last executing test programs: 1m37.758984998s ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) shmdt(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "f2fe88033145143e", "eb00", "00147b69", "6a74fa9db6a8e871"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000580)="ece816ea", 0x4}], 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x6, 0x16, 0x192, 0x0}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x9, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1m37.400201254s ago: executing program 0 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) connect$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0xa6ff, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) 1m36.449078229s ago: executing program 0 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x401) 1m36.148736284s ago: executing program 0 (id=192): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 1m35.838524409s ago: executing program 0 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0x9b1b, 0x2000, 0x1, 0x8002aa}, &(0x7f0000000400), &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) 1m34.706352457s ago: executing program 0 (id=206): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 1m19.288848081s ago: executing program 32 (id=206): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 39.604589861s ago: executing program 1 (id=588): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 38.956367051s ago: executing program 1 (id=594): ioperm(0x0, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 38.640223006s ago: executing program 1 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0xffffff40}], 0x1, 0x2020, 0x0) 37.538509124s ago: executing program 1 (id=603): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=r']) 36.874338964s ago: executing program 1 (id=611): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 36.440159942s ago: executing program 1 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0502a1f5feffffff00", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006fbd000085000000060000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0286dd602abe000018110000000000000000000000000000000000000000000000000100004e210018907804000000e0ff00"/70], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffa}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000004c0000000b0a03000000000000000000010000090900020073797a31000000000900010073797a30000000001800118008000100647570000c000280080001400000001008000640ffffff004c000000060a010400003f0000000000000100000424000480200001800700010072740000140002800800014000000017080002400000000208000b40000000000900010073797a300000000014000000110001000000000000000000050000"], 0xe0}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x17934491455df853, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002800100028000000050000000c0000000000000b010000000f0000000000000a010000000900000000000011040000000120000000612e6100"], &(0x7f00000006c0)=""/237, 0x45, 0xed, 0x0, 0x8, 0x0, @void, @value}, 0x28) 31.340848733s ago: executing program 3 (id=638): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 30.8601837s ago: executing program 3 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30.659638763s ago: executing program 3 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) close(r3) syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000200000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb301a913bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd5441110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5e080eaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffda707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe030000008e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000f1e2be1b2290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be479998cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa39596443447671971868345e92e4b33079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166fa3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c141000000000000000921d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9cdfd008c898d73bb97168ca390ef5398000000000000000000000000a454f930ada97e4d7460bf0d3312c03639870f8b33fa044a805867e88bf164474513ec0cd466baf22573597c7bf340d67a6854e39371fb671a46be4942b49cc28ac921188461979e530c8a90dcfacdad19469540b9deb65290e786e53a715e6b712642087c9a0640b6910f4c07cde1ba22c2224cd9c8c39dd73a9b0a15c743b6c29c7635d96dee702dce815913a7ad9b661da02d7decc1649d06d55c9a8f24dc63f02c3bc2d6ad0425cf71147d0efa8a255819a1c3b54fffe7f2cb3629990f034cae989dd1dfebc50a2a7ed4fbaa267e7c4cd6f11511a12a7116ca9a78e83a59d90a4abe6b0aafc9c9e408c324f67910b938765e0bf7e80d6e306b6827ae12ecae85472d88ad4646256329b6ae3b3974b420504c6df932eb45506db7d0d5d838aeb7ad7b90a38a24ba58e67e8c6845cd16e294fb25681c3c752d02862feb48bb7c67fde3ab4035c7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000440)="7b1c", 0x2}], 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002800070100000000000000f80200000008", @ANYRES64], 0x20}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000), 0x0) 29.747464928s ago: executing program 3 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) shmdt(0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 29.222555316s ago: executing program 3 (id=655): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 28.907983761s ago: executing program 3 (id=658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x427c892b971ae4ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sync() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x7, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x22, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x7, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0x2, 0x148ecb01}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 22.348183775s ago: executing program 4 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 21.829641103s ago: executing program 4 (id=700): personality(0x0) 21.611842337s ago: executing program 4 (id=703): mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 20.903074679s ago: executing program 33 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0502a1f5feffffff00", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006fbd000085000000060000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0286dd602abe000018110000000000000000000000000000000000000000000000000100004e210018907804000000e0ff00"/70], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffa}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000004c0000000b0a03000000000000000000010000090900020073797a31000000000900010073797a30000000001800118008000100647570000c000280080001400000001008000640ffffff004c000000060a010400003f0000000000000100000424000480200001800700010072740000140002800800014000000017080002400000000208000b40000000000900010073797a300000000014000000110001000000000000000000050000"], 0xe0}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x17934491455df853, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002800100028000000050000000c0000000000000b010000000f0000000000000a010000000900000000000011040000000120000000612e6100"], &(0x7f00000006c0)=""/237, 0x45, 0xed, 0x0, 0x8, 0x0, @void, @value}, 0x28) 20.891612928s ago: executing program 4 (id=705): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 20.613436943s ago: executing program 4 (id=708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x0, 0x0) 20.249551349s ago: executing program 4 (id=710): syz_open_procfs(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() 13.641753463s ago: executing program 34 (id=658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x427c892b971ae4ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sync() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x7, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x22, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x7, 0x6, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0x2, 0x148ecb01}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 5.139787808s ago: executing program 35 (id=710): syz_open_procfs(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() 4.120414035s ago: executing program 6 (id=786): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000009c0)={@desc={0x1, 0x0, @desc2}}) mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0) 3.586193693s ago: executing program 2 (id=788): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x18) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x8201) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 3.108118401s ago: executing program 5 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) close(r3) syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000440)="7b1c", 0x2}], 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r7, &(0x7f0000007340), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002800070100000000000000f80200000008", @ANYRES64], 0x20}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000), 0x0) 3.013736902s ago: executing program 2 (id=790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f00000001c0)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfcc, 0x29}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) syz_emit_ethernet(0x86, &(0x7f00000006c0)={@random="5b1a03372511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x4, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e40e30acf8afc7e67d70c72c979cefa10a0028bd", "ae000000286f00ff8cb0534500000002", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 2.082635127s ago: executing program 6 (id=791): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f0000000040)=@sack_info={r2, 0xce8, 0xc}, 0xc) 2.082378457s ago: executing program 2 (id=792): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1ff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 1.925170809s ago: executing program 5 (id=793): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc3, 0x40) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) setxattr$incfs_id(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 1.692427683s ago: executing program 6 (id=794): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.617550335s ago: executing program 5 (id=795): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 1.448200567s ago: executing program 5 (id=796): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 1.139880752s ago: executing program 5 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r3, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000640)=0x8, &(0x7f0000000680)=0x2) 934.317005ms ago: executing program 6 (id=798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 492.577493ms ago: executing program 6 (id=799): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$notify(r0, 0x402, 0x8000003d) 436.167933ms ago: executing program 2 (id=800): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 238.227766ms ago: executing program 2 (id=801): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 133.822978ms ago: executing program 5 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) close(r3) syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000440)="7b1c", 0x2}], 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r7, &(0x7f0000007340), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002800070100000000000000f80200000008", @ANYRES64], 0x20}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000), 0x0) 392.77µs ago: executing program 6 (id=803): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffb, 0x1}, &(0x7f00000001c0)=0x90) 0s ago: executing program 2 (id=804): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) kernel console output (not intermixed with test programs): d=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.073421][ T4809] netlink: 372 bytes leftover after parsing attributes in process `syz.0.186'. [ 105.110671][ T27] audit: type=1326 audit(1745230459.968:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.212775][ T27] audit: type=1326 audit(1745230459.968:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.254825][ T27] audit: type=1326 audit(1745230459.968:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.373904][ T4812] loop1: detected capacity change from 0 to 4096 [ 105.408842][ T27] audit: type=1326 audit(1745230459.968:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.453877][ T4821] capability: warning: `syz.4.189' uses deprecated v2 capabilities in a way that may be insecure [ 105.454766][ T4818] loop2: detected capacity change from 0 to 512 [ 105.487015][ T4818] EXT4-fs: Ignoring removed nobh option [ 105.495254][ T4812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.530531][ T4812] EXT4-fs (loop1): unmounting filesystem. [ 105.536928][ T27] audit: type=1326 audit(1745230459.968:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.0.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbb8e169 code=0x7ffc0000 [ 105.578502][ T4818] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.188: invalid indirect mapped block 256 (level 2) [ 105.604294][ T4818] EXT4-fs (loop2): 2 truncates cleaned up [ 105.613464][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.636810][ T4818] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.2.188: path /34/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 105.714923][ T4831] loop3: detected capacity change from 0 to 512 [ 105.809609][ T4831] EXT4-fs (loop3): too many log groups per flexible block group [ 105.817463][ T4831] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 105.879540][ T4831] EXT4-fs (loop3): mount failed [ 105.943211][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 106.093381][ T4844] loop0: detected capacity change from 0 to 1024 [ 106.104134][ T4844] EXT4-fs: Ignoring removed nobh option [ 106.118169][ T4844] EXT4-fs: Ignoring removed bh option [ 106.267760][ T4844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.371895][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.588451][ T4844] loop0: detected capacity change from 1024 to 64 [ 106.628792][ T4858] syz.0.196: attempt to access beyond end of device [ 106.628792][ T4858] loop0: rw=3, sector=418, nr_sectors = 6 limit=64 [ 106.697576][ T4858] syz.0.196: attempt to access beyond end of device [ 106.697576][ T4858] loop0: rw=2051, sector=424, nr_sectors = 58 limit=64 [ 106.751054][ T4858] EXT4-fs (loop0): discard request in group:0 block:13 count:32 failed with -5 [ 106.767218][ T4863] syz.4.202 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.810812][ T4858] syz.0.196: attempt to access beyond end of device [ 106.810812][ T4858] loop0: rw=2057, sector=392, nr_sectors = 24 limit=64 [ 106.852690][ T4858] syz.0.196: attempt to access beyond end of device [ 106.852690][ T4858] loop0: rw=2049, sector=392, nr_sectors = 24 limit=64 [ 106.915905][ T4858] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 3 with error 5 [ 106.968372][ T4858] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.968372][ T4858] [ 107.086883][ T4259] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /43/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 107.221418][ T4871] program syz.3.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.266859][ T4871] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 107.446369][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.506790][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.557942][ T4876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.583475][ T4880] loop4: detected capacity change from 0 to 2048 [ 107.646024][ T4880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.663771][ T4880] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.169715][ T4875] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.176666][ T4875] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.208812][ T4875] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 108.233127][ T4875] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.251846][ T4875] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.269189][ T4875] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 108.285498][ T4875] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.298482][ T4875] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.312764][ T4875] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 108.328528][ T4875] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.341399][ T4875] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.361888][ T4875] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 108.374505][ T4875] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.406046][ T4875] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.433857][ T4875] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 108.868740][ T9] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 345: padding at end of block bitmap is not set [ 108.902787][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 108.936253][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.936253][ T9] [ 109.101467][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1011 with error 28 [ 109.155969][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.155969][ T9] [ 109.204017][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 109.234481][ T9] EXT4-fs (loop4): Free/Dirty block details [ 109.241971][ T9] EXT4-fs (loop4): free_blocks=0 [ 109.247048][ T9] EXT4-fs (loop4): dirty_blocks=1024 [ 109.252990][ T9] EXT4-fs (loop4): Block reservation details [ 109.319021][ T4910] process 'syz.1.220' launched '/dev/fd/6' with NULL argv: empty string added [ 109.468007][ T4258] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.614484][ T4915] loop1: detected capacity change from 0 to 512 [ 109.715257][ T4915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.222: inode #1: comm syz.1.222: iget: illegal inode # [ 109.831733][ T4915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.222: error while reading EA inode 1 err=-117 [ 109.892325][ T4915] EXT4-fs (loop1): 1 orphan inode deleted [ 109.917782][ T4915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.081832][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 110.252912][ T4926] tipc: Started in network mode [ 110.265066][ T4926] tipc: Node identity ac14140f, cluster identity 4711 [ 110.267839][ T4258] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.274429][ T4926] tipc: New replicast peer: 10.1.1.2 [ 110.347797][ T4258] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.354672][ T4258] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.359329][ T4926] tipc: Enabled bearer , priority 10 [ 110.416318][ T4926] netlink: 'syz.1.225': attribute type 13 has an invalid length. [ 110.432134][ T4258] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.770291][ T4931] loop2: detected capacity change from 0 to 1024 [ 110.801201][ T4931] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.848590][ T4931] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.906044][ T4931] JBD2: no valid journal superblock found [ 110.927689][ T4931] EXT4-fs (loop2): error loading journal [ 111.305646][ T27] kauditd_printk_skb: 96 callbacks suppressed [ 111.305664][ T27] audit: type=1326 audit(1745230466.988:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.388277][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 111.388277][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 111.414492][ T27] audit: type=1326 audit(1745230466.998:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.422964][ T4297] tipc: Node number set to 2886997007 [ 111.443631][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 111.456599][ T4851] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 111.460366][ T4942] loop2: detected capacity change from 0 to 512 [ 111.494943][ T27] audit: type=1326 audit(1745230466.998:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.548349][ T4258] Bluetooth: hci0: command 0x0406 tx timeout [ 111.554888][ T27] audit: type=1326 audit(1745230466.998:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.596554][ T4942] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 111.618024][ T4942] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.646700][ T4942] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.230: Failed to acquire dquot type 1 [ 111.663718][ T27] audit: type=1326 audit(1745230467.048:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.713774][ T27] audit: type=1326 audit(1745230467.058:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.737254][ T4942] EXT4-fs (loop2): 1 truncate cleaned up [ 111.744199][ T4942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.764401][ T4942] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.787829][ T27] audit: type=1326 audit(1745230467.058:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.866007][ T4942] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 111.879210][ T27] audit: type=1326 audit(1745230467.058:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 111.996457][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 112.056700][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.064504][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.349772][ T4258] Bluetooth: hci1: command 0x0406 tx timeout [ 112.427891][ T4258] Bluetooth: hci2: command 0x0406 tx timeout [ 112.434339][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 112.507733][ T4258] Bluetooth: hci4: command 0x0406 tx timeout [ 112.566372][ T4953] loop2: detected capacity change from 0 to 512 [ 112.676869][ T4953] EXT4-fs warning (device loop2): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.733427][ T4953] EXT4-fs (loop2): mount failed [ 113.279741][ T4926] infiniband syz!: set down [ 113.386921][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.476040][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.287255][ T4926] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.296329][ T4926] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.306302][ T4926] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.315888][ T4926] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.554684][ T4949] netlink: 168 bytes leftover after parsing attributes in process `syz.3.232'. [ 115.252845][ T4990] loop3: detected capacity change from 0 to 164 [ 115.338443][ T4990] ISOFS: unable to read i-node block [ 116.188662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 116.440217][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 116.440217][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 116.454556][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 116.806692][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 116.894387][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 117.301873][ T5007] xt_hashlimit: max too large, truncated to 1048576 [ 117.320951][ T5007] Cannot find set identified by id 0 to match [ 117.707940][ T5011] nfs: Unknown parameter '+B$\'*' [ 117.953455][ T5015] loop4: detected capacity change from 0 to 1024 [ 118.051819][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.062318][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 118.062334][ T27] audit: type=1326 audit(1745230473.748:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 118.074347][ T5015] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.219281][ T27] audit: type=1326 audit(1745230473.778:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 118.307958][ T27] audit: type=1326 audit(1745230473.778:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 118.375332][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 118.411558][ T27] audit: type=1326 audit(1745230473.778:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 118.454223][ T27] audit: type=1326 audit(1745230473.778:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 118.478444][ T27] audit: type=1326 audit(1745230473.778:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 118.512812][ T27] audit: type=1326 audit(1745230473.778:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 118.575787][ T27] audit: type=1326 audit(1745230473.778:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 118.582143][ T5027] loop3: detected capacity change from 0 to 512 [ 118.611035][ T27] audit: type=1326 audit(1745230473.778:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 118.625348][ T5029] loop4: detected capacity change from 0 to 256 [ 118.657798][ T27] audit: type=1326 audit(1745230473.778:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 118.714135][ T5027] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.255: Failed to acquire dquot type 1 [ 118.747040][ T5027] EXT4-fs (loop3): 1 truncate cleaned up [ 118.788210][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.797222][ T5027] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.947962][ T5027] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 119.048981][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 119.105747][ T5037] device bond1 entered promiscuous mode [ 119.128660][ T5037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.217338][ T5045] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 119.560345][ T5051] xt_hashlimit: size too large, truncated to 1048576 [ 120.000718][ T5037] bond1 (unregistering): Released all slaves [ 121.135161][ T5068] syz.4.272[5068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.135308][ T5068] syz.4.272[5068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.423056][ T5070] loop4: detected capacity change from 0 to 512 [ 121.467918][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 121.467918][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 121.503897][ T5072] loop1: detected capacity change from 0 to 764 [ 121.506171][ T5070] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.273: Failed to acquire dquot type 1 [ 121.532697][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 121.549096][ T5070] EXT4-fs (loop4): 1 truncate cleaned up [ 121.557996][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.614469][ T5070] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.648603][ T5085] loop2: detected capacity change from 0 to 512 [ 122.725784][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.747999][ T5085] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.804746][ T5085] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.281: corrupted inode contents [ 122.849206][ T5085] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz.2.281: mark_inode_dirty error [ 122.892222][ T5085] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.281: corrupted inode contents [ 122.920338][ T5085] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.281: mark_inode_dirty error [ 123.064318][ T5070] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 123.193702][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 123.211823][ T4250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.247919][ T4250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.256936][ T4250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.265042][ T4250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.272739][ T4250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.280524][ T4250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.620572][ T5093] 9pnet: Could not find request transport: t [ 123.815950][ T5090] lo speed is unknown, defaulting to 1000 [ 123.925232][ T5096] loop4: detected capacity change from 0 to 512 [ 123.987572][ T5096] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.157814][ T5096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.260834][ T5096] EXT4-fs (loop4): 1 truncate cleaned up [ 124.297054][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.444375][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 124.467877][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.506473][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.575473][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.599358][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.859854][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 124.875974][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 125.167025][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.213324][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.242052][ T5090] device bridge_slave_0 entered promiscuous mode [ 125.260316][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.275774][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.289096][ T5090] device bridge_slave_1 entered promiscuous mode [ 125.307769][ T4250] Bluetooth: hci5: command 0x0409 tx timeout [ 125.316131][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 125.390343][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.434282][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.574592][ T5090] team0: Port device team_slave_0 added [ 125.599503][ T5090] team0: Port device team_slave_1 added [ 125.691503][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.716241][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.804567][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.836091][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.861498][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.965338][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.102873][ T5126] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.146038][ T5122] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.181810][ T5090] device hsr_slave_0 entered promiscuous mode [ 126.218552][ T5090] device hsr_slave_1 entered promiscuous mode [ 126.226627][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.257667][ T5090] Cannot create hsr debugfs directory [ 126.507856][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 126.507856][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 126.547695][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 126.561598][ T5123] lo speed is unknown, defaulting to 1000 [ 126.793968][ T5090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.835170][ T5090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.878855][ T5090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.914711][ T5090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.225150][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.262117][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.281896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.321877][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.387881][ T4250] Bluetooth: hci5: command 0x041b tx timeout [ 127.408617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.438890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.497365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.505383][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.528013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.536981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.545915][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.553060][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.565631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.718373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.728996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.738242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.771333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.797452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.844426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.853614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.885945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.894979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.921210][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.967568][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.980753][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.210714][ T5141] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.571494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.607969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.641113][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.829116][ T27] kauditd_printk_skb: 165 callbacks suppressed [ 128.829132][ T27] audit: type=1326 audit(1745230484.518:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 128.927687][ T27] audit: type=1326 audit(1745230484.518:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 128.950668][ T5153] loop3: detected capacity change from 0 to 512 [ 129.011043][ T27] audit: type=1326 audit(1745230484.528:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.103478][ T5153] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 129.132644][ T5085] Set syz1 is full, maxelem 65536 reached [ 129.174077][ T27] audit: type=1326 audit(1745230484.528:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.177269][ T5153] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 129.197796][ T27] audit: type=1326 audit(1745230484.528:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.234100][ T27] audit: type=1326 audit(1745230484.528:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.256738][ T5153] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.300: Failed to acquire dquot type 1 [ 129.285574][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 129.292191][ T27] audit: type=1326 audit(1745230484.578:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.324230][ T5153] EXT4-fs (loop3): 1 truncate cleaned up [ 129.331245][ T5153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.348122][ T27] audit: type=1326 audit(1745230484.588:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 129.378190][ T5153] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.422718][ T5153] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 129.467916][ T4250] Bluetooth: hci5: command 0x040f tx timeout [ 129.513602][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 129.796925][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.819525][ T5171] loop1: detected capacity change from 0 to 1024 [ 129.827006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.850432][ T5171] EXT4-fs: Ignoring removed i_version option [ 129.856523][ T5171] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.898868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.912894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.925558][ T5171] ext4: Unknown parameter 'noacl' [ 129.938866][ T5090] device veth0_vlan entered promiscuous mode [ 129.946887][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.966315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.006092][ T5090] device veth1_vlan entered promiscuous mode [ 130.022847][ T5171] Zero length message leads to an empty skb [ 130.054202][ T5171] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.094624][ T5177] loop3: detected capacity change from 0 to 1024 [ 130.105482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.126172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.150894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.173970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.204924][ T5177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.206015][ T5090] device veth0_macvtap entered promiscuous mode [ 130.223921][ T5180] loop2: detected capacity change from 0 to 1024 [ 130.235175][ T5090] device veth1_macvtap entered promiscuous mode [ 130.268928][ T5177] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.307120][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.358981][ T5180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.384073][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.416950][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.456078][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.477431][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.511627][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.540935][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.551267][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 130.602045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.618714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.659966][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 130.688666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.722636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.749137][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.789501][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.817809][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.834107][ T5193] loop1: detected capacity change from 0 to 512 [ 130.857773][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.885496][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.921111][ T5193] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.314: Failed to acquire dquot type 1 [ 130.926685][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.959297][ T5193] EXT4-fs (loop1): 1 truncate cleaned up [ 130.965020][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.974327][ T5193] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.000357][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.016418][ T5193] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 131.041954][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.092650][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.137244][ T5090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.166609][ T5090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.203248][ T5090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.223527][ T5090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.266634][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 131.503528][ T4594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.522140][ T4594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.548009][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 131.548009][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 131.548492][ T4250] Bluetooth: hci5: command 0x0419 tx timeout [ 131.586289][ T5213] loop3: detected capacity change from 0 to 1024 [ 131.595076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.645016][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 131.673886][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.674564][ T5213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.695454][ T5191] loop4: detected capacity change from 0 to 1024 [ 131.712831][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.717881][ T5213] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.731699][ T5191] EXT4-fs: Ignoring removed bh option [ 131.740967][ T5191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.763445][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.824272][ T5191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.972025][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 132.056814][ T5191] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.313: Allocating blocks 497-513 which overlap fs metadata [ 132.154029][ T5191] EXT4-fs (loop4): pa ffff888074219e00: logic 256, phys. 385, len 8 [ 132.162806][ T5191] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 132.784326][ T5241] loop3: detected capacity change from 0 to 512 [ 132.831912][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838657][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864511][ T5241] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.328: Failed to acquire dquot type 1 [ 132.937835][ T5241] EXT4-fs (loop3): 1 truncate cleaned up [ 132.971041][ T5241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.007924][ T5241] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.023477][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 133.080092][ T5241] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 133.198017][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 133.376174][ T5257] loop3: detected capacity change from 0 to 1024 [ 133.446010][ T5257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.488261][ T5257] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.737285][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 134.124840][ T27] kauditd_printk_skb: 213 callbacks suppressed [ 134.124858][ T27] audit: type=1326 audit(1745230489.808:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.194669][ T27] audit: type=1326 audit(1745230489.808:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.239230][ T5283] loop1: detected capacity change from 0 to 512 [ 134.293224][ T5291] loop5: detected capacity change from 0 to 1024 [ 134.298760][ T27] audit: type=1326 audit(1745230489.808:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.335949][ T5291] EXT4-fs: Ignoring removed nobh option [ 134.345608][ T5283] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 134.376987][ T27] audit: type=1326 audit(1745230489.808:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.415726][ T5283] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 134.427131][ T5283] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.346: Failed to acquire dquot type 1 [ 134.430468][ T5291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.453568][ T5283] EXT4-fs (loop1): 1 truncate cleaned up [ 134.459593][ T5283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.468748][ T5283] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.483428][ T27] audit: type=1326 audit(1745230489.808:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.510847][ T27] audit: type=1326 audit(1745230489.818:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.534571][ T27] audit: type=1326 audit(1745230489.868:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.562993][ T5283] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 134.590219][ T5291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 134.607022][ T5300] loop2: detected capacity change from 0 to 1024 [ 134.607939][ T27] audit: type=1326 audit(1745230489.878:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 134.658747][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 134.702401][ T5300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.736126][ T5300] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.817043][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 134.955139][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 134.997815][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.016016][ T5310] loop3: detected capacity change from 0 to 2048 [ 135.038916][ T5315] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.106810][ T5313] syz.5.356 (5313) used greatest stack depth: 20056 bytes left [ 135.146812][ T5310] Alternate GPT is invalid, using primary GPT. [ 135.165490][ T5310] loop3: p2 p3 p7 [ 135.177761][ T4296] usb 5-1: device descriptor read/64, error -71 [ 135.453344][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.574910][ T5330] syz.5.364[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.575033][ T5330] syz.5.364[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.619199][ T4296] usb 5-1: device descriptor read/64, error -71 [ 135.769101][ T4296] usb usb5-port1: attempt power cycle [ 136.143235][ T5342] loop2: detected capacity change from 0 to 1024 [ 136.197707][ T4296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.221691][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.245901][ T4296] usb 5-1: device descriptor read/8, error -71 [ 136.261477][ T5342] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.484827][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 136.532592][ T4296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.578517][ T4296] usb 5-1: device descriptor read/8, error -71 [ 136.588127][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 136.588127][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 136.652101][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 136.698043][ T4296] usb usb5-port1: unable to enumerate USB device [ 137.806970][ T5380] nfs4: Bad value for 'source' [ 138.316727][ T5400] loop4: detected capacity change from 0 to 512 [ 138.364173][ T5400] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 138.364191][ T5402] netlink: 96 bytes leftover after parsing attributes in process `syz.5.395'. [ 138.471539][ T5400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 138.479838][ T5400] System zones: 1-12 [ 138.499232][ T5400] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 138.523504][ T5409] loop2: detected capacity change from 0 to 512 [ 138.530845][ T5409] journal_path: Lookup failure for './file1' [ 138.536880][ T5409] EXT4-fs: error: could not find journal device path [ 138.539015][ T5400] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #11: comm syz.4.394: corrupted inode contents [ 138.623174][ T5400] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #11: comm syz.4.394: mark_inode_dirty error [ 138.687469][ T5400] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.394: invalid indirect mapped block 1 (level 1) [ 138.725503][ T5414] loop5: detected capacity change from 0 to 512 [ 138.747075][ T5400] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #11: comm syz.4.394: corrupted inode contents [ 138.793516][ T5400] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 138.829621][ T5400] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #11: comm syz.4.394: corrupted inode contents [ 138.935070][ T5400] EXT4-fs error (device loop4): ext4_truncate:4311: inode #11: comm syz.4.394: mark_inode_dirty error [ 138.980734][ T5421] loop1: detected capacity change from 0 to 2048 [ 138.985534][ T5414] EXT4-fs (loop5): too many log groups per flexible block group [ 138.996585][ T5400] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 139.175383][ T5414] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 139.242898][ T5400] EXT4-fs (loop4): 1 truncate cleaned up [ 139.256413][ T5421] loop1: p1 < > p4 [ 139.286277][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.309250][ T5414] EXT4-fs (loop5): mount failed [ 139.377339][ T5421] loop1: p4 size 8388608 extends beyond EOD, truncated [ 139.881508][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 140.001148][ T5432] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.407'. [ 140.078659][ T5435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.409'. [ 140.259299][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 140.286405][ T5442] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.864207][ T5460] loop3: detected capacity change from 0 to 2048 [ 140.964824][ T5460] loop3: p1 < > p4 [ 140.972951][ T5460] loop3: p4 size 8388608 extends beyond EOD, truncated [ 141.075937][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 141.246310][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 141.246327][ T27] audit: type=1326 audit(1745230496.928:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.328864][ T27] audit: type=1326 audit(1745230496.928:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.419973][ T27] audit: type=1326 audit(1745230496.998:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.442544][ T5474] loop5: detected capacity change from 0 to 4096 [ 141.448082][ T5476] loop3: detected capacity change from 0 to 2048 [ 141.496482][ T27] audit: type=1326 audit(1745230496.998:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.497679][ T5474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 141.582671][ T5476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.625083][ T5484] loop1: detected capacity change from 0 to 512 [ 141.631601][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 141.631601][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 141.645206][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 141.653748][ T27] audit: type=1326 audit(1745230496.998:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.676351][ T27] audit: type=1326 audit(1745230497.008:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.685797][ T5484] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.429: inode #1: comm syz.1.429: iget: illegal inode # [ 141.699640][ T27] audit: type=1326 audit(1745230497.008:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.741390][ T27] audit: type=1326 audit(1745230497.008:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.764723][ T5484] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.429: error while reading EA inode 1 err=-117 [ 141.797705][ T27] audit: type=1326 audit(1745230497.008:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 141.829447][ T5484] EXT4-fs (loop1): 1 orphan inode deleted [ 141.837780][ T5484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.850886][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 141.881956][ T5489] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 141.917688][ T27] audit: type=1326 audit(1745230497.008:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 142.012149][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 142.116123][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 142.129431][ T5491] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 142.242869][ T5495] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 142.748116][ T5505] loop5: detected capacity change from 0 to 2048 [ 142.756965][ T5507] netlink: 'syz.1.439': attribute type 13 has an invalid length. [ 142.840190][ T5505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 142.864114][ T5505] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.110113][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 143.169564][ T5519] loop2: detected capacity change from 0 to 512 [ 143.217939][ T5519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.285378][ T5524] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.320017][ T5519] EXT4-fs (loop2): 1 truncate cleaned up [ 143.356644][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.701678][ T5529] loop3: detected capacity change from 0 to 2048 [ 143.764455][ T5529] loop3: p1 < > p4 [ 143.769789][ T5529] loop3: p4 size 8388608 extends beyond EOD, truncated [ 144.075209][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 144.574949][ T5553] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.678680][ T5566] netlink: 'syz.4.460': attribute type 13 has an invalid length. [ 145.736003][ T5569] loop1: detected capacity change from 0 to 512 [ 145.778968][ T5569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.872047][ T5569] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.970979][ T5569] EXT4-fs (loop1): 1 truncate cleaned up [ 145.976706][ T5569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.132372][ T5575] binfmt_misc: register: failed to install interpreter file ./file0 [ 146.330044][ T27] kauditd_printk_skb: 104 callbacks suppressed [ 146.330063][ T27] audit: type=1326 audit(1745230501.978:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 146.400517][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 146.454593][ T27] audit: type=1326 audit(1745230502.018:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 146.537545][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.545111][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.667803][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 146.667803][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 146.699184][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 147.513552][ T5600] loop1: detected capacity change from 0 to 256 [ 148.025935][ T5610] loop1: detected capacity change from 0 to 512 [ 148.074051][ T5610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.475: inode #1: comm syz.1.475: iget: illegal inode # [ 148.101524][ T5610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.475: error while reading EA inode 1 err=-117 [ 148.150694][ T5610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.475: inode #1: comm syz.1.475: iget: illegal inode # [ 148.184846][ T5610] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.475: error while reading EA inode 1 err=-117 [ 148.218231][ T5610] EXT4-fs (loop1): 1 orphan inode deleted [ 148.224628][ T5610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.513730][ T27] audit: type=1800 audit(1745230504.198:952): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file2" dev="loop1" ino=19 res=0 errno=0 [ 149.277956][ T5566] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.286419][ T5566] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.322120][ T5566] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.347875][ T5566] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.635421][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 149.654632][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.687806][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.723291][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.737874][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.836398][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 150.009189][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 150.115787][ T5624] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 150.593206][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 150.943106][ T5647] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.011795][ T5650] netlink: 'syz.3.491': attribute type 10 has an invalid length. [ 151.056652][ T5650] team0: Device hsr_slave_0 failed to register rx_handler [ 151.197945][ T5647] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.370304][ T5647] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.551044][ T5647] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.692863][ T27] audit: type=1326 audit(1745230507.378:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 151.716047][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 151.716047][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 151.742945][ T5681] loop3: detected capacity change from 0 to 128 [ 151.782784][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 151.837903][ T27] audit: type=1326 audit(1745230507.418:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 151.902043][ T27] audit: type=1326 audit(1745230507.418:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb631b85127 code=0x7ffc0000 [ 151.966016][ T27] audit: type=1326 audit(1745230507.418:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb631b2a359 code=0x7ffc0000 [ 151.994124][ T5647] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.066720][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.092302][ T27] audit: type=1326 audit(1745230507.418:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.115901][ T5647] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.127348][ T5681] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.176795][ T27] audit: type=1326 audit(1745230507.418:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.180420][ T5647] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.231304][ T27] audit: type=1326 audit(1745230507.448:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.292016][ T27] audit: type=1326 audit(1745230507.448:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.315271][ T27] audit: type=1326 audit(1745230507.448:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.338446][ T27] audit: type=1326 audit(1745230507.448:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 152.364954][ T5647] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.504750][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 152.617276][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.505'. [ 152.748634][ T5719] loop3: detected capacity change from 0 to 512 [ 152.869141][ T5719] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.506: bg 0: block 35: padding at end of block bitmap is not set [ 152.988079][ T5719] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 153.044015][ T5719] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.506: invalid indirect mapped block 4294967295 (level 1) [ 153.149600][ T5719] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.506: invalid indirect mapped block 4294967295 (level 2) [ 153.247286][ T5719] EXT4-fs (loop3): 1 truncate cleaned up [ 153.277404][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.375080][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 153.603102][ T5738] device ip6erspan0 entered promiscuous mode [ 153.699744][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 154.714505][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 154.728610][ T5754] loop2: detected capacity change from 0 to 512 [ 154.787482][ T5754] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 154.827995][ T5754] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 154.871775][ T5754] EXT4-fs (loop2): 1 truncate cleaned up [ 154.877489][ T5754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.939260][ T5754] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 155.025984][ T5738] lo speed is unknown, defaulting to 1000 [ 155.073026][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 155.236493][ T5768] device lo entered promiscuous mode [ 155.544011][ T5778] device pim6reg1 entered promiscuous mode [ 156.017449][ T5786] loop4: detected capacity change from 0 to 128 [ 156.154226][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.240406][ T5786] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.512345][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 156.631031][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 156.747873][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 156.747873][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 156.790578][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 156.953758][ T5816] loop3: detected capacity change from 0 to 2048 [ 156.976762][ T5816] EXT4-fs: Ignoring removed bh option [ 157.023932][ T5816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.048455][ T5816] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.092976][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 157.092993][ T27] audit: type=1326 audit(1745230512.778:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 157.198222][ T5816] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 157.227829][ T5816] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.227829][ T5816] [ 157.247892][ T27] audit: type=1326 audit(1745230512.818:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 157.297769][ T5816] EXT4-fs (loop3): Total free blocks count 0 [ 157.324167][ T27] audit: type=1326 audit(1745230512.818:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 157.356852][ T5816] EXT4-fs (loop3): Free/Dirty block details [ 157.397340][ T27] audit: type=1326 audit(1745230512.818:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 157.425632][ T5816] EXT4-fs (loop3): free_blocks=2415919104 [ 157.447830][ T5816] EXT4-fs (loop3): dirty_blocks=48 [ 157.457975][ T5829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 157.463233][ T5816] EXT4-fs (loop3): Block reservation details [ 157.464913][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 157.477829][ T27] audit: type=1326 audit(1745230512.818:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb631b8e169 code=0x7ffc0000 [ 157.513428][ T5816] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 157.579979][ T5837] loop4: detected capacity change from 0 to 256 [ 157.617890][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 157.648141][ T5832] vhci_hcd: connection closed [ 157.651173][ T4309] vhci_hcd: stop threads [ 157.660919][ T5667] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 157.681772][ T4309] vhci_hcd: release socket [ 157.720320][ T4309] vhci_hcd: disconnect device [ 157.770393][ T5839] loop1: detected capacity change from 0 to 2048 [ 157.859193][ T5839] loop1: p1 < > p4 [ 157.864130][ T5839] loop1: p4 size 8388608 extends beyond EOD, truncated [ 158.575653][ T5856] loop2: detected capacity change from 0 to 512 [ 158.655889][ T5856] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 158.693758][ T5856] EXT4-fs warning (device loop2): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.719049][ T5856] EXT4-fs (loop2): mount failed [ 158.752977][ T5866] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.010858][ T27] audit: type=1326 audit(1745230514.698:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 159.068830][ T27] audit: type=1326 audit(1745230514.698:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 159.167957][ T27] audit: type=1326 audit(1745230514.698:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 159.233174][ T5878] loop4: detected capacity change from 0 to 164 [ 159.257747][ T27] audit: type=1326 audit(1745230514.758:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 159.308749][ T5878] Unable to read rock-ridge attributes [ 159.345934][ T5878] Unable to read rock-ridge attributes [ 160.439046][ T5904] random: crng reseeded on system resumption [ 161.447020][ T5914] netlink: 'syz.4.584': attribute type 27 has an invalid length. [ 161.471477][ T5914] device lo left promiscuous mode [ 161.480181][ T5910] loop3: detected capacity change from 0 to 8192 [ 161.510480][ T5914] device batadv1 left promiscuous mode [ 161.540931][ T5914] device gtp0 left promiscuous mode [ 161.725583][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.743899][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.777280][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.787717][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 161.787717][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 161.806664][ T5915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.829219][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 162.030905][ T5923] syz.3.585[5923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.031019][ T5923] syz.3.585[5923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.119139][ T5927] syz.3.585[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.177767][ T5927] syz.3.585[5927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.211371][ T5912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.264143][ T5915] syz.4.584 (5915) used greatest stack depth: 19032 bytes left [ 162.287368][ T5912] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.305281][ T5912] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 162.327942][ T5912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.353051][ T5930] loop1: detected capacity change from 0 to 2048 [ 162.359759][ T5912] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.365764][ T5912] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 162.388352][ T5912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.402318][ T5912] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.409947][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.460047][ T5912] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 162.498111][ T5912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.557072][ T5912] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.564751][ T5912] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 162.570924][ T5935] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 162.572123][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 162.572138][ T27] audit: type=1800 audit(1745230518.258:1021): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.588" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 162.607392][ T5935] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.627222][ T5912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.638912][ T5912] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.660205][ T5912] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 162.669883][ T5912] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 162.694797][ T5912] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 162.706594][ T5912] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 162.811521][ T5937] loop5: detected capacity change from 0 to 8192 [ 162.860290][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 163.000322][ T5945] loop4: detected capacity change from 0 to 128 [ 163.220565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 163.479811][ T4250] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.862655][ T27] audit: type=1326 audit(1745230519.548:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 163.889049][ T5674] kworker/u4:21: attempt to access beyond end of device [ 163.889049][ T5674] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 163.908186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 163.951059][ T27] audit: type=1326 audit(1745230519.578:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 163.961632][ T5961] loop2: detected capacity change from 0 to 512 [ 163.975081][ T5953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.596'. [ 164.023411][ T27] audit: type=1326 audit(1745230519.578:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 164.059066][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.596'. [ 164.098666][ T27] audit: type=1326 audit(1745230519.578:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 164.133852][ T5961] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 164.222034][ T5961] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 164.249081][ T27] audit: type=1326 audit(1745230519.578:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 164.282148][ T27] audit: type=1326 audit(1745230519.578:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 164.304693][ T27] audit: type=1326 audit(1745230519.578:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 164.328245][ T5961] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.600: Failed to acquire dquot type 1 [ 164.347888][ T4250] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.365128][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 164.391225][ T5961] EXT4-fs (loop2): 1 truncate cleaned up [ 164.402544][ T5961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.411072][ T5969] loop1: detected capacity change from 0 to 128 [ 164.425057][ T5961] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.435847][ T4250] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.462909][ T5961] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 164.507984][ T4250] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.530412][ T5969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.606049][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 164.618085][ T5969] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.668109][ T4250] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.747786][ T4250] Bluetooth: hci5: command 0x0c1a tx timeout [ 164.793251][ T5969] 9pnet: Could not find request transport: r [ 164.898655][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 165.549084][ T4250] Bluetooth: hci0: command 0x0406 tx timeout [ 165.828365][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.614'. [ 166.357482][ T6004] lo speed is unknown, defaulting to 1000 [ 166.451694][ T6006] netlink: 56 bytes leftover after parsing attributes in process `syz.1.615'. [ 166.462212][ T4250] Bluetooth: hci1: command 0x0406 tx timeout [ 166.491395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.499772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.508098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.516401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.524725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.533100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.541462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 166.850092][ T4250] Bluetooth: hci2: command 0x0406 tx timeout [ 166.851618][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 166.856182][ T4250] Bluetooth: hci4: command 0x0406 tx timeout [ 166.869945][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 166.874291][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 166.877404][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 166.877404][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 166.969316][ T5977] loop5: detected capacity change from 0 to 1024 [ 166.973352][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 166.987852][ T5977] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 167.182478][ T6010] loop3: detected capacity change from 0 to 512 [ 167.261758][ T6010] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.617: Failed to acquire dquot type 1 [ 167.306313][ T6010] EXT4-fs (loop3): 1 truncate cleaned up [ 167.326732][ T6010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.375278][ T6010] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.432986][ T6010] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 167.537975][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 169.829401][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 169.846635][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.632'. [ 169.878960][ T27] kauditd_printk_skb: 98 callbacks suppressed [ 169.878977][ T27] audit: type=1326 audit(1745230525.568:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 169.910447][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 169.941040][ T6047] loop3: detected capacity change from 0 to 512 [ 169.955162][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.633'. [ 169.967887][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.633'. [ 169.977313][ T27] audit: type=1326 audit(1745230525.568:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.013192][ T27] audit: type=1326 audit(1745230525.598:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.049758][ T6047] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 170.070740][ T27] audit: type=1326 audit(1745230525.598:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.097796][ T27] audit: type=1326 audit(1745230525.598:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.124871][ T27] audit: type=1326 audit(1745230525.608:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.150961][ T27] audit: type=1326 audit(1745230525.608:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.174395][ T27] audit: type=1326 audit(1745230525.608:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.202735][ T27] audit: type=1326 audit(1745230525.608:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f930278e169 code=0x7ffc0000 [ 170.228826][ T6047] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.631: Failed to acquire dquot type 1 [ 170.277889][ T6047] EXT4-fs (loop3): 1 truncate cleaned up [ 170.287807][ T6047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.317350][ T6047] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.363930][ T6047] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 170.488045][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 170.952267][ T6079] loop5: detected capacity change from 0 to 128 [ 170.979965][ T6079] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 171.001479][ T6079] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.130243][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 171.626004][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.646'. [ 171.726482][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 171.867826][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 171.867826][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 171.979730][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 172.218343][ T6095] loop3: detected capacity change from 0 to 512 [ 172.293208][ T6095] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.649: Failed to acquire dquot type 1 [ 172.328853][ T6095] EXT4-fs (loop3): 1 truncate cleaned up [ 172.334581][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.403615][ T6095] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.484850][ T6095] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 172.604051][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 172.843615][ T6104] loop4: detected capacity change from 0 to 8192 [ 172.893415][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.920054][ T6104] FAT-fs (loop4): Filesystem has been set read-only [ 172.926737][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.957722][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.966891][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.998058][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.138316][ T6115] loop2: detected capacity change from 0 to 512 [ 173.362874][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.539974][ T6115] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 173.554959][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.651122][ T6115] EXT4-fs (loop2): 1 truncate cleaned up [ 173.656833][ T6115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.672785][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.685048][ T6115] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.657: Logical block already allocated [ 173.698537][ T6104] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.721287][ T6115] EXT4-fs (loop2): Remounting filesystem read-only [ 173.734779][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 173.766008][ T6121] netlink: 2 bytes leftover after parsing attributes in process `syz.3.658'. [ 173.786371][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 173.804974][ T6104] syz.4.653 (6104) used greatest stack depth: 18416 bytes left [ 173.824045][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.659'. [ 173.877775][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.907853][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.925793][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.947711][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.992214][ T6123] loop2: detected capacity change from 0 to 2048 [ 174.092004][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.133951][ T6111] lo speed is unknown, defaulting to 1000 [ 174.246901][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 174.639366][ T6139] loop4: detected capacity change from 0 to 512 [ 175.270930][ T6139] __quota_error: 94 callbacks suppressed [ 175.270952][ T6139] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 175.307813][ T6139] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 175.341235][ T6139] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.666: Failed to acquire dquot type 1 [ 175.362596][ T6139] EXT4-fs (loop4): 1 truncate cleaned up [ 175.377149][ T6139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.406863][ T6139] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.521325][ T27] audit: type=1326 audit(1745230531.208:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4638cad0 code=0x7ffc0000 [ 175.610000][ T27] audit: type=1326 audit(1745230531.208:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7d4638ceb7 code=0x7ffc0000 [ 175.634014][ T6139] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 175.698786][ T27] audit: type=1326 audit(1745230531.208:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d4638cad0 code=0x7ffc0000 [ 175.752144][ T27] audit: type=1326 audit(1745230531.208:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d4638dd6b code=0x7ffc0000 [ 175.859020][ T27] audit: type=1326 audit(1745230531.208:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d4638cdca code=0x7ffc0000 [ 175.885368][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 175.917713][ T27] audit: type=1326 audit(1745230531.208:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 175.988848][ T27] audit: type=1326 audit(1745230531.238:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 176.147681][ T27] audit: type=1326 audit(1745230531.348:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 176.781336][ T6152] __nla_validate_parse: 1 callbacks suppressed [ 176.781353][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 176.870375][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 176.903989][ T6164] syz.4.674[6164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.904100][ T6164] syz.4.674[6164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.907951][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 176.907951][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 177.062053][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 177.198578][ T6173] netlink: 'syz.5.677': attribute type 21 has an invalid length. [ 177.639827][ T6183] loop5: detected capacity change from 0 to 512 [ 177.695468][ T6183] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.681: Failed to acquire dquot type 1 [ 177.732965][ T6183] EXT4-fs (loop5): 1 truncate cleaned up [ 177.758731][ T6183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.777787][ T6183] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.857759][ T6183] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 178.009749][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 178.693161][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 178.752637][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 178.916051][ T6206] loop2: detected capacity change from 0 to 1024 [ 179.572424][ T6220] loop4: detected capacity change from 0 to 512 [ 179.620227][ T6220] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.697: Failed to acquire dquot type 1 [ 179.648989][ T6220] EXT4-fs (loop4): 1 truncate cleaned up [ 179.654766][ T6220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.833187][ T6220] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.886094][ T6220] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 179.953912][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 179.964619][ T6226] IPVS: Error joining to the multicast group [ 179.981462][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 180.824511][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.702'. [ 180.835405][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'. [ 181.347764][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 181.347783][ T27] audit: type=1326 audit(1745230537.028:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 181.504521][ T27] audit: type=1326 audit(1745230537.028:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 181.643966][ T27] audit: type=1326 audit(1745230537.028:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 181.766084][ T27] audit: type=1326 audit(1745230537.028:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 181.788496][ T27] audit: type=1326 audit(1745230537.028:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4638e169 code=0x7ffc0000 [ 181.882359][ T6256] 9pnet: p9_errstr2errno: server reported unknown error [ 181.888928][ T6255] loop2: detected capacity change from 0 to 512 [ 181.946402][ T4250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.949432][ T6255] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 181.957363][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 181.957363][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 181.970445][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.977906][ T6255] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 181.994752][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.003584][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 182.012324][ T6255] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.711: Failed to acquire dquot type 1 [ 182.024221][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.038276][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 182.045688][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.067953][ T6255] EXT4-fs (loop2): 1 truncate cleaned up [ 182.073673][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.088385][ T6255] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.112659][ T6255] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 182.255558][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 182.403364][ T6257] lo speed is unknown, defaulting to 1000 [ 183.092030][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 183.104707][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 183.215630][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 183.353320][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.391431][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.431374][ T6257] device bridge_slave_0 entered promiscuous mode [ 183.456685][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.479653][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.496894][ T6257] device bridge_slave_1 entered promiscuous mode [ 183.561304][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.592871][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.620074][ T6284] bridge: RTM_NEWNEIGH with invalid ether address [ 183.653372][ T6257] team0: Port device team_slave_0 added [ 183.683488][ T6257] team0: Port device team_slave_1 added [ 183.757962][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.770065][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.796789][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.809901][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.816880][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.843137][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.989451][ T6257] device hsr_slave_0 entered promiscuous mode [ 184.076906][ T6257] device hsr_slave_1 entered promiscuous mode [ 184.130289][ T6257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.155455][ T6257] Cannot create hsr debugfs directory [ 184.161275][ T4258] Bluetooth: hci6: command 0x0409 tx timeout [ 184.402841][ T6293] loop5: detected capacity change from 0 to 512 [ 184.542608][ T6293] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 184.583952][ T6293] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 184.629537][ T6293] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.724: Failed to acquire dquot type 1 [ 184.683133][ T6293] EXT4-fs (loop5): 1 truncate cleaned up [ 184.708884][ T6293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 184.757894][ T6293] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.812086][ T6293] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 185.419924][ T6257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.447975][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 185.463401][ T6257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.486067][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 185.496357][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 185.513054][ T6257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.543124][ T6257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.554829][ T6303] loop5: detected capacity change from 0 to 2048 [ 185.562786][ T6303] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.621842][ T6303] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.695133][ T6303] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.727: iget: bogus i_mode (355) [ 185.764236][ T6303] EXT4-fs (loop5): Remounting filesystem read-only [ 185.833808][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.875399][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.886919][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.899950][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.925776][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.941973][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.968629][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.975816][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.991254][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.004257][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 186.016798][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.040092][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.060995][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.068185][ T5699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.127215][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.137330][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.188494][ T4258] Bluetooth: hci6: command 0x041b tx timeout [ 186.198500][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.214852][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.233006][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.294573][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.337015][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.346624][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.371906][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.386501][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.397967][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.408867][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.571182][ T6321] netlink: 116 bytes leftover after parsing attributes in process `syz.5.733'. [ 186.932329][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.968841][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.998453][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 186.998453][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 187.029099][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.055027][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 187.315775][ T6333] loop5: detected capacity change from 0 to 512 [ 187.532209][ T6333] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 187.558121][ T6333] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 187.609588][ T6333] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.737: Failed to acquire dquot type 1 [ 187.688885][ T6333] EXT4-fs (loop5): 1 truncate cleaned up [ 187.708248][ T6333] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.830218][ T6333] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.841667][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 187.969032][ T6333] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 188.075046][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 188.218149][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 188.268077][ T4258] Bluetooth: hci6: command 0x040f tx timeout [ 188.469773][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.485029][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.598890][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.620688][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.634274][ T6352] loop5: detected capacity change from 0 to 1024 [ 188.650448][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.669978][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.687158][ T6257] device veth0_vlan entered promiscuous mode [ 188.713965][ T6352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.716746][ T6257] device veth1_vlan entered promiscuous mode [ 188.780346][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.742'. [ 188.797728][ T6352] device bridge_slave_1 left promiscuous mode [ 188.804118][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.816010][ T6352] device bridge_slave_0 left promiscuous mode [ 188.832973][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.911885][ T27] audit: type=1326 audit(1745230544.598:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 188.955021][ T27] audit: type=1326 audit(1745230544.598:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 188.988055][ T27] audit: type=1326 audit(1745230544.598:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.038802][ T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.049272][ T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.057247][ T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.063641][ T27] audit: type=1326 audit(1745230544.598:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.065418][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.096684][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 189.105910][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.117224][ T27] audit: type=1326 audit(1745230544.598:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.139929][ T27] audit: type=1326 audit(1745230544.598:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.176954][ T6357] netlink: 'syz.5.742': attribute type 10 has an invalid length. [ 189.256056][ T6357] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 189.285102][ T27] audit: type=1326 audit(1745230544.968:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.318344][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.327228][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.355518][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.370549][ T27] audit: type=1326 audit(1745230545.018:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc6298e169 code=0x7ffc0000 [ 189.398995][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.423023][ T6257] device veth0_macvtap entered promiscuous mode [ 189.488857][ T6257] device veth1_macvtap entered promiscuous mode [ 189.515262][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.533958][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.576816][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.606964][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.623687][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.645832][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.664285][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 189.673585][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.723591][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.751390][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.960122][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.011508][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.022367][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.033102][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.044903][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.053346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.085252][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.138837][ T6257] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.155193][ T6257] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.186472][ T6257] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.214612][ T6257] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.241498][ T6360] lo speed is unknown, defaulting to 1000 [ 190.349393][ T48] Bluetooth: hci6: command 0x0419 tx timeout [ 190.612214][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 190.714898][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 191.116859][ T5667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.138827][ T5667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.147897][ T48] Bluetooth: hci7: command 0x0409 tx timeout [ 191.228603][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.281604][ T5708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.304949][ T5708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.373396][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 191.405281][ T6398] loop5: detected capacity change from 0 to 512 [ 191.456362][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.528462][ T6398] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.752: Failed to acquire dquot type 1 [ 191.645411][ T6398] EXT4-fs (loop5): 1 truncate cleaned up [ 191.651519][ T6398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 191.704093][ T6404] loop2: detected capacity change from 0 to 8192 [ 191.711377][ T6398] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.799611][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.806840][ T6398] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 191.828328][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.836762][ T6360] device bridge_slave_0 entered promiscuous mode [ 191.846888][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.854315][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.863984][ T6360] device bridge_slave_1 entered promiscuous mode [ 191.892366][ T6404] syz.2.753[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.892478][ T6404] syz.2.753[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.969863][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 191.971234][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.032894][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 192.032894][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 192.070624][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.090522][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 192.224619][ T6418] loop5: detected capacity change from 0 to 1024 [ 192.246130][ T6360] team0: Port device team_slave_0 added [ 192.290279][ T6360] team0: Port device team_slave_1 added [ 192.330720][ T6418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 192.347987][ T6418] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.392005][ T6427] device syz_tun entered promiscuous mode [ 192.409170][ T6427] device batadv_slave_0 entered promiscuous mode [ 192.499714][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.506716][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.539017][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 192.737710][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.818536][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 192.841884][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.852740][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.957305][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.209926][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.759'. [ 193.228650][ T48] Bluetooth: hci7: command 0x041b tx timeout [ 193.546799][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.759'. [ 193.700076][ T6360] device hsr_slave_0 entered promiscuous mode [ 193.743315][ T6360] device hsr_slave_1 entered promiscuous mode [ 193.755807][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.777701][ T6360] Cannot create hsr debugfs directory [ 193.934795][ T6452] loop2: detected capacity change from 0 to 512 [ 194.025653][ T6452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.064695][ T6452] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.095500][ T6456] loop5: detected capacity change from 0 to 512 [ 194.207122][ T6456] __quota_error: 4 callbacks suppressed [ 194.207144][ T6456] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 194.275110][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276901][ T6456] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 194.281484][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313026][ T6360] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.340607][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 194.361040][ T6360] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.377984][ T6456] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.765: Failed to acquire dquot type 1 [ 194.404913][ T6456] EXT4-fs (loop5): 1 truncate cleaned up [ 194.424208][ T6456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.427855][ T6360] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.455031][ T6456] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.469106][ T6360] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.517038][ T6456] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 194.668004][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 194.715417][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.768375][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.798615][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.828205][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.878238][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.898277][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.927984][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.935248][ T5682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.954258][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.978257][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.009099][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.016262][ T5682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.065700][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.080708][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.155883][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.233734][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.307814][ T48] Bluetooth: hci7: command 0x040f tx timeout [ 195.317880][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.364029][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.413859][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.436676][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.486362][ T6489] loop6: detected capacity change from 0 to 512 [ 195.493231][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.509947][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.534512][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.543495][ T6489] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.558571][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.577856][ T6489] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 195.588822][ T6360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.615878][ T6489] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 195.654239][ T6489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 195.697816][ T6489] System zones: 0-2, 18-18, 34-34 [ 195.742927][ T6489] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 196.016514][ T6489] EXT4-fs (loop6): 1 truncate cleaned up [ 196.209124][ T6489] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 196.480839][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.775'. [ 196.490022][ T6489] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.774: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 196.548660][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 196.575969][ T6257] EXT4-fs (loop6): unmounting filesystem. [ 196.893121][ T6512] loop5: detected capacity change from 0 to 512 [ 196.997347][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.031505][ T6512] Quota error (device loop5): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 197.055839][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.068276][ T4851] kmmpd-loop0: attempt to access beyond end of device [ 197.068276][ T4851] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 197.124629][ T6512] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 197.146062][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.148365][ T4851] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 197.186268][ T6512] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.779: Failed to acquire dquot type 1 [ 197.249406][ T6512] EXT4-fs (loop5): 1 truncate cleaned up [ 197.255134][ T6512] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.285533][ T6512] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.377088][ T6512] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 197.388140][ T48] Bluetooth: hci7: command 0x0419 tx timeout [ 197.560612][ T5090] EXT4-fs (loop5): unmounting filesystem. [ 197.723166][ T4258] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 197.779831][ T4258] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 197.788511][ T4258] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 197.797185][ T4258] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 197.805477][ T4258] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 197.815018][ T4258] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 197.921864][ T6541] loop6: detected capacity change from 0 to 1024 [ 197.975986][ T6541] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 198.254732][ T6535] lo speed is unknown, defaulting to 1000 [ 198.336057][ T6554] loop2: detected capacity change from 0 to 128 [ 198.432885][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.480012][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.528711][ T6554] syz.2.788: attempt to access beyond end of device [ 198.528711][ T6554] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 198.637624][ T6541] EXT4-fs (loop6): shut down requested (1) [ 198.659513][ T6360] device veth0_vlan entered promiscuous mode [ 198.665239][ T6541] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 198.684131][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.708983][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.855146][ T5708] kworker/u4:47: attempt to access beyond end of device [ 198.855146][ T5708] loop2: rw=1, sector=145, nr_sectors = 34 limit=128 [ 198.981649][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.995441][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.097238][ T6360] device veth1_vlan entered promiscuous mode [ 199.214632][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.367030][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.789'. [ 199.430076][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.442099][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'. [ 199.554958][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.564259][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.583327][ T6360] device veth0_macvtap entered promiscuous mode [ 199.613240][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 199.655184][ T6360] device veth1_macvtap entered promiscuous mode [ 199.736710][ T6257] EXT4-fs (loop6): unmounting filesystem. [ 199.814414][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.854994][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.868042][ T4258] Bluetooth: hci8: command 0x0409 tx timeout [ 199.967904][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.027628][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.033353][ T6580] capability: warning: `syz.5.793' uses 32-bit capabilities (legacy support in use) [ 200.047014][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.081028][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.118724][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.246221][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.278795][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.304604][ T6585] loop6: detected capacity change from 0 to 512 [ 200.327681][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.347764][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.367651][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.391696][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.437950][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.455619][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.465998][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.485268][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.494535][ T6585] Quota error (device loop6): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 200.516316][ T6585] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 200.537506][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.572752][ T6585] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.794: Failed to acquire dquot type 1 [ 200.625963][ T6585] EXT4-fs (loop6): 1 truncate cleaned up [ 200.657709][ T6585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 200.668015][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.676428][ T6585] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.688531][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.696874][ T6535] device bridge_slave_0 entered promiscuous mode [ 200.724292][ T6360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.750436][ T6585] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 200.767679][ T6360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.797746][ T6360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.806515][ T6360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.889577][ T6257] EXT4-fs (loop6): unmounting filesystem. [ 200.974259][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.006256][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.033755][ T6535] device bridge_slave_1 entered promiscuous mode [ 201.131853][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.220044][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.349431][ T6535] team0: Port device team_slave_0 added [ 201.358594][ T5699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.367248][ T5699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.415690][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.430502][ T6535] team0: Port device team_slave_1 added [ 201.467731][ T4258] Bluetooth: hci4: command 0x0406 tx timeout [ 201.473877][ T4250] Bluetooth: hci0: command 0x0406 tx timeout [ 201.480468][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 201.480489][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 201.487758][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 201.511557][ T27] audit: type=1326 audit(1745230557.198:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 201.652271][ T27] audit: type=1326 audit(1745230557.198:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 201.659674][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.751638][ T27] audit: type=1326 audit(1745230557.198:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 201.792751][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.840069][ T27] audit: type=1326 audit(1745230557.198:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 201.873247][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.949936][ T4264] Bluetooth: hci8: command 0x041b tx timeout [ 201.962554][ T27] audit: type=1326 audit(1745230557.198:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 201.971576][ T5699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.988490][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.067717][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.071860][ T5699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.118661][ T4851] ------------[ cut here ]------------ [ 202.124185][ T4851] kernel BUG at fs/buffer.c:2666! [ 202.309247][ T27] audit: type=1326 audit(1745230557.198:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 202.437767][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.802'. [ 202.462224][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.466121][ T27] audit: type=1326 audit(1745230557.228:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 202.501105][ T4851] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 202.507234][ T4851] CPU: 1 PID: 4851 Comm: kmmpd-loop0 Not tainted 6.1.134-syzkaller #0 [ 202.515430][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.525569][ T4851] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 202.531018][ T4851] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 6a e0 ff e9 b1 fe ff ff e8 17 0b 89 ff 0f 0b e8 10 0b 89 ff <0f> 0b e8 09 0b 89 ff 0f 0b e8 02 0b 89 ff 0f 0b e8 fb 0a 89 ff 0f [ 202.550665][ T4851] RSP: 0018:ffffc9000e707c40 EFLAGS: 00010293 [ 202.556765][ T4851] RAX: ffffffff82014190 RBX: 0000000000000000 RCX: ffff888020a73b80 [ 202.564765][ T4851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.572760][ T4851] RBP: ffffc9000e707d50 R08: ffffffff82013d6d R09: ffffed100e841bb4 [ 202.580747][ T4851] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e841bb3 [ 202.588819][ T4851] R13: ffff88807420dd98 R14: 0000000000000000 R15: 0000000000003801 [ 202.596806][ T4851] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 202.605744][ T4851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.612332][ T4851] CR2: 000020000002e000 CR3: 0000000046e9e000 CR4: 00000000003506e0 [ 202.620337][ T4851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.628329][ T4851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.636319][ T4851] Call Trace: [ 202.639602][ T4851] [ 202.642541][ T4851] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 202.648013][ T4851] write_mmp_block_thawed+0x3b6/0x5a0 [ 202.653402][ T4851] ? read_mmp_block+0x7e0/0x7e0 [ 202.658264][ T4851] ? update_process_times+0x1b0/0x1b0 [ 202.663641][ T4851] ? kmmpd+0x40c/0xa70 [ 202.667722][ T4851] write_mmp_block+0x13f/0x390 [ 202.672501][ T4851] kmmpd+0x40c/0xa70 [ 202.676415][ T4851] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 202.681978][ T4851] ? __kthread_parkme+0x168/0x1c0 [ 202.687017][ T4851] kthread+0x28d/0x320 [ 202.691098][ T4851] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 202.696657][ T4851] ? kthread_blkcg+0xd0/0xd0 [ 202.701256][ T4851] ret_from_fork+0x1f/0x30 [ 202.705689][ T4851] [ 202.708707][ T4851] Modules linked in: [ 202.764891][ T27] audit: type=1326 audit(1745230557.228:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f802738e169 code=0x7ffc0000 [ 202.790031][ T4851] ---[ end trace 0000000000000000 ]--- [ 202.795530][ T4851] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 202.802305][ T4851] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 6a e0 ff e9 b1 fe ff ff e8 17 0b 89 ff 0f 0b e8 10 0b 89 ff <0f> 0b e8 09 0b 89 ff 0f 0b e8 02 0b 89 ff 0f 0b e8 fb 0a 89 ff 0f [ 202.836208][ T4851] RSP: 0018:ffffc9000e707c40 EFLAGS: 00010293 [ 202.843056][ T4851] RAX: ffffffff82014190 RBX: 0000000000000000 RCX: ffff888020a73b80 [ 202.851269][ T4851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.859313][ T4851] RBP: ffffc9000e707d50 R08: ffffffff82013d6d R09: ffffed100e841bb4 [ 202.867366][ T4851] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e841bb3 [ 202.875444][ T4851] R13: ffff88807420dd98 R14: 0000000000000000 R15: 0000000000003801 [ 202.883519][ T4851] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 202.892570][ T4851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.899260][ T4851] CR2: 0000200000030000 CR3: 000000005803c000 CR4: 00000000003506e0 [ 202.907273][ T4851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.915569][ T4851] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.924304][ T4851] Kernel panic - not syncing: Fatal exception [ 202.930527][ T4851] Kernel Offset: disabled [ 202.934854][ T4851] Rebooting in 86400 seconds..