [ 179.279970][ T6841] program +}[@ not setting count and/or reply_len properly [ 179.333539][ T6843] usb usb9: usbfs: process 6843 (syz.3.958) did not claim interface 1 before use [ 179.563583][ T6846] loop5: detected capacity change from 0 to 164 [ 179.625084][ T6846] syz.5.961: attempt to access beyond end of device [ 179.625084][ T6846] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 179.672324][ T6846] syz.5.961: attempt to access beyond end of device [ 179.672324][ T6846] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 179.722352][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 179.722372][ T26] audit: type=1800 audit(1735555424.886:1057): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.961" name="file0" dev="loop5" ino=1862 res=0 errno=0 [ 179.845988][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.846006][ T4252] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.846084][ T4252] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.925676][ T4252] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.204600][ T6875] syz.1.971[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.204714][ T6875] syz.1.971[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.222007][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 180.293277][ T6879] team0: Device ipvlan2 is already an upper device of the team interface [ 180.396855][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 180.443567][ T6884] loop2: detected capacity change from 0 to 128 [ 180.488212][ T26] audit: type=1326 audit(1735555425.656:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 180.575571][ T26] audit: type=1326 audit(1735555425.686:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 180.634525][ T26] audit: type=1326 audit(1735555425.686:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 180.657159][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 180.669335][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 180.716829][ T6893] loop2: detected capacity change from 0 to 1024 [ 180.727775][ T6890] netlink: 'syz.3.977': attribute type 10 has an invalid length. [ 180.728226][ T6893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.749133][ T6893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.755760][ T6890] netlink: 'syz.3.977': attribute type 19 has an invalid length. [ 180.763338][ T6893] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.778821][ T6890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.977'. [ 180.792951][ T6893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.850058][ T6893] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #2: comm syz.2.976: corrupted in-inode xattr [ 180.893723][ T6893] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #2: comm syz.2.976: corrupted in-inode xattr [ 181.075098][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 181.387921][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 181.545438][ T6921] loop2: detected capacity change from 0 to 1024 [ 181.550447][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.599537][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 181.622481][ T6921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.659692][ T26] audit: type=1800 audit(1735555426.826:1061): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.987" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 181.736494][ T6921] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 181.829136][ T6921] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 181.884349][ T6921] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.884349][ T6921] [ 181.925618][ T4252] Bluetooth: hci0: command 0x0406 tx timeout [ 181.926274][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 181.931796][ T4252] Bluetooth: hci3: command 0x0406 tx timeout [ 181.962036][ T6921] EXT4-fs (loop2): Total free blocks count 0 [ 181.983617][ T6921] EXT4-fs (loop2): Free/Dirty block details [ 181.989931][ T6921] EXT4-fs (loop2): free_blocks=68451041280 [ 181.996077][ T6921] EXT4-fs (loop2): dirty_blocks=64 [ 182.001412][ T6921] EXT4-fs (loop2): Block reservation details [ 182.007729][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 182.013906][ T6921] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 182.027951][ T6919] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 60 with error 28 [ 182.387981][ T6938] loop2: detected capacity change from 0 to 2048 [ 182.448520][ T6941] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 182.484204][ T6938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.727871][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 182.894064][ T26] audit: type=1326 audit(1735555428.056:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 182.971341][ T26] audit: type=1326 audit(1735555428.056:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 183.057348][ T26] audit: type=1326 audit(1735555428.056:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 183.114482][ T6965] loop2: detected capacity change from 0 to 2048 [ 183.131178][ T26] audit: type=1326 audit(1735555428.096:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 183.165709][ T6965] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.172356][ T6965] EXT4-fs: Ignoring removed i_version option [ 183.192294][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 183.209768][ T26] audit: type=1326 audit(1735555428.096:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5271985d29 code=0x7ffc0000 [ 183.245750][ T6965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.414005][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 183.437905][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 184.391676][ T7011] loop2: detected capacity change from 0 to 1024 [ 184.415123][ T7011] EXT4-fs: Ignoring removed nobh option [ 184.433459][ T7011] EXT4-fs: Ignoring removed bh option [ 184.458389][ T7011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.550629][ T7011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.641135][ T7011] syz.2.1024[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.641266][ T7011] syz.2.1024[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.658885][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 184.732572][ T7011] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.1024: Allocating blocks 257-513 which overlap fs metadata [ 184.785324][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 184.785343][ T26] audit: type=1800 audit(1735555429.946:1098): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1024" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 184.813389][ T7011] EXT4-fs (loop2): pa ffff888074bd67e0: logic 0, phys. 257, len 16 [ 184.822527][ T7011] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 184.862574][ T7011] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 185.034199][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 185.148634][ T26] audit: type=1326 audit(1735555430.316:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.245652][ T26] audit: type=1326 audit(1735555430.346:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.325714][ T26] audit: type=1326 audit(1735555430.346:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.356498][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 185.395597][ T26] audit: type=1326 audit(1735555430.346:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.464037][ T26] audit: type=1326 audit(1735555430.356:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.523665][ T26] audit: type=1326 audit(1735555430.356:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.571062][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1031'. [ 185.595625][ T26] audit: type=1326 audit(1735555430.356:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.667972][ T26] audit: type=1326 audit(1735555430.356:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 185.709512][ T7035] loop2: detected capacity change from 0 to 256 [ 185.725866][ T26] audit: type=1326 audit(1735555430.356:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 186.718282][ T7079] loop5: detected capacity change from 0 to 256 [ 186.720789][ T7077] loop1: detected capacity change from 0 to 512 [ 186.763897][ T7079] FAT-fs (loop5): Directory bread(block 64) failed [ 186.775576][ T7079] FAT-fs (loop5): Directory bread(block 65) failed [ 186.789940][ T7079] FAT-fs (loop5): Directory bread(block 66) failed [ 186.793030][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1051: inode #1: comm syz.1.1051: iget: illegal inode # [ 186.796628][ T7079] FAT-fs (loop5): Directory bread(block 67) failed [ 186.816530][ T7079] FAT-fs (loop5): Directory bread(block 68) failed [ 186.823178][ T7079] FAT-fs (loop5): Directory bread(block 69) failed [ 186.830075][ T7079] FAT-fs (loop5): Directory bread(block 70) failed [ 186.836775][ T7079] FAT-fs (loop5): Directory bread(block 71) failed [ 186.844448][ T7079] FAT-fs (loop5): Directory bread(block 72) failed [ 186.851133][ T7079] FAT-fs (loop5): Directory bread(block 73) failed [ 186.888943][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1051: error while reading EA inode 1 err=-117 [ 186.907780][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1051: inode #1: comm syz.1.1051: iget: illegal inode # [ 186.925079][ T7077] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1051: error while reading EA inode 1 err=-117 [ 186.943627][ T7077] EXT4-fs (loop1): 1 orphan inode deleted [ 186.949593][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.975513][ T7077] EXT4-fs (loop1): unmounting filesystem. [ 187.259882][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 187.276175][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 187.304279][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 187.328891][ T7] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.363246][ T7097] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1059'. [ 188.012516][ T7128] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1073'. [ 188.182510][ T7131] loop1: detected capacity change from 0 to 2048 [ 188.257484][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.329601][ T7142] syz.4.1079[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.329715][ T7142] syz.4.1079[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.414803][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 188.592045][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 188.700563][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1082'. [ 188.861075][ T7155] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1084'. [ 189.103380][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 189.164593][ T7162] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1087'. [ 189.200297][ T7162] ksmbd: Unknown IPC event: 3, ignore. [ 189.561397][ T7171] loop5: detected capacity change from 0 to 512 [ 189.634977][ T7171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.654429][ T7171] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.700083][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 189.763858][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.813361][ T7171] device bridge_slave_0 left promiscuous mode [ 189.820815][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.877678][ T7179] loop1: detected capacity change from 0 to 512 [ 189.891533][ T7179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.932229][ T7179] EXT4-fs (loop1): 1 truncate cleaned up [ 189.939531][ T7179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 190.199546][ T6407] EXT4-fs (loop5): unmounting filesystem. [ 190.260354][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 190.390906][ T7196] loop1: detected capacity change from 0 to 128 [ 191.930474][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 192.136180][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1102'. [ 192.435557][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 192.569089][ T7228] device pim6reg1 entered promiscuous mode [ 193.078359][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 193.078376][ T26] audit: type=1326 audit(1735555438.246:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.109840][ T26] audit: type=1326 audit(1735555438.246:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.140535][ T26] audit: type=1326 audit(1735555438.246:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.147383][ T7245] syz.2.1118[7245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.170606][ T26] audit: type=1326 audit(1735555438.246:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.192706][ T7245] syz.2.1118[7245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.216633][ T26] audit: type=1326 audit(1735555438.246:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.251398][ T26] audit: type=1326 audit(1735555438.246:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.279603][ T26] audit: type=1326 audit(1735555438.246:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.312685][ T26] audit: type=1326 audit(1735555438.246:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.348320][ T26] audit: type=1326 audit(1735555438.246:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.384282][ T26] audit: type=1326 audit(1735555438.246:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b9e185d29 code=0x7ffc0000 [ 193.439726][ T7250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 193.446327][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.486554][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 193.494139][ T7251] vhci_hcd: connection closed [ 193.494675][ T46] vhci_hcd: stop threads [ 193.505682][ T46] vhci_hcd: release socket [ 193.510183][ T46] vhci_hcd: disconnect device [ 193.558466][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 193.612732][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'. [ 193.670346][ T7262] device pim6reg1 entered promiscuous mode [ 193.746352][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 194.192702][ T7276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.261584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268172][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.364238][ T7276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.534545][ T7276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.574798][ T7293] device pim6reg1 entered promiscuous mode [ 194.589532][ T7297] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1137'. [ 194.599482][ T7297] 0ªX¹¦À: renamed from caif0 [ 194.610078][ T7297] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 194.760899][ T7276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.916157][ T7276] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.993110][ T7276] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.040539][ T7276] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.103346][ T7276] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.337798][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 195.463024][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 195.574611][ T7332] device pim6reg1 entered promiscuous mode [ 196.198525][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1155'. [ 196.325843][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 196.331982][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 196.343424][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 196.343449][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 196.544305][ T7350] loop2: detected capacity change from 0 to 256 [ 196.914937][ T7366] loop4: detected capacity change from 0 to 128 [ 197.175411][ T7370] loop4: detected capacity change from 0 to 1024 [ 197.184177][ T7370] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 197.197278][ T7370] EXT4-fs (loop4): invalid journal inode [ 197.203029][ T7370] EXT4-fs (loop4): can't get journal size [ 197.212397][ T7370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.259889][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 197.312628][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 197.467106][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1167'. [ 197.860378][ T7389] lo speed is unknown, defaulting to 1000 [ 198.053876][ T7393] lo speed is unknown, defaulting to 1000 [ 199.065022][ T7416] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 199.073714][ T7416] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 199.083077][ T7416] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 199.302334][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 199.476950][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 199.488189][ T7423] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1186'. [ 199.601405][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'. [ 200.011709][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 200.011734][ T26] audit: type=1326 audit(1735555445.176:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 200.075924][ T26] audit: type=1326 audit(1735555445.206:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 200.110899][ T26] audit: type=1326 audit(1735555445.206:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 200.135358][ T26] audit: type=1326 audit(1735555445.206:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 200.160601][ T26] audit: type=1326 audit(1735555445.206:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffada185d29 code=0x7ffc0000 [ 200.500866][ T26] audit: type=1326 audit(1735555445.666:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 200.540960][ T26] audit: type=1326 audit(1735555445.666:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 200.590524][ T26] audit: type=1326 audit(1735555445.666:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 200.622190][ T26] audit: type=1326 audit(1735555445.666:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 200.651048][ T26] audit: type=1326 audit(1735555445.666:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.2.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c2985d29 code=0x7ffc0000 [ 201.186460][ T7466] loop4: detected capacity change from 0 to 512 [ 201.199678][ T7466] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1204: Invalid inode bitmap blk 4 in block_group 0 [ 201.213598][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.228233][ T7466] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 201.273171][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 201.324922][ T7470] loop4: detected capacity change from 0 to 512 [ 201.332642][ T7470] EXT4-fs: Ignoring removed oldalloc option [ 201.339488][ T7470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.354608][ T7470] EXT4-fs (loop4): 1 truncate cleaned up [ 201.360785][ T7470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.373888][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1205'. [ 201.412748][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 201.652326][ T7477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1209'. [ 201.710695][ T7479] loop2: detected capacity change from 0 to 512 [ 201.740878][ T7481] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1210'. [ 201.748083][ T7479] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.771873][ T7481] unsupported nla_type 65024 [ 201.800165][ T7479] EXT4-fs (loop2): 1 truncate cleaned up [ 201.816681][ T7479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.942458][ T7479] ================================================================== [ 201.950592][ T7479] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 201.958352][ T7479] Read of size 18446744073709551572 at addr ffff88806836d050 by task syz.2.1208/7479 [ 201.968023][ T7479] [ 201.970365][ T7479] CPU: 0 PID: 7479 Comm: syz.2.1208 Tainted: G W 6.1.122-syzkaller #0 [ 201.979935][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.990027][ T7479] Call Trace: [ 201.993326][ T7479] [ 201.996284][ T7479] dump_stack_lvl+0x1e3/0x2cb [ 202.001095][ T7479] ? nf_tcp_handle_invalid+0x642/0x642 [ 202.006628][ T7479] ? panic+0x764/0x764 [ 202.010741][ T7479] ? _printk+0xd1/0x111 [ 202.014922][ T7479] ? __virt_addr_valid+0x17f/0x530 [ 202.020156][ T7479] ? __virt_addr_valid+0x17f/0x530 [ 202.025311][ T7479] print_report+0x15f/0x4f0 [ 202.029850][ T7479] ? __virt_addr_valid+0x17f/0x530 [ 202.035006][ T7479] ? __virt_addr_valid+0x17f/0x530 [ 202.040251][ T7479] ? __virt_addr_valid+0x45b/0x530 [ 202.045405][ T7479] ? __phys_addr+0xb6/0x170 [ 202.046543][ T7487] loop4: detected capacity change from 0 to 512 [ 202.049948][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.061679][ T7479] kasan_report+0x136/0x160 [ 202.066224][ T7479] ? __x64_sys_unlink+0x45/0x50 [ 202.071139][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.076638][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.082123][ T7479] kasan_check_range+0x27f/0x290 [ 202.087080][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.092555][ T7479] memmove+0x25/0x60 [ 202.096481][ T7479] ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.101800][ T7479] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 202.108235][ T7479] ? ext4_xattr_block_set+0x884/0x3920 [ 202.113715][ T7479] ? kmemdup+0x41/0x60 [ 202.117802][ T7479] ? memcpy+0x3c/0x60 [ 202.121798][ T7479] ext4_xattr_block_set+0xa58/0x3920 [ 202.127102][ T7479] ? __getblk_gfp+0x50/0xa20 [ 202.131706][ T7479] ? _raw_spin_unlock+0x24/0x40 [ 202.136579][ T7479] ? ext4_xattr_block_find+0x510/0x510 [ 202.142052][ T7479] ? ext4_xattr_block_find+0x468/0x510 [ 202.147525][ T7479] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 202.153445][ T7479] ? ext4_xattr_set+0x3d0/0x3d0 [ 202.158478][ T7479] ? rwsem_write_trylock+0x166/0x210 [ 202.163792][ T7479] ? clear_nonspinnable+0x60/0x60 [ 202.168834][ T7479] ? ext4_reserve_inode_write+0x2b3/0x360 [ 202.174598][ T7479] ? dquot_initialize_needed+0x128/0x320 [ 202.180251][ T7479] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 202.185906][ T7479] __ext4_mark_inode_dirty+0x54f/0x920 [ 202.191385][ T7479] ? ext4_blocks_for_truncate+0x270/0x270 [ 202.197118][ T7479] ? current_time+0x1ba/0x300 [ 202.201818][ T7479] ? atime_needs_update+0x7b0/0x7b0 [ 202.207036][ T7479] __ext4_unlink+0x6ed/0xba0 [ 202.211640][ T7479] ? __ext4_read_dirblock+0x890/0x890 [ 202.217027][ T7479] ? rwsem_write_trylock+0x166/0x210 [ 202.222327][ T7479] ? inode_permission+0xf7/0x450 [ 202.227280][ T7479] ? clear_nonspinnable+0x60/0x60 [ 202.232326][ T7479] ext4_unlink+0x1d5/0x670 [ 202.236756][ T7479] vfs_unlink+0x359/0x5f0 [ 202.241116][ T7479] do_unlinkat+0x4a5/0x820 [ 202.245552][ T7479] ? fsnotify_link_count+0xf0/0xf0 [ 202.250687][ T7479] __x64_sys_unlink+0x45/0x50 [ 202.255398][ T7479] do_syscall_64+0x3b/0xb0 [ 202.259828][ T7479] ? clear_bhb_loop+0x45/0xa0 [ 202.264515][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.270424][ T7479] RIP: 0033:0x7f98c2985d29 [ 202.274857][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.294474][ T7479] RSP: 002b:00007f98c36f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 202.302902][ T7479] RAX: ffffffffffffffda RBX: 00007f98c2b75fa0 RCX: 00007f98c2985d29 [ 202.310885][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 202.318866][ T7479] RBP: 00007f98c2a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 202.326845][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.334828][ T7479] R13: 0000000000000000 R14: 00007f98c2b75fa0 R15: 00007ffdbf088318 [ 202.342813][ T7479] [ 202.345837][ T7479] [ 202.348182][ T7479] Allocated by task 7479: [ 202.352506][ T7479] kasan_set_track+0x4b/0x70 [ 202.357192][ T7479] __kasan_kmalloc+0x97/0xb0 [ 202.361786][ T7479] __kmalloc_node_track_caller+0xb1/0x220 [ 202.367529][ T7479] kmemdup+0x26/0x60 [ 202.371428][ T7479] ext4_xattr_block_set+0x884/0x3920 [ 202.376725][ T7479] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 202.382622][ T7479] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 202.388267][ T7479] __ext4_mark_inode_dirty+0x54f/0x920 [ 202.393732][ T7479] __ext4_unlink+0x6ed/0xba0 [ 202.398328][ T7479] ext4_unlink+0x1d5/0x670 [ 202.402749][ T7479] vfs_unlink+0x359/0x5f0 [ 202.407090][ T7479] do_unlinkat+0x4a5/0x820 [ 202.411514][ T7479] __x64_sys_unlink+0x45/0x50 [ 202.416214][ T7479] do_syscall_64+0x3b/0xb0 [ 202.420660][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.426623][ T7479] [ 202.428951][ T7479] The buggy address belongs to the object at ffff88806836d000 [ 202.428951][ T7479] which belongs to the cache kmalloc-1k of size 1024 [ 202.443021][ T7479] The buggy address is located 80 bytes inside of [ 202.443021][ T7479] 1024-byte region [ffff88806836d000, ffff88806836d400) [ 202.456314][ T7479] [ 202.458642][ T7479] The buggy address belongs to the physical page: [ 202.465068][ T7479] page:ffffea0001a0da00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x68368 [ 202.475225][ T7479] head:ffffea0001a0da00 order:3 compound_mapcount:0 compound_pincount:0 [ 202.483555][ T7479] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 202.491554][ T7479] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c41dc0 [ 202.500142][ T7479] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 202.508732][ T7479] page dumped because: kasan: bad access detected [ 202.515152][ T7479] page_owner tracks the page as allocated [ 202.520866][ T7479] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4652, tgid 4652 (kworker/u4:13), ts 201918392853, free_ts 198981911021 [ 202.541899][ T7479] post_alloc_hook+0x18d/0x1b0 [ 202.546674][ T7479] get_page_from_freelist+0x3731/0x38d0 [ 202.552228][ T7479] __alloc_pages+0x28d/0x770 [ 202.556821][ T7479] alloc_slab_page+0x6a/0x150 [ 202.561526][ T7479] new_slab+0x84/0x2d0 [ 202.565639][ T7479] ___slab_alloc+0xc20/0x1270 [ 202.570339][ T7479] __kmem_cache_alloc_node+0x19f/0x260 [ 202.575807][ T7479] __kmalloc+0xa1/0x230 [ 202.579967][ T7479] ieee802_11_parse_elems_full+0xc4/0x1380 [ 202.585788][ T7479] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 202.591859][ T7479] ieee80211_iface_work+0x7aa/0xce0 [ 202.597060][ T7479] process_one_work+0x8a9/0x11d0 [ 202.602004][ T7479] worker_thread+0xa47/0x1200 [ 202.606685][ T7479] kthread+0x28d/0x320 [ 202.610757][ T7479] ret_from_fork+0x1f/0x30 [ 202.615185][ T7479] page last free stack trace: [ 202.619875][ T7479] free_unref_page_prepare+0x12a6/0x15b0 [ 202.625521][ T7479] free_unref_page+0x33/0x3e0 [ 202.630206][ T7479] skb_release_data+0x37f/0x7a0 [ 202.635074][ T7479] kfree_skb_reason+0x16f/0x390 [ 202.639938][ T7479] skb_release_data+0x570/0x7a0 [ 202.644805][ T7479] kfree_skb_reason+0x16f/0x390 [ 202.649692][ T7479] kcm_sendmsg+0x1b00/0x24e0 [ 202.654293][ T7479] ____sys_sendmsg+0x5a5/0x8f0 [ 202.659072][ T7479] __sys_sendmmsg+0x3ab/0x730 [ 202.663764][ T7479] __x64_sys_sendmmsg+0x9c/0xb0 [ 202.668630][ T7479] do_syscall_64+0x3b/0xb0 [ 202.673061][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.678970][ T7479] [ 202.681294][ T7479] Memory state around the buggy address: [ 202.686922][ T7479] ffff88806836cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.695010][ T7479] ffff88806836cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.703085][ T7479] >ffff88806836d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.711149][ T7479] ^ [ 202.717834][ T7479] ffff88806836d080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.725899][ T7479] ffff88806836d100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.733956][ T7479] ================================================================== [ 202.752863][ T7479] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.760112][ T7479] CPU: 1 PID: 7479 Comm: syz.2.1208 Tainted: G W 6.1.122-syzkaller #0 [ 202.769663][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.779736][ T7479] Call Trace: [ 202.783024][ T7479] [ 202.785964][ T7479] dump_stack_lvl+0x1e3/0x2cb [ 202.790667][ T7479] ? nf_tcp_handle_invalid+0x642/0x642 [ 202.796148][ T7479] ? panic+0x764/0x764 [ 202.800231][ T7479] ? preempt_schedule_common+0xa6/0xd0 [ 202.805701][ T7479] ? vscnprintf+0x59/0x80 [ 202.810042][ T7479] panic+0x318/0x764 [ 202.813951][ T7479] ? check_panic_on_warn+0x1d/0xa0 [ 202.819070][ T7479] ? memcpy_page_flushcache+0xfc/0xfc [ 202.824449][ T7479] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 202.830452][ T7479] ? _raw_spin_unlock+0x40/0x40 [ 202.835321][ T7479] check_panic_on_warn+0x7e/0xa0 [ 202.840268][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.845737][ T7479] end_report+0x66/0x110 [ 202.849993][ T7479] kasan_report+0x143/0x160 [ 202.854500][ T7479] ? __x64_sys_unlink+0x45/0x50 [ 202.859366][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.864830][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.870295][ T7479] kasan_check_range+0x27f/0x290 [ 202.875240][ T7479] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.880708][ T7479] memmove+0x25/0x60 [ 202.884610][ T7479] ext4_xattr_set_entry+0x8ca/0x1f30 [ 202.889906][ T7479] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 202.896325][ T7479] ? ext4_xattr_block_set+0x884/0x3920 [ 202.901788][ T7479] ? kmemdup+0x41/0x60 [ 202.905862][ T7479] ? memcpy+0x3c/0x60 [ 202.909854][ T7479] ext4_xattr_block_set+0xa58/0x3920 [ 202.915149][ T7479] ? __getblk_gfp+0x50/0xa20 [ 202.919749][ T7479] ? _raw_spin_unlock+0x24/0x40 [ 202.924609][ T7479] ? ext4_xattr_block_find+0x510/0x510 [ 202.930078][ T7479] ? ext4_xattr_block_find+0x468/0x510 [ 202.935579][ T7479] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 202.941491][ T7479] ? ext4_xattr_set+0x3d0/0x3d0 [ 202.946343][ T7479] ? rwsem_write_trylock+0x166/0x210 [ 202.951811][ T7479] ? clear_nonspinnable+0x60/0x60 [ 202.956843][ T7479] ? ext4_reserve_inode_write+0x2b3/0x360 [ 202.962575][ T7479] ? dquot_initialize_needed+0x128/0x320 [ 202.968222][ T7479] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 202.973872][ T7479] __ext4_mark_inode_dirty+0x54f/0x920 [ 202.979344][ T7479] ? ext4_blocks_for_truncate+0x270/0x270 [ 202.985083][ T7479] ? current_time+0x1ba/0x300 [ 202.989776][ T7479] ? atime_needs_update+0x7b0/0x7b0 [ 202.994992][ T7479] __ext4_unlink+0x6ed/0xba0 [ 202.999592][ T7479] ? __ext4_read_dirblock+0x890/0x890 [ 203.004972][ T7479] ? rwsem_write_trylock+0x166/0x210 [ 203.010268][ T7479] ? inode_permission+0xf7/0x450 [ 203.015216][ T7479] ? clear_nonspinnable+0x60/0x60 [ 203.020251][ T7479] ext4_unlink+0x1d5/0x670 [ 203.024677][ T7479] vfs_unlink+0x359/0x5f0 [ 203.029018][ T7479] do_unlinkat+0x4a5/0x820 [ 203.033447][ T7479] ? fsnotify_link_count+0xf0/0xf0 [ 203.038576][ T7479] __x64_sys_unlink+0x45/0x50 [ 203.043263][ T7479] do_syscall_64+0x3b/0xb0 [ 203.047693][ T7479] ? clear_bhb_loop+0x45/0xa0 [ 203.052373][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.058300][ T7479] RIP: 0033:0x7f98c2985d29 [ 203.062718][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.082335][ T7479] RSP: 002b:00007f98c36f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 203.090759][ T7479] RAX: ffffffffffffffda RBX: 00007f98c2b75fa0 RCX: 00007f98c2985d29 [ 203.098739][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 203.106713][ T7479] RBP: 00007f98c2a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 203.114689][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.122660][ T7479] R13: 0000000000000000 R14: 00007f98c2b75fa0 R15: 00007ffdbf088318 [ 203.130644][ T7479] [ 203.133921][ T7479] Kernel Offset: disabled [ 203.138291][ T7479] Rebooting in 86400 seconds..