last executing test programs: 11m53.102009306s ago: executing program 32 (id=759): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e22, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b83805ae96bd206d06df368ed2a90000e5af716eb542867bbf65fd52cc9f0ab662be49a4d16e7a675816ddb6d2841f955a89bdf94e99b112dc9a3963a0efb19980b671ddb4d3cb9743e48796fe7f856e284cd540732b82b773a38f5fecda200a635c5b300b9884988e4ca7fcf67dd6c661", 0x91}], 0x1, &(0x7f00000010c0)}, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) fsopen(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x4, 0x1, 0x0, 0xd, 0xcc7, 0x8008, 0x800007, 0xa, 0xff, 0x2, 0x1, 0x3, 0x1100004, 0x6, 0x2, 0x8, 0x1a449, 0x43, 0x40000003, 0x89, 0x8002, 0xf27, 0x6, 0x800b, 0x4, 0x5, 0x8, 0x8, 0x10000, 0xfffffff7]}) 11m40.351719065s ago: executing program 33 (id=778): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x10000000000000a0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xe4db, 0x0, 0x10000}, &(0x7f0000000700)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x5, &(0x7f0000000100)={0x0, 0x24}, &(0x7f0000000300)) socket$l2tp6(0xa, 0x2, 0x73) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 11m18.199049518s ago: executing program 34 (id=816): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 8m47.894418676s ago: executing program 35 (id=1234): r0 = syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[], [{@obj_type={'obj_type', 0x3d, '!(%+\\'}}]}, 0xfc, 0x580, &(0x7f0000000680)="$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") pivot_root(&(0x7f00000002c0)='.\x00', &(0x7f0000001600)='./file1\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x811, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d30ae411e90dd9a154c189000077e04cae803e00"/45], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000340)={[{@usrquota}], [{@fowner_gt={'fowner>', r2}}, {@smackfshat={'smackfshat', 0x3d, '%\\/%!['}}, {@smackfshat={'smackfshat', 0x3d, '%-'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 8m45.808115127s ago: executing program 36 (id=1238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0, 0x50, 0x1}) r1 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x64e4, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 5m39.955031288s ago: executing program 2 (id=1878): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x410281, 0x129) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x680140, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioprio_set$pid(0x3, 0x0, 0x2004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") 5m39.001526924s ago: executing program 2 (id=1882): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000000)={0x0}) ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 5m37.6432292s ago: executing program 2 (id=1884): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) fstat(0xffffffffffffffff, 0x0) 5m37.261363502s ago: executing program 2 (id=1889): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') 5m36.739840739s ago: executing program 2 (id=1893): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0xec00000000000000}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@nobh}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d7, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143042, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 5m35.648658898s ago: executing program 2 (id=1897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 5m20.462385925s ago: executing program 37 (id=1897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 2m40.234265421s ago: executing program 9 (id=2699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0xd51, &(0x7f0000000240)={0x0, 0x731, 0x40, 0x0, 0x2ec}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 2m39.884655831s ago: executing program 9 (id=2701): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2m38.980570221s ago: executing program 9 (id=2712): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000001}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m38.682499859s ago: executing program 9 (id=2716): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x1, {0x10, 0x3, 0x3}}, 0x14) syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 2m37.464302384s ago: executing program 9 (id=2723): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") 2m35.085569609s ago: executing program 9 (id=2733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x28, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m34.445241026s ago: executing program 38 (id=2733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x28, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m18.71208586s ago: executing program 3 (id=2843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 2m17.789256785s ago: executing program 3 (id=2850): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") 2m16.612491794s ago: executing program 3 (id=2857): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m16.324979356s ago: executing program 3 (id=2860): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/175, 0xaf, 0xffff, 0x0) 2m16.004902384s ago: executing program 3 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="790a09002d0cd2ff03580bdc86dd30e9768f72fd13e7620b85d7ae377c7f9862a5b067f724e36934f41e107ef5000000000000000000", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m15.712549357s ago: executing program 3 (id=2867): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) 2m8.668920765s ago: executing program 5 (id=2914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xfffc, 0x2, 0x1, 0x8, 0x2, 0x1, 0x2, 0x8001}, 0x20) 2m7.655211776s ago: executing program 5 (id=2920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.4223917s ago: executing program 5 (id=2922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) 2m7.021438325s ago: executing program 5 (id=2925): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) fcntl$notify(r2, 0x402, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m6.560745397s ago: executing program 5 (id=2927): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed00c1, &(0x7f00000000c0)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@auto_da_alloc}, {@norecovery}, {@nodiscard}]}, 0xfe, 0x47d, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave:7-0']) 2m5.992680031s ago: executing program 5 (id=2931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m0.549865584s ago: executing program 39 (id=2867): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) 1m50.817120446s ago: executing program 40 (id=2931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.365385527s ago: executing program 8 (id=3855): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r2, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r1, 0x1, 0x8, 0x2000402) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.948824719s ago: executing program 0 (id=3860): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ptrace$getregset(0x4212, 0x0, 0x201, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.472889589s ago: executing program 7 (id=3867): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x217, &(0x7f0000000600), 0x1, 0x586, &(0x7f0000009ec0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.394247627s ago: executing program 4 (id=3868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.304569201s ago: executing program 6 (id=3869): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) setresuid(0x0, 0xee00, 0x0) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 2.21692583s ago: executing program 1 (id=3870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.065998649s ago: executing program 8 (id=3871): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.92866469s ago: executing program 1 (id=3872): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="8c874b16bd", 0x5}], 0x1}, 0x48015) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000200)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4a}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 1.928442299s ago: executing program 6 (id=3873): syz_clone(0xc535c280, 0x0, 0xffffffffffffffbb, 0xfffffffffffffffd, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.92828287s ago: executing program 0 (id=3874): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x5c, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffffffffffe9e, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x72, 0x8, 0x10, 0x80}}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xffff}, {0x10, 0x0, 0x1, "f18d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 1.847698529s ago: executing program 4 (id=3875): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) 1.834655741s ago: executing program 7 (id=3876): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.703267632s ago: executing program 1 (id=3877): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) flistxattr(0xffffffffffffffff, 0x0, 0x0) 1.57336005s ago: executing program 6 (id=3878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xa8, 0x0, 0x9, 0xd02, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xbffd}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000540)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x10102, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b80)=[0x0], 0x0, 0x28, 0x0, 0x0, 0x10, &(0x7f0000000c00), 0x0, 0x0, 0xba, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000e00), 0x604040, 0x0) memfd_secret(0x7b50005c124bc59b) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.485696001s ago: executing program 0 (id=3879): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x40000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) 1.420845353s ago: executing program 1 (id=3880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000041400000caca6408f62ba9375ba7ce7d0232070c4929c34c4cddd0a4dddc61d0b8165d3b6f6faae88eb313039cfdd9dfd412789828293a1b0c9eefd30bfd5008ee95bc302955202999e22c92f69b97b92c0427fb5450923e11119f6c7ada2db43cb2b6ec75372a475c", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000040000008500000083000000bf0900000000000055090100000000009500000000000000959373912acd781103005f9448c951000000000000008500000044000000bf91000062d6ab7d5aee579bec847752d7fac400000000b7020000010000008500000001000000b7000000000000007f00000000000000bc37d70b6aa777e1c651eb484ea09382ebf2c9dcbfb4fd40bc573e9f18b271210f59a1f8ada30fe7f6596c8e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x2000200000a95c, 0x2, 0x9, 0x5, 0x48d1, 0x1, 0x800000e2}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) memfd_create(&(0x7f0000000080)='GPL\x00', 0x4) r9 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) r11 = msgget$private(0x0, 0x3ac) msgrcv(r11, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x95, 0x800) 1.420688333s ago: executing program 4 (id=3881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.365739274s ago: executing program 7 (id=3882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) brk(0x800000000000) 1.327525538s ago: executing program 8 (id=3883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 1.248871707s ago: executing program 6 (id=3884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.201659077s ago: executing program 0 (id=3885): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 1.189430852s ago: executing program 1 (id=3886): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@grpid}, {@user_xattr}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) 1.152289006s ago: executing program 4 (id=3887): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') 1.060766634s ago: executing program 8 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.049875573s ago: executing program 7 (id=3889): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 953.177357ms ago: executing program 4 (id=3890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 828.318657ms ago: executing program 0 (id=3891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000180)=""/175, &(0x7f0000000040)=0xaf) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 827.710384ms ago: executing program 7 (id=3892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") 470.509478ms ago: executing program 8 (id=3893): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x5c, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffffffffffe9e, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xa}, {0x72, 0x8, 0x10, 0x80}}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xffff}, {0x10, 0x0, 0x1, "f18d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 469.401942ms ago: executing program 6 (id=3894): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40005}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3) 446.182513ms ago: executing program 4 (id=3895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 256.850404ms ago: executing program 1 (id=3896): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_gettime(r0, &(0x7f0000000000)) 210.510285ms ago: executing program 7 (id=3897): getpid() unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000037091d70e941243689c6b2b872df6d4fadcc868719489ded5a029db6003f9afd781807015f8004002f80f0db918f87e35912e06c017cff92ec0590dc8a122c06319ca469a47583317ca2b151e26b26705c6448b2fba12f5533fd239b203a2f514964e0c94ecf4bb9252f9351daad", @ANYRES32=r3, @ANYBLOB="000abd7902d445db775fd1a036ae136db0f1c96cfebf6a4203c8e89e4b31d208e65cd852ddaa57b39a5f2a9838db37be4b598613217d160e7b2876bc2742d307561cd086aa21559c7ed367a32cdd2cf3cd23bd183a8b8294b48c6aa08a68a58469673f51e266914b83644b57f19bfe026f0f7a3ada59879a70f04e15599b40a1cd30b33e5e6df6e42e833d4a05ee97eef1af4754069a656fbc99c7b32623d320c646c3c4c8dc43c5d494a598c6eacaec621e1dde76ef1c6b4c1f6e60f4bde384f3315b"], 0x47c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, 0x0, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "ff9ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600001000"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x0, '\x00', r7, r2, 0x3, 0x5, 0x3}, 0x50) 121.545942ms ago: executing program 0 (id=3898): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x40000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) 8.78441ms ago: executing program 6 (id=3899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 0s ago: executing program 8 (id=3900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) kernel console output (not intermixed with test programs): removed. [ 1009.433938][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.441900][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1009.484727][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.496458][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.501910][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1009.518973][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1009.535488][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1009.717062][T16655] lo speed is unknown, defaulting to 1000 [ 1009.785934][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 1010.263334][T16668] loop4: detected capacity change from 0 to 512 [ 1010.352303][T16668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.436667][T16668] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.464824][T16675] tipc: Enabled bearer , priority 0 [ 1010.610227][T16669] tipc: Disabling bearer [ 1010.663859][T11749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.926754][T16680] syzkaller1: entered promiscuous mode [ 1010.947597][T16680] syzkaller1: entered allmulticast mode [ 1010.970401][T16655] chnl_net:caif_netlink_parms(): no params data found [ 1011.464457][T16697] loop6: detected capacity change from 0 to 256 [ 1011.571935][T16697] FAT-fs (loop6): Directory bread(block 64) failed [ 1011.587986][ T5842] Bluetooth: hci4: command tx timeout [ 1011.626365][T16697] FAT-fs (loop6): Directory bread(block 65) failed [ 1011.655719][T16697] FAT-fs (loop6): Directory bread(block 66) failed [ 1011.662420][T16697] FAT-fs (loop6): Directory bread(block 67) failed [ 1011.698473][T16655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.711441][T16697] FAT-fs (loop6): Directory bread(block 68) failed [ 1011.724918][T16697] FAT-fs (loop6): Directory bread(block 69) failed [ 1011.736813][T16655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.744115][T16697] FAT-fs (loop6): Directory bread(block 70) failed [ 1011.744258][T16655] bridge_slave_0: entered allmulticast mode [ 1011.761392][T16697] FAT-fs (loop6): Directory bread(block 71) failed [ 1011.796837][T16697] FAT-fs (loop6): Directory bread(block 72) failed [ 1011.817748][T16655] bridge_slave_0: entered promiscuous mode [ 1011.817749][T16697] FAT-fs (loop6): Directory bread(block 73) failed [ 1011.827488][T16655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.895355][T16655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.909150][T16655] bridge_slave_1: entered allmulticast mode [ 1011.937744][T16655] bridge_slave_1: entered promiscuous mode [ 1012.070001][T16712] loop1: detected capacity change from 0 to 1024 [ 1012.092548][T16712] EXT4-fs: Ignoring removed nobh option [ 1012.110634][T16712] EXT4-fs: Ignoring removed bh option [ 1012.253435][T16712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.877596][T16718] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1012.887384][T16718] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1012.897606][T16718] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1012.952851][T16655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.027152][T16655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.179699][T16052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.317321][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.327156][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'. [ 1013.345295][T16721] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.385255][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.428301][T16721] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.455371][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.522456][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1013.522484][ T30] audit: type=1326 audit(1761718003.234:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1013.563460][T16655] team0: Port device team_slave_0 added [ 1013.603912][T16655] team0: Port device team_slave_1 added [ 1013.650677][ T30] audit: type=1326 audit(1761718003.284:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1013.673810][ T5842] Bluetooth: hci4: command tx timeout [ 1013.709326][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.744777][ T30] audit: type=1326 audit(1761718003.284:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1013.764448][T16721] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.839936][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.846281][ T30] audit: type=1326 audit(1761718003.284:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1013.882204][T16721] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1013.932825][T16655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.940637][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.991262][ T30] audit: type=1326 audit(1761718003.284:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1014.047063][T16655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.115536][ T30] audit: type=1326 audit(1761718003.294:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1014.175601][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.237070][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.287239][ T30] audit: type=1326 audit(1761718003.294:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1014.390023][ T30] audit: type=1326 audit(1761718003.294:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1014.414665][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.818328][ T30] audit: type=1326 audit(1761718004.534:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16744 comm="syz.1.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1014.912188][ T30] audit: type=1326 audit(1761718004.534:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16744 comm="syz.1.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1015.081111][T16752] loop7: detected capacity change from 0 to 1024 [ 1015.121391][T16655] hsr_slave_0: entered promiscuous mode [ 1015.165338][T16655] hsr_slave_1: entered promiscuous mode [ 1015.166111][T16752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.171972][T16655] debugfs: 'hsr0' already exists in 'hsr' [ 1015.237889][T16757] loop4: detected capacity change from 0 to 128 [ 1015.365195][T16655] Cannot create hsr debugfs directory [ 1015.404069][T16759] loop6: detected capacity change from 0 to 1024 [ 1015.452126][T16759] EXT4-fs: Ignoring removed nobh option [ 1015.483185][T16759] EXT4-fs: Ignoring removed bh option [ 1015.534011][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.596031][T11626] bio_check_eod: 55 callbacks suppressed [ 1015.596059][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.596059][T11626] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1015.629281][T16759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.686196][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.686196][T11626] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1015.709732][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.709732][T11626] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1015.731853][T16759] EXT4-fs (loop6): shut down requested (0) [ 1015.745659][ T5842] Bluetooth: hci4: command tx timeout [ 1015.751534][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.751534][T11626] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1015.765972][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.765972][T11626] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1015.784685][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.784685][T11626] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1015.812349][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.812349][T11626] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1015.827957][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.827957][T11626] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1015.843081][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.843081][T11626] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1015.882362][T11626] kworker/u8:23: attempt to access beyond end of device [ 1015.882362][T11626] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1016.021739][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.030415][T16763] bridge_slave_0: left allmulticast mode [ 1016.105332][T16763] bridge_slave_0: left promiscuous mode [ 1016.111299][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.189691][T16763] bridge_slave_1: left allmulticast mode [ 1016.213167][T16763] bridge_slave_1: left promiscuous mode [ 1016.244283][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.366249][T16763] bond0: (slave bond_slave_0): Releasing backup interface [ 1016.454535][T16763] bond0: (slave bond_slave_1): Releasing backup interface [ 1016.581788][T16763] team0: Port device team_slave_0 removed [ 1016.615360][ T805] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1016.631119][T16763] team0: Port device team_slave_1 removed [ 1016.664541][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.682570][T16763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.732534][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.785374][ T805] usb 7-1: Using ep0 maxpacket: 8 [ 1016.785478][T16763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.808081][ T805] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1016.842051][T16763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1016.857702][ T805] usb 7-1: config 0 has no interface number 0 [ 1016.865563][ T805] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.924429][T16767] team0: Mode changed to "loadbalance" [ 1016.928900][ T805] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1016.960065][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.981098][ T805] usb 7-1: config 0 descriptor?? [ 1017.026767][ T805] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1017.221546][T16775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.255608][T16775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.665811][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.713117][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.759615][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.790511][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.835435][ T5842] Bluetooth: hci4: command tx timeout [ 1019.067127][T13455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.078183][T13455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.086571][T13455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1019.096397][T13455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1019.106218][T13455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1019.386080][ T805] usb 7-1: USB disconnect, device number 14 [ 1019.924921][T16791] lo speed is unknown, defaulting to 1000 [ 1020.810585][T16655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1020.861275][T16655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1020.964668][T16655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1021.020599][T16655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1021.185747][T13455] Bluetooth: hci5: command tx timeout [ 1021.567499][ T5964] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1021.626050][T16791] chnl_net:caif_netlink_parms(): no params data found [ 1021.735474][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 1021.754455][T16839] lo speed is unknown, defaulting to 1000 [ 1021.755390][ T5964] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1021.821350][ T5964] usb 5-1: config 0 has no interface number 0 [ 1021.835300][ T5964] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.885984][ T5964] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1021.935319][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.983545][ T5964] usb 5-1: config 0 descriptor?? [ 1022.023915][ T5964] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1022.256680][T16835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.275700][T16835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.459766][T16791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.479940][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.502722][T16851] __nla_validate_parse: 4 callbacks suppressed [ 1022.502750][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3031'. [ 1022.505731][T16791] bridge_slave_0: entered allmulticast mode [ 1022.536967][T16791] bridge_slave_0: entered promiscuous mode [ 1022.566885][T16791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.574084][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.603641][T16791] bridge_slave_1: entered allmulticast mode [ 1022.632693][T16791] bridge_slave_1: entered promiscuous mode [ 1022.641145][T16855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.660499][T16855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.682729][T16855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.709432][T16855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.764148][T16655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.971291][T16791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.982331][T16791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.992956][T16655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.061644][T16859] siw: device registration error -23 [ 1023.285234][T13455] Bluetooth: hci5: command tx timeout [ 1023.478303][T16861] loop6: detected capacity change from 0 to 64 [ 1023.490971][T16861] hfs: Bad value for 'uid' [ 1024.293536][T16791] team0: Port device team_slave_0 added [ 1024.371269][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.378791][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.412916][ T5968] usb 5-1: USB disconnect, device number 23 [ 1024.457069][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.464365][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.565967][T16866] loop1: detected capacity change from 0 to 1024 [ 1024.601320][T16866] EXT4-fs: Ignoring removed nobh option [ 1024.625286][T16866] EXT4-fs: Ignoring removed bh option [ 1024.677417][T16866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.778915][T11636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.838442][T16052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.839262][T16791] team0: Port device team_slave_1 added [ 1025.033823][T11636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.097333][T16791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.111321][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.154245][T16791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.239447][T11636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.277385][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3042'. [ 1025.323603][T16791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.350320][T13455] Bluetooth: hci5: command tx timeout [ 1025.362406][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.462541][T16791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.496689][T16886] tipc: Started in network mode [ 1025.512745][T16886] tipc: Node identity 5ad3cc8259bd, cluster identity 4711 [ 1025.520743][T16886] tipc: Enabled bearer , priority 0 [ 1025.528749][T16882] syzkaller0: entered promiscuous mode [ 1025.542889][T16882] syzkaller0: entered allmulticast mode [ 1025.724753][T16895] tipc: Resetting bearer [ 1025.840994][T11636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.963698][T16881] tipc: Resetting bearer [ 1026.050084][T16881] tipc: Disabling bearer [ 1026.074944][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1026.074970][ T30] audit: type=1326 audit(1761718015.784:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.4.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1026.162657][T16791] hsr_slave_0: entered promiscuous mode [ 1026.177372][ T30] audit: type=1326 audit(1761718015.814:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.4.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1026.211059][T16791] hsr_slave_1: entered promiscuous mode [ 1026.242932][T16791] debugfs: 'hsr0' already exists in 'hsr' [ 1026.275229][T16791] Cannot create hsr debugfs directory [ 1026.277148][ T30] audit: type=1326 audit(1761718015.814:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.4.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1026.331597][T16910] loop7: detected capacity change from 0 to 1024 [ 1026.404919][T16910] EXT4-fs: Ignoring removed nobh option [ 1026.426574][T16910] EXT4-fs: Ignoring removed bh option [ 1026.460104][ T30] audit: type=1326 audit(1761718015.824:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.4.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1026.521913][T16910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.534784][ T30] audit: type=1326 audit(1761718015.824:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.4.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1026.581496][T16655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.669695][T16919] loop1: detected capacity change from 0 to 1024 [ 1026.740074][T16919] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1026.766897][T16919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1026.782987][T16919] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1026.792118][T16919] EXT4-fs (loop1): mount failed [ 1026.799336][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.906110][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3054'. [ 1027.010973][ T30] audit: type=1326 audit(1761718016.724:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.7.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1027.093801][ T30] audit: type=1326 audit(1761718016.724:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.7.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1027.208626][ T30] audit: type=1326 audit(1761718016.744:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.7.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1027.314919][ T30] audit: type=1326 audit(1761718016.744:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.7.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1027.339334][T11636] bridge_slave_1: left allmulticast mode [ 1027.345015][T11636] bridge_slave_1: left promiscuous mode [ 1027.386838][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.425251][T13455] Bluetooth: hci5: command tx timeout [ 1027.428450][ T30] audit: type=1326 audit(1761718016.744:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16927 comm="syz.7.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1027.514212][T11636] bridge_slave_0: left allmulticast mode [ 1027.530087][T11636] bridge_slave_0: left promiscuous mode [ 1027.552662][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.462737][T16955] netlink: 'syz.6.3066': attribute type 4 has an invalid length. [ 1028.474843][T16955] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3066'. [ 1028.645961][T11636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.661079][T11636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.674450][T11636] bond0 (unregistering): Released all slaves [ 1028.765991][T16955] .`: renamed from bond0 (while UP) [ 1028.923847][T16655] veth0_vlan: entered promiscuous mode [ 1029.074671][T16961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3069'. [ 1029.682900][T16655] veth1_vlan: entered promiscuous mode [ 1030.444288][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1030.502237][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1030.916095][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.954652][T11636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.014077][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.064546][T11636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.234176][T11636] veth1_macvtap: left promiscuous mode [ 1031.257496][T11636] veth0_macvtap: left promiscuous mode [ 1031.813778][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1031.813805][ T30] audit: type=1326 audit(1761718021.514:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17020 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1031.874392][ T30] audit: type=1326 audit(1761718021.514:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17020 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1031.930352][ T30] audit: type=1326 audit(1761718021.514:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17020 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1031.981468][ T30] audit: type=1326 audit(1761718021.524:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17020 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1032.019918][ T30] audit: type=1326 audit(1761718021.524:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17020 comm="syz.1.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1032.085331][ T805] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1032.107633][T17026] loop1: detected capacity change from 0 to 1024 [ 1032.131820][T17026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1032.167021][T17026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1032.186146][T17026] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1032.201034][T17026] EXT4-fs (loop1): mount failed [ 1032.241288][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 1032.257926][ T805] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.266244][ T805] usb 5-1: config 0 has no interface number 0 [ 1032.280235][ T805] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.303686][ T805] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1032.324962][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.356904][ T805] usb 5-1: config 0 descriptor?? [ 1032.384236][ T805] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1032.566678][T11636] team0 (unregistering): Port device team_slave_1 removed [ 1032.583788][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.594226][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.635921][T11636] team0 (unregistering): Port device team_slave_0 removed [ 1032.959125][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.968960][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.980703][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.989950][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.326602][T17005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.533350][T17005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.631578][T16655] veth0_macvtap: entered promiscuous mode [ 1033.680873][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3101'. [ 1033.731219][T17005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.829691][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1033.834305][T16655] veth1_macvtap: entered promiscuous mode [ 1033.942183][ T30] audit: type=1326 audit(1761718023.654:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17049 comm="syz.7.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1034.001397][T17005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.002697][ T30] audit: type=1326 audit(1761718023.654:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17049 comm="syz.7.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1034.041276][ T30] audit: type=1326 audit(1761718023.664:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17049 comm="syz.7.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1034.097234][ T30] audit: type=1326 audit(1761718023.664:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17049 comm="syz.7.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1034.217973][T16655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.256529][T17058] loop1: detected capacity change from 0 to 128 [ 1034.274663][T16655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.299093][T16791] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1034.321990][T16791] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1034.357681][T17058] loop1: detected capacity change from 0 to 2048 [ 1034.372743][T16791] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1034.391991][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.409911][T17058] GPT:first_usable_lbas don't match. [ 1034.415532][T17058] GPT:34 != 290 [ 1034.421425][T16791] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1034.425359][T17058] GPT: Use GNU Parted to correct GPT errors. [ 1034.434599][T17058] loop1: p1 p2 p3 [ 1034.450502][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.473379][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.488019][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.517891][ T147] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.526524][ T147] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.588133][T11624] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.650070][ T147] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.782997][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.805388][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.932220][T15761] usb 5-1: USB disconnect, device number 24 [ 1034.944946][T11636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.983820][T11636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.064293][T16791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.141885][T16791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.187056][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.194599][T11624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.230208][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3115'. [ 1035.249291][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.256537][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.454892][T17088] blktrace: Concurrent blktraces are not allowed on loop8 [ 1036.286660][ T30] audit: type=1326 audit(1761718026.004:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17101 comm="syz.7.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1036.511998][T16791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.886791][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3126'. [ 1037.166856][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1037.166889][ T30] audit: type=1326 audit(1761718026.884:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.7.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1037.245657][ T30] audit: type=1326 audit(1761718026.884:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.7.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1037.346453][ T30] audit: type=1326 audit(1761718026.884:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.7.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1037.436329][ T30] audit: type=1326 audit(1761718026.884:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.7.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1037.515935][ T30] audit: type=1326 audit(1761718026.884:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.7.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1037.596172][T17132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3129'. [ 1037.616671][T17127] tipc: Enabling of bearer rejected, failed to enable media [ 1037.884469][T16791] veth0_vlan: entered promiscuous mode [ 1037.944115][T16791] veth1_vlan: entered promiscuous mode [ 1037.966041][T17141] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 1037.991114][T17141] netlink: 'syz.4.3135': attribute type 4 has an invalid length. [ 1038.019806][T17144] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 1038.028480][T17141] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1038.048097][T17144] netlink: 'syz.4.3135': attribute type 4 has an invalid length. [ 1038.063202][T17144] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1038.080252][T16791] veth0_macvtap: entered promiscuous mode [ 1038.092961][T16791] veth1_macvtap: entered promiscuous mode [ 1038.118479][T16791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.132313][T16791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.469550][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3137'. [ 1038.529235][T17149] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3137'. [ 1038.745775][ T1307] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.865267][ T1307] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.975412][ T1307] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.022949][ T1307] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.225422][T11636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.243614][T11636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.395214][T11636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.423464][T11636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.891332][T17182] loop7: detected capacity change from 0 to 1024 [ 1039.917061][T17182] EXT4-fs: Ignoring removed orlov option [ 1039.925672][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'. [ 1039.959354][T17182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.075400][ T30] audit: type=1800 audit(1761718029.784:1887): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3152" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1040.200206][ T30] audit: type=1804 audit(1761718029.844:1888): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3152" name="/newroot/420/bus/bus" dev="loop7" ino=18 res=1 errno=0 [ 1040.493387][T17204] batman_adv: batadv0: Adding interface: dummy0 [ 1040.526412][ T30] audit: type=1326 audit(1761718030.244:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17205 comm="syz.6.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1040.555235][T17204] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.665221][ T30] audit: type=1326 audit(1761718030.244:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17205 comm="syz.6.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1040.697577][T17204] batman_adv: batadv0: Interface activated: dummy0 [ 1040.763021][ T30] audit: type=1326 audit(1761718030.244:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17205 comm="syz.6.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1040.788803][T17208] batadv0: mtu less than device minimum [ 1040.796555][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.809072][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.821194][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.833331][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.845462][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.857511][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.870050][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.882177][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1040.894389][T17208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1041.245268][T17222] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1041.330545][T17233] loop8: detected capacity change from 0 to 1024 [ 1041.539524][T17233] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1041.813773][T17233] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:482: comm syz.8.3164: Invalid block bitmap block 0 in block_group 0 [ 1041.885531][T17233] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.3164: Failed to acquire dquot type 0 [ 1041.988558][T17233] EXT4-fs error (device loop8): ext4_free_blocks:6705: comm syz.8.3164: Freeing blocks not in datazone - block = 0, count = 4096 [ 1042.004455][T17242] lo speed is unknown, defaulting to 1000 [ 1042.047687][T17249] pim6reg1: entered promiscuous mode [ 1042.053080][T17249] pim6reg1: entered allmulticast mode [ 1042.079502][T17233] EXT4-fs error (device loop8): ext4_read_inode_bitmap:138: comm syz.8.3164: Invalid inode bitmap blk 0 in block_group 0 [ 1042.132619][T11611] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:17: Failed to release dquot type 0 [ 1042.155034][T17233] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1042.205807][T17233] EXT4-fs (loop8): 1 orphan inode deleted [ 1042.247287][T17233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.375863][T17257] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1042.375863][T17257] The task syz.0.3166 (17257) triggered the difference, watch for misbehavior. [ 1042.693794][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3170'. [ 1042.797830][T16791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.287145][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3173'. [ 1043.488602][T17283] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3175'. [ 1044.292054][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3178'. [ 1044.338828][T17285] 8021q: VLANs not supported on vcan0 [ 1044.786237][T17301] tipc: Enabling of bearer rejected, failed to enable media [ 1044.950168][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1045.077734][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.443086][T17326] netlink: 'syz.1.3195': attribute type 13 has an invalid length. [ 1045.842118][T17343] loop7: detected capacity change from 0 to 1024 [ 1045.861128][T17343] EXT4-fs: Ignoring removed nobh option [ 1045.875332][T17343] EXT4-fs: Ignoring removed bh option [ 1045.909513][T17343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.947955][T17326] batman_adv: batadv0: Interface deactivated: dummy0 [ 1045.971538][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1045.971566][ T30] audit: type=1804 audit(1761718035.684:1894): pid=17343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3202" name="/newroot/424/file2/bus" dev="loop7" ino=18 res=1 errno=0 [ 1045.974216][T17343] EXT4-fs (loop7): shut down requested (0) [ 1046.121074][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.167657][T17351] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1046.167657][T17351] program syz.8.3204 not setting count and/or reply_len properly [ 1046.368223][T17356] loop8: detected capacity change from 0 to 1024 [ 1046.393758][T17356] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1046.412751][T17356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1046.431440][T17356] EXT4-fs (loop8): failed to initialize system zone (-117) [ 1046.443123][T17356] EXT4-fs (loop8): mount failed [ 1046.811254][T17368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3211'. [ 1046.907206][T11624] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.932247][T11624] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.985380][T11624] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.994367][T11624] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.041443][ T30] audit: type=1326 audit(1761718036.754:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1047.116038][ T30] audit: type=1326 audit(1761718036.754:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1047.179688][ T30] audit: type=1326 audit(1761718036.794:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1047.254759][ T30] audit: type=1326 audit(1761718036.794:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1047.323179][T17382] netlink: 'syz.0.3217': attribute type 6 has an invalid length. [ 1047.353202][ T30] audit: type=1326 audit(1761718036.794:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1047.398216][ T30] audit: type=1326 audit(1761718037.054:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1047.456627][ T30] audit: type=1326 audit(1761718037.054:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1047.509076][ T30] audit: type=1326 audit(1761718037.054:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1047.560823][T17391] loop6: detected capacity change from 0 to 2048 [ 1047.568030][ T30] audit: type=1326 audit(1761718037.054:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.6.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1047.595662][T17391] EXT4-fs: Ignoring removed mblk_io_submit option [ 1047.602768][T17391] EXT4-fs: Ignoring removed i_version option [ 1047.621573][T17391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.853309][T17396] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1048.623780][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.336203][T17429] loop4: detected capacity change from 0 to 1024 [ 1049.356493][T17429] EXT4-fs: Ignoring removed nobh option [ 1049.381537][T17429] EXT4-fs: Ignoring removed bh option [ 1049.423326][T17432] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1049.441645][T17429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.489206][T17438] loop1: detected capacity change from 0 to 512 [ 1049.514009][T17438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1049.538487][T17429] EXT4-fs (loop4): shut down requested (0) [ 1049.541825][T17438] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1049.545334][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3242'. [ 1049.563120][T17438] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1049.581964][T17440] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3241'. [ 1049.592871][T17438] EXT4-fs (loop1): 1 truncate cleaned up [ 1049.604274][T17438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.608166][T17440] IPVS: Error connecting to the multicast addr [ 1049.675508][T16052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.749136][T17446] loop8: detected capacity change from 0 to 1024 [ 1049.758681][T17446] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1049.773181][T17446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1049.790346][T17446] EXT4-fs (loop8): failed to initialize system zone (-117) [ 1049.799444][T17446] EXT4-fs (loop8): mount failed [ 1049.847864][T11749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.324429][T17471] netlink: 'syz.8.3254': attribute type 13 has an invalid length. [ 1050.711152][T17481] loop4: detected capacity change from 0 to 512 [ 1050.783240][T17481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.829483][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.837371][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.848843][T17481] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.200103][T11749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.293562][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.351085][T17471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.838958][T17496] loop4: detected capacity change from 0 to 1024 [ 1051.892530][T17496] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1051.954129][T17496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1051.996009][T17496] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1052.003575][T17496] EXT4-fs (loop4): mount failed [ 1052.223821][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1052.223849][ T30] audit: type=1326 audit(1761718554.931:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.356096][ T30] audit: type=1326 audit(1761718554.931:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.505279][ T30] audit: type=1326 audit(1761718555.001:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.589069][ T30] audit: type=1326 audit(1761718555.001:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.632007][ T30] audit: type=1326 audit(1761718555.001:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.666860][ T30] audit: type=1326 audit(1761718555.011:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.814168][ T30] audit: type=1326 audit(1761718555.011:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.905468][ T30] audit: type=1326 audit(1761718555.011:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.6.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1052.987845][ T6492] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.018190][ T6492] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.056594][ T6492] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.102114][ T6492] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.875653][T17528] netlink: 'syz.4.3276': attribute type 4 has an invalid length. [ 1054.674701][T17534] tipc: Enabled bearer , priority 0 [ 1054.682549][T17534] syzkaller0: entered promiscuous mode [ 1054.688421][T17534] syzkaller0: entered allmulticast mode [ 1054.797066][T17534] tipc: Resetting bearer [ 1054.838440][ T30] audit: type=1326 audit(1761718557.551:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.7.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1054.931885][ T30] audit: type=1326 audit(1761718557.581:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.7.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1055.086911][T17533] tipc: Resetting bearer [ 1055.166347][T17533] tipc: Disabling bearer [ 1055.179123][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1055.938010][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1057.235197][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1057.235225][ T30] audit: type=1326 audit(1761718559.931:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.305956][T17578] loop7: detected capacity change from 0 to 1024 [ 1057.321368][ T30] audit: type=1326 audit(1761718559.931:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.345271][T17578] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1057.375522][T17578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1057.383872][T17578] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1057.401591][ T30] audit: type=1326 audit(1761718559.991:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.418120][T17569] warn_alloc: 2 callbacks suppressed [ 1057.418147][T17569] syz.6.3293: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1057.448552][T17569] CPU: 1 UID: 0 PID: 17569 Comm: syz.6.3293 Not tainted syzkaller #0 PREEMPT(full) [ 1057.448605][T17569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1057.448630][T17569] Call Trace: [ 1057.448644][T17569] [ 1057.448659][T17569] dump_stack_lvl+0x16c/0x1f0 [ 1057.448703][T17569] warn_alloc+0x248/0x3a0 [ 1057.448750][T17569] ? __pfx_warn_alloc+0x10/0x10 [ 1057.448791][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.448842][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.448892][T17569] ? __get_vm_area_node+0x101/0x330 [ 1057.448955][T17569] ? packet_set_ring+0xb4c/0x17e0 [ 1057.449014][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.449061][T17569] ? __vmalloc_node_noprof+0xad/0xf0 [ 1057.449112][T17569] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1057.449174][T17569] ? packet_set_ring+0xb4c/0x17e0 [ 1057.449248][T17569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1057.449291][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.449337][T17569] ? alloc_pages_mpol+0x25a/0x550 [ 1057.449379][T17569] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1057.449416][T17569] ? rcu_is_watching+0x12/0xc0 [ 1057.449475][T17569] ? packet_set_ring+0xb4c/0x17e0 [ 1057.449533][T17569] __vmalloc_node_noprof+0xad/0xf0 [ 1057.449580][T17569] ? packet_set_ring+0xb4c/0x17e0 [ 1057.449646][T17569] packet_set_ring+0xb4c/0x17e0 [ 1057.449728][T17569] packet_setsockopt+0x121b/0x33c0 [ 1057.449767][T17569] ? __pfx___might_resched+0x10/0x10 [ 1057.449819][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.449866][T17569] ? __lock_acquire+0x622/0x1c90 [ 1057.449940][T17569] ? __pfx_packet_setsockopt+0x10/0x10 [ 1057.449977][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.450023][T17569] ? aa_sk_perm+0x2f4/0xb10 [ 1057.450068][T17569] ? __pfx_aa_sk_perm+0x10/0x10 [ 1057.450110][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.450157][T17569] ? find_held_lock+0x2b/0x80 [ 1057.450210][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.450258][T17569] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1057.450313][T17569] ? __pfx_packet_setsockopt+0x10/0x10 [ 1057.450356][T17569] do_sock_setsockopt+0xf3/0x1d0 [ 1057.450409][T17569] __sys_setsockopt+0x1a0/0x230 [ 1057.450481][T17569] __x64_sys_setsockopt+0xbd/0x160 [ 1057.450542][T17569] ? do_syscall_64+0x91/0xfa0 [ 1057.450586][T17569] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1057.450633][T17569] ? lockdep_hardirqs_on+0x7c/0x110 [ 1057.450684][T17569] do_syscall_64+0xcd/0xfa0 [ 1057.450733][T17569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.450773][T17569] RIP: 0033:0x7fb6e198efc9 [ 1057.450803][T17569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.450842][T17569] RSP: 002b:00007fb6e27b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1057.450879][T17569] RAX: ffffffffffffffda RBX: 00007fb6e1be5fa0 RCX: 00007fb6e198efc9 [ 1057.450910][T17569] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 1057.450935][T17569] RBP: 00007fb6e1a11f91 R08: 000000000000001c R09: 0000000000000000 [ 1057.450960][T17569] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1057.450985][T17569] R13: 00007fb6e1be6038 R14: 00007fb6e1be5fa0 R15: 00007ffd80311038 [ 1057.451040][T17569] [ 1057.451130][T17569] Mem-Info: [ 1057.460923][T17578] EXT4-fs (loop7): mount failed [ 1057.471221][T17569] active_anon:4446 inactive_anon:3732 isolated_anon:0 [ 1057.471221][T17569] active_file:1835 inactive_file:51109 isolated_file:0 [ 1057.471221][T17569] unevictable:768 dirty:158 writeback:0 [ 1057.471221][T17569] slab_reclaimable:11796 slab_unreclaimable:159944 [ 1057.471221][T17569] mapped:34978 shmem:4984 pagetables:1902 [ 1057.471221][T17569] sec_pagetables:0 bounce:0 [ 1057.471221][T17569] kernel_misc_reclaimable:0 [ 1057.471221][T17569] free:1175144 free_pcp:15794 free_cma:0 [ 1057.512706][ T30] audit: type=1326 audit(1761718560.031:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.516326][T17569] Node 0 active_anon:17684kB inactive_anon:14928kB active_file:7284kB inactive_file:204228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139912kB dirty:632kB writeback:0kB shmem:18400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12524kB pagetables:7312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1057.558949][ T30] audit: type=1326 audit(1761718560.031:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.572791][T17569] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1057.627644][ T30] audit: type=1326 audit(1761718560.031:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d15c1885 code=0x7ffc0000 [ 1057.637439][T17569] Node 0 [ 1057.683511][ T30] audit: type=1326 audit(1761718560.051:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1057.738967][T17569] DMA free:11192kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1057.795216][ T30] audit: type=1326 audit(1761718560.051:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1058.049247][T17569] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1058.064060][T17569] Node 0 DMA32 free:1024012kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17084kB inactive_anon:14928kB active_file:7284kB inactive_file:204228kB unevictable:1536kB writepending:732kB zspages:0kB present:3129332kB managed:2545024kB mlocked:0kB bounce:0kB free_pcp:29232kB local_pcp:22404kB free_cma:0kB [ 1058.191573][T17569] lowmem_reserve[]: 0 0 1 1 1 [ 1058.233824][T17569] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.291158][ T30] audit: type=1326 audit(1761718560.051:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1058.344694][ T30] audit: type=1326 audit(1761718560.061:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17580 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61d158efc9 code=0x7ffc0000 [ 1058.408388][T17569] lowmem_reserve[]: 0 0 0 0 0 [ 1058.413215][T17569] Node 1 Normal free:3665424kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34808kB local_pcp:26016kB free_cma:0kB [ 1058.516455][T17603] tipc: Enabled bearer , priority 0 [ 1058.516790][T17569] lowmem_reserve[]: [ 1058.530238][T17603] syzkaller0: entered promiscuous mode [ 1058.547535][T17603] syzkaller0: entered allmulticast mode [ 1058.553836][T17569] 0 0 0 0 0 [ 1058.565422][T17569] Node 0 DMA: 6*4kB (U) 6*8kB (U) 5*16kB (U) 7*32kB (U) 5*64kB (U) 4*128kB (U) 5*256kB (U) 1*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 11192kB [ 1058.631264][T17569] Node 0 DMA32: 1693*4kB (UM) 263*8kB (ME) 715*16kB (UME) 2809*32kB (UME) 1432*64kB (UM) 1017*128kB (UM) 741*256kB (UME) 445*512kB (UM) 230*1024kB (UE) 17*2048kB (UM) 0*4096kB = 1019900kB [ 1058.705008][T17605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.709163][T17569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1058.764727][T17569] Node 1 Normal: 304*4kB (UME) 126*8kB (UME) 84*16kB (UM) 225*32kB (UME) 118*64kB (UM) 39*128kB (UME) 31*256kB (UME) 18*512kB (UME) 10*1024kB (UME) 3*2048kB (UME) 881*4096kB (M) = 3665424kB [ 1058.807630][T17569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.817877][T17569] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1058.866754][T17606] ipvlan2: entered promiscuous mode [ 1058.872093][T17569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.894792][T17569] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1058.912373][T17569] 58035 total pagecache pages [ 1058.921563][T17569] 0 pages in swap cache [ 1058.926453][T17569] Free swap = 124996kB [ 1058.930985][T17569] Total swap = 124996kB [ 1058.935316][T17569] 2097051 pages RAM [ 1058.939387][T17569] 0 pages HighMem/MovableOnly [ 1058.951407][T17569] 428705 pages reserved [ 1058.956407][T17569] 0 pages cma reserved [ 1059.275007][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1059.335810][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1059.486188][T17607] tipc: Resetting bearer [ 1059.815392][ T5903] tipc: Node number set to 57592962 [ 1059.900072][T17628] loop8: detected capacity change from 0 to 1024 [ 1059.927116][T17605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.946352][T17601] tipc: Resetting bearer [ 1059.985122][T17601] tipc: Disabling bearer [ 1059.996381][T17628] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1060.039144][T17628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1060.056477][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3315'. [ 1060.070663][T17628] EXT4-fs (loop8): failed to initialize system zone (-117) [ 1060.078561][T17628] EXT4-fs (loop8): mount failed [ 1060.157410][T17605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.366357][T17644] loop6: detected capacity change from 0 to 128 [ 1060.422542][T17644] loop6: detected capacity change from 0 to 2048 [ 1060.432064][T17605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.486855][T17644] GPT:first_usable_lbas don't match. [ 1060.502076][T17644] GPT:34 != 290 [ 1060.513114][T17644] GPT: Use GNU Parted to correct GPT errors. [ 1060.527830][T17644] loop6: p1 p2 p3 [ 1060.642695][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.680386][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.744923][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.799156][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.903247][T17661] loop1: detected capacity change from 0 to 512 [ 1060.916090][T17661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1060.972029][T17661] EXT4-fs (loop1): 1 truncate cleaned up [ 1061.267417][T17661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.328095][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3328'. [ 1061.793716][T17674] loop4: detected capacity change from 0 to 8192 [ 1062.132397][T17678] loop0: detected capacity change from 0 to 64 [ 1062.898521][T16052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.948716][T17680] tipc: Enabled bearer , priority 0 [ 1062.967812][T17680] syzkaller0: entered promiscuous mode [ 1062.977554][T17680] syzkaller0: entered allmulticast mode [ 1063.022361][T17684] netlink: 'syz.7.3336': attribute type 13 has an invalid length. [ 1063.044543][T17680] tipc: Resetting bearer [ 1063.538230][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1063.538258][ T30] audit: type=1326 audit(1761718566.251:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.582646][ T30] audit: type=1326 audit(1761718566.251:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.621361][ T30] audit: type=1326 audit(1761718566.251:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.644259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.658127][ T30] audit: type=1326 audit(1761718566.251:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.681030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.692080][T17679] tipc: Resetting bearer [ 1063.698485][ T30] audit: type=1326 audit(1761718566.251:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.723531][ T30] audit: type=1326 audit(1761718566.261:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.746438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.753138][ T30] audit: type=1326 audit(1761718566.261:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.776267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.788678][ T30] audit: type=1326 audit(1761718566.261:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.811162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.859454][T17679] tipc: Disabling bearer [ 1063.865784][ T30] audit: type=1326 audit(1761718566.261:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.891876][ T30] audit: type=1326 audit(1761718566.261:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1063.914356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1063.969441][T17715] loop1: detected capacity change from 0 to 128 [ 1064.009064][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3348'. [ 1064.035425][T17711] netlink: 'syz.7.3348': attribute type 30 has an invalid length. [ 1064.049203][T17715] loop1: detected capacity change from 0 to 2048 [ 1064.076281][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.082671][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.104136][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.129681][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.176404][T17715] GPT:first_usable_lbas don't match. [ 1064.182766][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.186729][T17715] GPT:34 != 290 [ 1064.197881][T17715] GPT: Use GNU Parted to correct GPT errors. [ 1064.204430][T17715] loop1: p1 p2 p3 [ 1064.212151][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.326206][T17724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1064.699472][T17741] loop6: detected capacity change from 0 to 128 [ 1064.804727][T17744] bio_check_eod: 65 callbacks suppressed [ 1064.804756][T17744] syz.6.3357: attempt to access beyond end of device [ 1064.804756][T17744] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1064.834731][T17744] syz.6.3357: attempt to access beyond end of device [ 1064.834731][T17744] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1064.866659][T17744] syz.6.3357: attempt to access beyond end of device [ 1064.866659][T17744] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1064.923999][T17744] syz.6.3357: attempt to access beyond end of device [ 1064.923999][T17744] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1064.969142][T17744] syz.6.3357: attempt to access beyond end of device [ 1064.969142][T17744] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1065.018586][T17744] syz.6.3357: attempt to access beyond end of device [ 1065.018586][T17744] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1065.054152][T17744] syz.6.3357: attempt to access beyond end of device [ 1065.054152][T17744] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1065.105396][T17744] syz.6.3357: attempt to access beyond end of device [ 1065.105396][T17744] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1065.149892][T17744] syz.6.3357: attempt to access beyond end of device [ 1065.149892][T17744] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1065.211200][T17744] syz.6.3357: attempt to access beyond end of device [ 1065.211200][T17744] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1065.456142][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 1065.475962][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.483923][T17755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.514293][T17755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.536841][T17755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.621244][T17762] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3365'. [ 1066.034402][T17768] loop4: detected capacity change from 0 to 512 [ 1066.091317][T17768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.3369: bg 0: block 248: padding at end of block bitmap is not set [ 1066.114937][T17768] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.3369: Failed to acquire dquot type 1 [ 1066.141604][T17768] EXT4-fs (loop4): 1 truncate cleaned up [ 1066.164274][T17768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.214106][T17768] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.409584][T11749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.715331][T17795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3379'. [ 1067.150497][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1067.210444][T17806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1068.010329][T17819] loop1: detected capacity change from 0 to 128 [ 1068.077946][T17822] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3390'. [ 1068.181872][T17819] loop1: detected capacity change from 0 to 2048 [ 1068.274854][T17819] GPT:first_usable_lbas don't match. [ 1068.285300][T17819] GPT:34 != 290 [ 1068.288894][T17819] GPT: Use GNU Parted to correct GPT errors. [ 1068.316047][T17819] loop1: p1 p2 p3 [ 1068.452108][T17835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3395'. [ 1068.598763][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 1068.598790][ T30] audit: type=1326 audit(1761718571.311:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1068.743310][T17851] loop8: detected capacity change from 0 to 164 [ 1068.749528][ T30] audit: type=1326 audit(1761718571.361:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1068.804760][ T30] audit: type=1326 audit(1761718571.361:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1068.857504][ T30] audit: type=1326 audit(1761718571.401:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1068.912677][ T30] audit: type=1326 audit(1761718571.401:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1068.962334][ T30] audit: type=1326 audit(1761718571.401:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1069.016000][ T30] audit: type=1326 audit(1761718571.431:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6e192b099 code=0x7ffc0000 [ 1069.100258][ T30] audit: type=1326 audit(1761718571.431:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1069.189787][ T30] audit: type=1326 audit(1761718571.431:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1069.249001][ T30] audit: type=1326 audit(1761718571.431:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.6.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e198efc9 code=0x7ffc0000 [ 1069.330774][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1069.388496][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1070.049239][T17868] loop6: detected capacity change from 0 to 512 [ 1070.057522][T17868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1070.138419][T17868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.856798][T17890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1071.997557][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.289815][T17903] loop8: detected capacity change from 0 to 512 [ 1072.339970][T17903] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.3417: bg 0: block 248: padding at end of block bitmap is not set [ 1072.396231][T17903] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.3417: Failed to acquire dquot type 1 [ 1072.441481][T17903] EXT4-fs (loop8): 1 truncate cleaned up [ 1072.478377][T17903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.785061][T17903] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.721833][T17921] lo speed is unknown, defaulting to 1000 [ 1073.826108][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1074.284678][T17922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1074.689672][T16791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.153636][T17945] loop6: detected capacity change from 0 to 2048 [ 1075.204448][T17945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.216515][T17947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1075.236902][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1075.236928][ T30] audit: type=1800 audit(1761718577.951:2201): pid=17945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3427" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1075.333602][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.605398][T17965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3435'. [ 1075.843064][T17975] tipc: Started in network mode [ 1075.852602][T17975] tipc: Node identity 7aac2b8b499, cluster identity 4711 [ 1075.864264][T17975] tipc: Enabled bearer , priority 0 [ 1075.921608][T17970] tipc: Disabling bearer [ 1076.846338][T18006] loop1: detected capacity change from 0 to 1024 [ 1076.859073][T18006] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1076.884000][T18006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1076.905068][T18006] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1076.914548][T18010] loop6: detected capacity change from 0 to 512 [ 1076.924800][T18006] EXT4-fs (loop1): mount failed [ 1076.957683][T18010] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1076.990823][T18010] EXT4-fs warning (device loop6): ext4_xattr_inode_get:559: inode #11: comm syz.6.3455: EA inode hash validation failed [ 1077.024433][T18010] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1077.044531][T18010] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.3455: corrupted inode contents [ 1077.088140][T18010] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.3455: mark_inode_dirty error [ 1077.110336][T18010] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.3455: corrupted inode contents [ 1077.135178][T18010] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.3455: mark_inode_dirty error [ 1077.165552][T18010] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2998: inode #15: comm syz.6.3455: mark inode dirty (error -117) [ 1077.199218][T18010] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 1077.215837][T18010] EXT4-fs (loop6): 1 orphan inode deleted [ 1077.237755][T18010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1077.380953][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.530963][ T30] audit: type=1326 audit(1761718580.231:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1077.583536][ T30] audit: type=1326 audit(1761718580.241:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1077.650192][ T30] audit: type=1326 audit(1761718580.271:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1077.765390][ T30] audit: type=1326 audit(1761718580.271:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1077.851325][ T30] audit: type=1326 audit(1761718580.271:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1077.957494][ T30] audit: type=1326 audit(1761718580.281:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1078.049952][ T30] audit: type=1326 audit(1761718580.281:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1078.175293][ T30] audit: type=1326 audit(1761718580.281:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1078.215216][ T30] audit: type=1326 audit(1761718580.291:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.1.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1078.671371][T18053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1078.928562][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1078.993037][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1081.026694][T18084] 8021q: adding VLAN 0 to HW filter on device .` [ 1081.085888][T18084] net_ratelimit: 10 callbacks suppressed [ 1081.085910][T18084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1081.509167][T18087] loop7: detected capacity change from 0 to 8192 [ 1082.286931][T18106] tipc: Enabled bearer , priority 0 [ 1082.338578][T18106] syzkaller0: entered promiscuous mode [ 1082.364420][T18106] syzkaller0: entered allmulticast mode [ 1082.508510][T18104] tipc: Resetting bearer [ 1082.790372][T18104] tipc: Disabling bearer [ 1083.842628][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1083.842656][ T30] audit: type=1326 audit(1761718586.551:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.908638][ T30] audit: type=1326 audit(1761718586.551:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.908720][ T30] audit: type=1326 audit(1761718586.551:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.908796][ T30] audit: type=1326 audit(1761718586.551:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.908871][ T30] audit: type=1326 audit(1761718586.551:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.908950][ T30] audit: type=1326 audit(1761718586.551:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.909024][ T30] audit: type=1326 audit(1761718586.551:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.909098][ T30] audit: type=1326 audit(1761718586.551:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.909172][ T30] audit: type=1326 audit(1761718586.551:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1083.909245][ T30] audit: type=1326 audit(1761718586.551:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.7.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x50000 [ 1084.158368][T18135] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3503'. [ 1084.556571][T18143] tipc: Started in network mode [ 1084.556621][T18143] tipc: Node identity 0ebb1bcce8d7, cluster identity 4711 [ 1084.556810][T18143] tipc: Enabled bearer , priority 0 [ 1084.559804][T18143] syzkaller0: entered promiscuous mode [ 1084.559836][T18143] syzkaller0: entered allmulticast mode [ 1084.641183][T18142] tipc: Resetting bearer [ 1084.776179][T18142] tipc: Disabling bearer [ 1084.857946][T18155] loop7: detected capacity change from 0 to 512 [ 1084.866112][T18155] EXT4-fs: Ignoring removed i_version option [ 1084.873853][T18155] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1084.890583][T18155] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.3511: corrupted xattr entries [ 1084.902961][T18155] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1084.916788][T18155] EXT4-fs (loop7): 1 orphan inode deleted [ 1084.925017][T18155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.126193][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.279388][T18163] loop0: detected capacity change from 0 to 64 [ 1086.337877][T18178] loop0: detected capacity change from 0 to 1024 [ 1086.346309][T18180] loop6: detected capacity change from 0 to 512 [ 1086.394732][T18180] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1086.404420][T18178] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1086.461709][T18178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1086.478899][T18178] EXT4-fs (loop0): failed to initialize system zone (-117) [ 1086.488722][T18178] EXT4-fs (loop0): mount failed [ 1086.526674][T18180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.751812][T18191] 9pnet_fd: Insufficient options for proto=fd [ 1088.820301][T18200] 9pnet_fd: p9_fd_create_tcp (18200): problem connecting socket to 127.0.0.1 [ 1089.077941][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.223533][T18210] tipc: Enabled bearer , priority 0 [ 1089.232817][T18210] syzkaller0: entered promiscuous mode [ 1089.238448][T18210] syzkaller0: entered allmulticast mode [ 1089.251100][T18210] tipc: Resetting bearer [ 1089.262395][T18209] tipc: Resetting bearer [ 1089.372624][T18209] tipc: Disabling bearer [ 1089.942512][T18221] loop4: detected capacity change from 0 to 64 [ 1090.528868][T18223] siw: device registration error -23 [ 1090.958770][T18229] loop0: detected capacity change from 0 to 64 [ 1090.966466][T18229] hfs: Bad value for 'uid' [ 1091.410447][T18230] netlink: 'syz.8.3534': attribute type 3 has an invalid length. [ 1091.581325][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1091.581354][ T30] audit: type=1326 audit(1761718594.191:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1091.733435][T18237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1091.819818][ T30] audit: type=1326 audit(1761718594.191:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1091.878246][ T30] audit: type=1326 audit(1761718594.201:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1091.962820][ T30] audit: type=1326 audit(1761718594.201:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.029847][T18242] loop0: detected capacity change from 0 to 512 [ 1092.056961][ T30] audit: type=1326 audit(1761718594.221:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.082397][T18242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1092.152594][T18242] EXT4-fs (loop0): 1 truncate cleaned up [ 1092.167057][ T30] audit: type=1326 audit(1761718594.221:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.199147][T18242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.326134][ T30] audit: type=1326 audit(1761718594.241:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.418904][ T30] audit: type=1326 audit(1761718594.251:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.494200][T16655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.509799][ T30] audit: type=1326 audit(1761718594.251:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.563641][ T30] audit: type=1326 audit(1761718594.251:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.8.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1092.814574][T18267] loop4: detected capacity change from 0 to 1024 [ 1092.851561][T18267] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1092.887979][T18267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1092.917367][T18267] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1092.924734][T18267] EXT4-fs (loop4): mount failed [ 1093.100890][T18278] sock: sock_set_timeout: `syz.7.3554' (pid 18278) tries to set negative timeout [ 1093.195278][T18278] netlink: 'syz.7.3554': attribute type 10 has an invalid length. [ 1093.206083][T18278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.215721][T18278] bond0: (slave team0): Enslaving as an active interface with an up link [ 1093.760262][T18298] serio: Serial port ptm0 [ 1094.833480][T18306] netlink: 'syz.0.3563': attribute type 4 has an invalid length. [ 1094.903419][T18306] netlink: 'syz.0.3563': attribute type 4 has an invalid length. [ 1096.863123][T18384] loop6: detected capacity change from 0 to 512 [ 1096.910369][T18384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.967133][T18384] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.055822][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3602'. [ 1097.158436][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.456048][T18410] 9pnet_fd: Insufficient options for proto=fd [ 1097.520480][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1097.520508][ T30] audit: type=1326 audit(1761718600.231:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.615204][ T30] audit: type=1326 audit(1761718600.231:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.681140][ T30] audit: type=1326 audit(1761718600.271:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.768913][ T30] audit: type=1326 audit(1761718600.271:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.811015][T18420] loop0: detected capacity change from 0 to 4096 [ 1097.817645][ T30] audit: type=1326 audit(1761718600.271:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.838345][T18420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1097.891494][T18420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.909262][ T30] audit: type=1326 audit(1761718600.281:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.936771][ T30] audit: type=1326 audit(1761718600.281:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.944901][T18426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1097.963822][ T30] audit: type=1326 audit(1761718600.281:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1097.993587][ T30] audit: type=1326 audit(1761718600.281:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1098.017666][ T30] audit: type=1326 audit(1761718600.281:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1098.100901][T16655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.793785][T18447] hub 6-0:1.0: USB hub found [ 1098.802701][T18447] hub 6-0:1.0: 1 port detected [ 1100.116282][T18458] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1101.616486][T18464] loop8: detected capacity change from 0 to 64 [ 1101.997942][T13455] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.144505][T18460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.417363][T18472] tipc: Enabled bearer , priority 0 [ 1102.526454][T18460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.579878][T18472] syzkaller0: entered promiscuous mode [ 1102.601829][T18472] syzkaller0: entered allmulticast mode [ 1102.618393][T18483] siw: device registration error -23 [ 1102.639333][T18480] pimreg: entered allmulticast mode [ 1102.687525][T18472] tipc: Resetting bearer [ 1102.693746][T18480] pimreg: left allmulticast mode [ 1102.819192][T18460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.865972][T18471] tipc: Resetting bearer [ 1102.995920][T18471] tipc: Disabling bearer [ 1103.188454][T18460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.380400][ T9099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.422228][ T9099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.470276][ T1317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.526448][T11626] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.625232][ T5930] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1103.714870][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1103.714898][ T30] audit: type=1326 audit(1761718606.421:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1103.789220][ T30] audit: type=1326 audit(1761718606.421:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1103.836870][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 1103.846250][ T5930] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1103.875000][ T5930] usb 2-1: config 0 has no interface number 0 [ 1103.881518][ T30] audit: type=1326 audit(1761718606.421:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1103.906489][ T5930] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.928296][ T5930] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1103.969138][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.979303][ T30] audit: type=1326 audit(1761718606.421:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.002025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.026480][ T5930] usb 2-1: config 0 descriptor?? [ 1104.041161][ T5930] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1104.067507][ T30] audit: type=1326 audit(1761718606.421:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.111525][ T30] audit: type=1326 audit(1761718606.461:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.134099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.185225][ T30] audit: type=1326 audit(1761718606.461:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.225052][ T30] audit: type=1326 audit(1761718606.461:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.247986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.262119][ T30] audit: type=1326 audit(1761718606.461:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.284762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.308851][T18504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.318023][T18504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.326778][ T30] audit: type=1326 audit(1761718606.461:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.0.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1104.349367][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.366913][T18530] tipc: Enabled bearer , priority 0 [ 1104.375050][T18530] syzkaller0: entered promiscuous mode [ 1104.380730][T18530] syzkaller0: entered allmulticast mode [ 1104.446226][T18530] tipc: Resetting bearer [ 1104.493352][T18528] tipc: Resetting bearer [ 1104.565236][T18528] tipc: Disabling bearer [ 1104.748283][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.770924][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.789553][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.809952][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.998534][T18548] loop7: detected capacity change from 0 to 1024 [ 1105.013419][T18548] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1105.056965][T18548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1105.073284][T18548] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1105.088948][T18548] EXT4-fs (loop7): mount failed [ 1105.774394][T18563] loop4: detected capacity change from 0 to 164 [ 1105.783859][T18563] ISOFS: unable to read i-node block [ 1105.789368][T18563] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1106.394154][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1106.449422][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1106.910700][ T43] usb 2-1: USB disconnect, device number 18 [ 1107.105213][T13455] Bluetooth: hci6: command 0x1003 tx timeout [ 1107.122645][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1107.578719][T18599] IPv6: NLM_F_CREATE should be specified when creating new route [ 1108.328760][T18617] pimreg: entered allmulticast mode [ 1108.344548][T18617] pimreg: left allmulticast mode [ 1108.888844][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1108.888879][ T30] audit: type=1326 audit(1761718611.601:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.035214][ T30] audit: type=1326 audit(1761718611.601:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.085183][ T30] audit: type=1326 audit(1761718611.601:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.155212][ T30] audit: type=1326 audit(1761718611.641:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.202216][T18637] netlink: 'syz.1.3703': attribute type 5 has an invalid length. [ 1109.228955][ T30] audit: type=1326 audit(1761718611.641:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.315206][ T30] audit: type=1326 audit(1761718611.641:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1109.376433][ T30] audit: type=1326 audit(1761718611.641:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7671b90ee7 code=0x7ffc0000 [ 1109.465188][ T30] audit: type=1326 audit(1761718611.641:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7671b90e5c code=0x7ffc0000 [ 1109.535515][ T30] audit: type=1326 audit(1761718611.641:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7671b90d94 code=0x7ffc0000 [ 1109.596408][ T30] audit: type=1326 audit(1761718611.641:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18630 comm="syz.7.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7671b90d94 code=0x7ffc0000 [ 1110.098542][T18656] loop8: detected capacity change from 0 to 1024 [ 1110.122535][T18656] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1110.163117][T18656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1110.196923][T18656] EXT4-fs (loop8): failed to initialize system zone (-117) [ 1110.226008][T18656] EXT4-fs (loop8): mount failed [ 1110.323887][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3714'. [ 1110.517099][T18662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1111.200279][T18684] loop1: detected capacity change from 0 to 128 [ 1112.018305][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3731'. [ 1112.054949][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1112.123110][T18703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1112.204194][T18704] bridge_slave_0: left allmulticast mode [ 1112.235542][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1112.253324][T18704] bridge_slave_0: left promiscuous mode [ 1112.274928][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.336881][T18704] bridge_slave_1: left allmulticast mode [ 1112.360286][T18704] bridge_slave_1: left promiscuous mode [ 1112.383415][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.437951][T18704] bond0: (slave bond_slave_0): Releasing backup interface [ 1112.472701][T18704] bond0: (slave bond_slave_1): Releasing backup interface [ 1112.516453][T18704] team0: Port device team_slave_0 removed [ 1112.550815][T18704] team0: Port device team_slave_1 removed [ 1112.583178][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.614249][T18704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.641801][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.661422][T18722] loop8: detected capacity change from 0 to 512 [ 1112.668090][T18704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.688764][T18704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1112.730429][T18722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.746367][T18707] team0: Mode changed to "loadbalance" [ 1112.982130][T16791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.030514][T18733] hub 6-0:1.0: USB hub found [ 1113.035633][T18733] hub 6-0:1.0: 1 port detected [ 1113.342944][T18744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1113.456340][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3747'. [ 1113.559477][T18748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.975962][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3752'. [ 1114.137478][T18765] loop0: detected capacity change from 0 to 1024 [ 1114.158831][T18768] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3755'. [ 1114.172283][T18765] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1114.182684][T18768] ksmbd: Unknown IPC event: 3, ignore. [ 1114.193039][T18765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1114.213333][T18765] EXT4-fs (loop0): failed to initialize system zone (-117) [ 1114.233605][T18765] EXT4-fs (loop0): mount failed [ 1114.448601][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1114.448628][ T30] audit: type=1326 audit(1761718617.161:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.8.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1114.486700][ T30] audit: type=1326 audit(1761718617.161:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.8.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1114.510465][ T30] audit: type=1326 audit(1761718617.181:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.8.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1114.534785][ T30] audit: type=1326 audit(1761718617.181:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.8.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1114.560147][ T30] audit: type=1326 audit(1761718617.181:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.8.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a558efc9 code=0x7ffc0000 [ 1114.873519][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1114.977427][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3761'. [ 1115.935405][T18791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1118.187600][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1118.963838][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1119.092649][T18852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1119.216537][T18871] sd 0:0:1:0: device reset [ 1119.647913][T18885] loop8: detected capacity change from 0 to 2048 [ 1119.685658][T18885] EXT4-fs: Ignoring removed bh option [ 1119.747396][T18894] loop6: detected capacity change from 0 to 1024 [ 1119.757407][T18894] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1119.790327][T18885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.842607][T18894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1119.864645][ T30] audit: type=1326 audit(1761718622.571:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1119.877341][T18894] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1119.906314][T18894] EXT4-fs (loop6): mount failed [ 1119.919929][T18885] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1119.930166][ T30] audit: type=1326 audit(1761718622.611:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1119.968079][T18885] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1119.984387][T18885] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1119.984387][T18885] [ 1119.985243][T18904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1120.001515][T18885] EXT4-fs (loop8): Total free blocks count 0 [ 1120.006988][T18908] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1120.011041][T18885] EXT4-fs (loop8): Free/Dirty block details [ 1120.038499][ T30] audit: type=1326 audit(1761718622.611:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1120.069855][T18908] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1120.069855][T18908] [ 1120.090032][T18885] EXT4-fs (loop8): free_blocks=2415919104 [ 1120.115139][T18908] EXT4-fs (loop8): Total free blocks count 0 [ 1120.121179][T18908] EXT4-fs (loop8): Free/Dirty block details [ 1120.131444][ T30] audit: type=1326 audit(1761718622.611:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1120.210971][ T30] audit: type=1326 audit(1761718622.611:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1120.255210][ T30] audit: type=1326 audit(1761718622.611:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1120.286400][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1120.296547][ T30] audit: type=1326 audit(1761718622.611:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e458efc9 code=0x7ffc0000 [ 1120.380179][ T30] audit: type=1326 audit(1761718622.611:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94e4590ee7 code=0x7ffc0000 [ 1120.425472][T18914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1120.495363][ T30] audit: type=1326 audit(1761718622.611:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f94e4590e5c code=0x7ffc0000 [ 1120.556821][ T30] audit: type=1326 audit(1761718622.611:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f94e4590d94 code=0x7ffc0000 [ 1120.574111][T18920] loop8: detected capacity change from 0 to 1024 [ 1120.608156][T18920] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1120.628864][T18920] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1120.655268][T18920] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1120.713317][T18920] EXT4-fs (loop8): journal inode is deleted [ 1121.690423][T18947] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1121.690423][T18947] program syz.6.3824 not setting count and/or reply_len properly [ 1122.073156][T18951] loop4: detected capacity change from 0 to 1024 [ 1122.103577][T18951] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1122.155580][T18951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1122.188823][T18951] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1122.226473][T18951] EXT4-fs (loop4): mount failed [ 1122.548668][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 1122.833151][T18975] loop6: detected capacity change from 0 to 512 [ 1122.845206][T18975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1122.889424][T18975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.920222][T18978] atomic_op ffff888051ae2998 conn xmit_atomic 0000000000000000 [ 1124.198944][ T9456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.244485][T19001] tipc: Enabling of bearer rejected, failed to enable media [ 1124.626649][T13455] Bluetooth: hci6: command 0x1003 tx timeout [ 1124.641288][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1124.762062][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3853'. [ 1124.927926][T19022] loop8: detected capacity change from 0 to 2048 [ 1124.979137][T19022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.024999][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1125.025025][ T30] audit: type=1800 audit(1761718627.731:2632): pid=19022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3855" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1125.512019][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.518736][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.807937][T19049] loop7: detected capacity change from 0 to 1024 [ 1125.851427][T19049] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1125.896612][T19049] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1125.920283][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 1125.955899][T19049] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1125.987752][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 1126.016065][T19049] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.3867: Failed to acquire dquot type 0 [ 1126.042792][T19049] EXT4-fs (loop7): 1 truncate cleaned up [ 1126.059581][T19053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.067148][T19049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1126.114162][T16791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.169300][ T30] audit: type=1326 audit(1761718628.881:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.7.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1126.215398][ T30] audit: type=1326 audit(1761718628.881:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.7.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1126.243136][ T30] audit: type=1326 audit(1761718628.881:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.7.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1126.266482][ T30] audit: type=1326 audit(1761718628.931:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.7.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1126.332375][ T30] audit: type=1326 audit(1761718628.931:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.7.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7671b8efc9 code=0x7ffc0000 [ 1126.397628][ T9630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.535527][ T30] audit: type=1326 audit(1761718629.241:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1126.562977][ T30] audit: type=1326 audit(1761718629.241:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6578efc9 code=0x7ffc0000 [ 1126.563369][T19069] netlink: 'syz.8.3871': attribute type 1 has an invalid length. [ 1126.629108][T19074] netlink: 'syz.8.3871': attribute type 1 has an invalid length. [ 1126.655923][T19074] netlink: 'syz.8.3871': attribute type 4 has an invalid length. [ 1126.674062][T19069] netlink: 'syz.8.3871': attribute type 4 has an invalid length. [ 1126.685320][T19074] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3871'. [ 1126.715247][T19069] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3871'. [ 1126.998478][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3884'. [ 1127.186980][T19095] loop1: detected capacity change from 0 to 2048 [ 1127.195834][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3888'. [ 1127.253181][T19095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.260858][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3888'. [ 1127.290523][T19095] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.324784][T19097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1127.501764][T19109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.3886: bg 0: block 345: padding at end of block bitmap is not set [ 1127.582461][T19109] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 108 with error 117 [ 1127.644007][T19109] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1127.644007][T19109] [ 1127.672397][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 1127.682100][T19111] loop7: detected capacity change from 0 to 1024 [ 1127.725925][T19111] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 1127.761839][T19111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1127.802110][T19111] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1127.820107][T19111] EXT4-fs (loop7): mount failed [ 1127.874935][ T6492] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 124 with max blocks 1 with error 117 [ 1127.930527][T19117] tipc: Enabled bearer , priority 0 [ 1127.972876][T19117] tipc: Resetting bearer [ 1128.051637][ T6492] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1128.051637][ T6492] [ 1128.076906][T16052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.138902][T19116] tipc: Disabling bearer [ 1128.180284][T19122] loop7: detected capacity change from 0 to 512 [ 1128.257802][T19121] lo speed is unknown, defaulting to 1000 [ 1128.258677][T19122] [ 1128.265959][T19122] ====================================================== [ 1128.272988][T19122] WARNING: possible circular locking dependency detected [ 1128.280121][T19122] syzkaller #0 Not tainted [ 1128.284802][T19122] ------------------------------------------------------ [ 1128.291904][T19122] syz.7.3897/19122 is trying to acquire lock: [ 1128.297976][T19122] ffff888057598b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 1128.307865][T19122] [ 1128.307865][T19122] but task is already holding lock: [ 1128.315314][T19122] ffff888073ff3a28 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 1128.325206][T19122] [ 1128.325206][T19122] which lock already depends on the new lock. [ 1128.325206][T19122] [ 1128.335690][T19122] [ 1128.335690][T19122] the existing dependency chain (in reverse order) is: [ 1128.344705][T19122] [ 1128.344705][T19122] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1128.352309][T19122] down_read+0x9b/0x480 [ 1128.357289][T19122] ext4_xattr_get+0x14d/0x780 [ 1128.362596][T19122] ext4_get_acl+0x7d/0x670 [ 1128.367565][T19122] __get_acl+0x379/0x4d0 [ 1128.372365][T19122] posix_acl_create+0x14c/0x520 [ 1128.377782][T19122] ext4_init_acl+0x9a/0x300 [ 1128.382925][T19122] __ext4_new_inode+0x3ffc/0x4f00 [ 1128.388499][T19122] ext4_ext_migrate+0x6fa/0x1ee0 [ 1128.393985][T19122] __ext4_ioctl+0x3178/0x4410 [ 1128.399218][T19122] __x64_sys_ioctl+0x18e/0x210 [ 1128.404534][T19122] do_syscall_64+0xcd/0xfa0 [ 1128.409575][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.416090][T19122] [ 1128.416090][T19122] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1128.424541][T19122] __lock_acquire+0x126f/0x1c90 [ 1128.430056][T19122] lock_acquire+0x179/0x350 [ 1128.435088][T19122] ext4_writepages+0x224/0x7d0 [ 1128.440387][T19122] do_writepages+0x27a/0x600 [ 1128.445510][T19122] __writeback_single_inode+0x160/0xfb0 [ 1128.451609][T19122] writeback_single_inode+0x2bc/0x550 [ 1128.457748][T19122] write_inode_now+0x170/0x1e0 [ 1128.463055][T19122] iput.part.0+0x487/0xb00 [ 1128.468023][T19122] iput+0x35/0x40 [ 1128.472298][T19122] ext4_xattr_block_set+0x67c/0x3650 [ 1128.478212][T19122] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 1128.484737][T19122] __ext4_expand_extra_isize+0x346/0x480 [ 1128.490931][T19122] __ext4_mark_inode_dirty+0x544/0x870 [ 1128.497024][T19122] ext4_evict_inode+0x74e/0x18e0 [ 1128.502506][T19122] evict+0x3e6/0x920 [ 1128.506932][T19122] iput.part.0+0x6a9/0xb00 [ 1128.511882][T19122] iput+0x35/0x40 [ 1128.516054][T19122] ext4_orphan_cleanup+0x731/0x11e0 [ 1128.521795][T19122] ext4_fill_super+0x8db7/0xaf70 [ 1128.527364][T19122] get_tree_bdev_flags+0x38c/0x620 [ 1128.533023][T19122] vfs_get_tree+0x8e/0x340 [ 1128.538070][T19122] path_mount+0x7b9/0x23a0 [ 1128.543015][T19122] __x64_sys_mount+0x293/0x310 [ 1128.548318][T19122] do_syscall_64+0xcd/0xfa0 [ 1128.553364][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.559794][T19122] [ 1128.559794][T19122] other info that might help us debug this: [ 1128.559794][T19122] [ 1128.570195][T19122] Possible unsafe locking scenario: [ 1128.570195][T19122] [ 1128.577645][T19122] CPU0 CPU1 [ 1128.583016][T19122] ---- ---- [ 1128.588640][T19122] lock(&ei->xattr_sem); [ 1128.592980][T19122] lock(&sbi->s_writepages_rwsem); [ 1128.600796][T19122] lock(&ei->xattr_sem); [ 1128.607664][T19122] rlock(&sbi->s_writepages_rwsem); [ 1128.612960][T19122] [ 1128.612960][T19122] *** DEADLOCK *** [ 1128.612960][T19122] [ 1128.621182][T19122] 3 locks held by syz.7.3897/19122: [ 1128.626378][T19122] #0: ffff8880779300e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 1128.636569][T19122] #1: ffff888077930610 (sb_internal){++++}-{0:0}, at: evict+0x3e6/0x920 [ 1128.645078][T19122] #2: ffff888073ff3a28 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 1128.655511][T19122] [ 1128.655511][T19122] stack backtrace: [ 1128.661405][T19122] CPU: 1 UID: 0 PID: 19122 Comm: syz.7.3897 Not tainted syzkaller #0 PREEMPT(full) [ 1128.661448][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1128.661471][T19122] Call Trace: [ 1128.661485][T19122] [ 1128.661499][T19122] dump_stack_lvl+0x116/0x1f0 [ 1128.661544][T19122] print_circular_bug+0x275/0x350 [ 1128.661604][T19122] check_noncircular+0x14c/0x170 [ 1128.661667][T19122] __lock_acquire+0x126f/0x1c90 [ 1128.661728][T19122] ? __lock_acquire+0x622/0x1c90 [ 1128.661788][T19122] lock_acquire+0x179/0x350 [ 1128.661818][T19122] ? do_writepages+0x27a/0x600 [ 1128.661856][T19122] ? __pfx___might_resched+0x10/0x10 [ 1128.661911][T19122] ext4_writepages+0x224/0x7d0 [ 1128.661955][T19122] ? do_writepages+0x27a/0x600 [ 1128.661988][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662033][T19122] ? __pfx_ext4_writepages+0x10/0x10 [ 1128.662087][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662132][T19122] ? __pfx_ext4_writepages+0x10/0x10 [ 1128.662179][T19122] do_writepages+0x27a/0x600 [ 1128.662216][T19122] ? __pfx_do_writepages+0x10/0x10 [ 1128.662256][T19122] __writeback_single_inode+0x160/0xfb0 [ 1128.662304][T19122] ? __pfx___writeback_single_inode+0x10/0x10 [ 1128.662349][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662391][T19122] ? do_raw_spin_unlock+0x172/0x230 [ 1128.662432][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662478][T19122] writeback_single_inode+0x2bc/0x550 [ 1128.662527][T19122] write_inode_now+0x170/0x1e0 [ 1128.662573][T19122] ? __pfx_write_inode_now+0x10/0x10 [ 1128.662645][T19122] ? find_held_lock+0x2b/0x80 [ 1128.662690][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662735][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.662782][T19122] iput.part.0+0x487/0xb00 [ 1128.662825][T19122] iput+0x35/0x40 [ 1128.662860][T19122] ext4_xattr_block_set+0x67c/0x3650 [ 1128.662938][T19122] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 1128.663001][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663044][T19122] ? xattr_find_entry+0x289/0x330 [ 1128.663103][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663145][T19122] ? ext4_xattr_block_find+0x59/0x430 [ 1128.663205][T19122] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 1128.663259][T19122] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1128.663305][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663348][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663390][T19122] ? dquot_initialize_needed+0x183/0x2a0 [ 1128.663432][T19122] __ext4_expand_extra_isize+0x346/0x480 [ 1128.663493][T19122] __ext4_mark_inode_dirty+0x544/0x870 [ 1128.663543][T19122] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1128.663591][T19122] ? __pfx___might_resched+0x10/0x10 [ 1128.663641][T19122] ? ext4_journal_check_start+0x22b/0x340 [ 1128.663684][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663727][T19122] ? __ext4_journal_start_sb+0x19e/0x690 [ 1128.663767][T19122] ? ext4_evict_inode+0x5cf/0x18e0 [ 1128.663817][T19122] ext4_evict_inode+0x74e/0x18e0 [ 1128.663866][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1128.663918][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.663964][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1128.664010][T19122] evict+0x3e6/0x920 [ 1128.664048][T19122] ? __pfx_evict+0x10/0x10 [ 1128.664082][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664130][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664178][T19122] iput.part.0+0x6a9/0xb00 [ 1128.664214][T19122] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1128.664252][T19122] iput+0x35/0x40 [ 1128.664286][T19122] ext4_orphan_cleanup+0x731/0x11e0 [ 1128.664340][T19122] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1128.664391][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664433][T19122] ? ext4_register_li_request+0xec/0x9b0 [ 1128.664488][T19122] ext4_fill_super+0x8db7/0xaf70 [ 1128.664556][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1128.664606][T19122] ? do_raw_spin_lock+0x12c/0x2b0 [ 1128.664643][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664685][T19122] ? find_held_lock+0x2b/0x80 [ 1128.664733][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664775][T19122] ? sb_set_blocksize+0x176/0x1d0 [ 1128.664832][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.664875][T19122] ? setup_bdev_super+0x369/0x730 [ 1128.664929][T19122] get_tree_bdev_flags+0x38c/0x620 [ 1128.664981][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1128.665033][T19122] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1128.665086][T19122] ? apparmor_capable+0x114/0x1d0 [ 1128.665141][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.665186][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.665228][T19122] ? security_capable+0x7e/0x260 [ 1128.665279][T19122] vfs_get_tree+0x8e/0x340 [ 1128.665323][T19122] path_mount+0x7b9/0x23a0 [ 1128.665362][T19122] ? __pfx_path_mount+0x10/0x10 [ 1128.665397][T19122] ? putname+0x154/0x1a0 [ 1128.665435][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.665478][T19122] ? putname+0x154/0x1a0 [ 1128.665515][T19122] ? __x64_sys_mount+0x293/0x310 [ 1128.665548][T19122] __x64_sys_mount+0x293/0x310 [ 1128.665582][T19122] ? __pfx___x64_sys_mount+0x10/0x10 [ 1128.665615][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1128.665666][T19122] do_syscall_64+0xcd/0xfa0 [ 1128.665710][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.665745][T19122] RIP: 0033:0x7f7671b9076a [ 1128.665773][T19122] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.665809][T19122] RSP: 002b:00007f7672a22e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1128.665841][T19122] RAX: ffffffffffffffda RBX: 00007f7672a22ef0 RCX: 00007f7671b9076a [ 1128.665865][T19122] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7672a22eb0 [ 1128.665894][T19122] RBP: 0000200000000180 R08: 00007f7672a22ef0 R09: 0000000000800700 [ 1128.665917][T19122] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1128.665940][T19122] R13: 00007f7672a22eb0 R14: 000000000000046f R15: 000000000000002c [ 1128.665976][T19122] [ 1129.307822][T19122] ------------[ cut here ]------------ [ 1129.313364][T19122] EA inode 11 i_nlink=2 [ 1129.322789][T19122] WARNING: CPU: 0 PID: 19122 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.337558][T19122] Modules linked in: [ 1129.341483][T19122] CPU: 0 UID: 0 PID: 19122 Comm: syz.7.3897 Not tainted syzkaller #0 PREEMPT(full) [ 1129.351392][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1129.361789][T19122] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.368572][T19122] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 40 5d a8 8b e8 35 ef ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 16 bd 2e ff 44 0f b6 2d 75 74 dc 0d [ 1129.388351][T19122] RSP: 0018:ffffc90002e87178 EFLAGS: 00010282 [ 1129.394881][T19122] RAX: 0000000000000000 RBX: ffff888054014f18 RCX: ffffc90018dc9000 [ 1129.403293][T19122] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 1129.411310][T19122] RBP: ffffc90002e87240 R08: 0000000000000001 R09: 0000000000000000 [ 1129.419441][T19122] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 1129.427512][T19122] R13: 0000000000000000 R14: 1ffff920005d0e32 R15: ffff888054015108 [ 1129.435629][T19122] FS: 00007f7672a236c0(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 1129.444685][T19122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.451684][T19122] CR2: 000000110c2d9dbd CR3: 000000004c63f000 CR4: 0000000000350ef0 [ 1129.459752][T19122] Call Trace: [ 1129.463063][T19122] [ 1129.466040][T19122] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1129.472424][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.478123][T19122] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1129.483651][T19122] ext4_xattr_set_entry+0x158f/0x1f00 [ 1129.489168][T19122] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1129.495390][T19122] ? xattr_find_entry+0x289/0x330 [ 1129.500853][T19122] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 1129.506261][T19122] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 1129.512215][T19122] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1129.518582][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.524346][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.530076][T19122] ? dquot_initialize_needed+0x183/0x2a0 [ 1129.535795][T19122] __ext4_expand_extra_isize+0x346/0x480 [ 1129.541498][T19122] __ext4_mark_inode_dirty+0x544/0x870 [ 1129.547169][T19122] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1129.553199][T19122] ? __pfx___might_resched+0x10/0x10 [ 1129.558573][T19122] ? ext4_journal_check_start+0x22b/0x340 [ 1129.564474][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.570272][T19122] ? __ext4_journal_start_sb+0x19e/0x690 [ 1129.575982][T19122] ? ext4_evict_inode+0x5cf/0x18e0 [ 1129.581114][T19122] ext4_evict_inode+0x74e/0x18e0 [ 1129.586263][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1129.591848][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.597980][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1129.603417][T19122] evict+0x3e6/0x920 [ 1129.607890][T19122] ? __pfx_evict+0x10/0x10 [ 1129.612344][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.618115][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.623812][T19122] iput.part.0+0x6a9/0xb00 [ 1129.628340][T19122] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1129.633743][T19122] iput+0x35/0x40 [ 1129.637442][T19122] ext4_orphan_cleanup+0x731/0x11e0 [ 1129.642670][T19122] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1129.648381][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.654247][T19122] ? ext4_register_li_request+0xec/0x9b0 [ 1129.660344][T19122] ext4_fill_super+0x8db7/0xaf70 [ 1129.665588][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1129.671145][T19122] ? do_raw_spin_lock+0x12c/0x2b0 [ 1129.676245][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.682082][T19122] ? find_held_lock+0x2b/0x80 [ 1129.686904][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.692590][T19122] ? sb_set_blocksize+0x176/0x1d0 [ 1129.697757][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.703819][T19122] ? setup_bdev_super+0x369/0x730 [ 1129.709287][T19122] get_tree_bdev_flags+0x38c/0x620 [ 1129.714469][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1129.720091][T19122] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1129.726009][T19122] ? apparmor_capable+0x114/0x1d0 [ 1129.731358][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.737106][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.742852][T19122] ? security_capable+0x7e/0x260 [ 1129.748278][T19122] vfs_get_tree+0x8e/0x340 [ 1129.752743][T19122] path_mount+0x7b9/0x23a0 [ 1129.757264][T19122] ? __pfx_path_mount+0x10/0x10 [ 1129.762213][T19122] ? putname+0x154/0x1a0 [ 1129.766613][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.772282][T19122] ? putname+0x154/0x1a0 [ 1129.776570][T19122] ? __x64_sys_mount+0x293/0x310 [ 1129.781672][T19122] __x64_sys_mount+0x293/0x310 [ 1129.786480][T19122] ? __pfx___x64_sys_mount+0x10/0x10 [ 1129.791792][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.797484][T19122] do_syscall_64+0xcd/0xfa0 [ 1129.802454][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.808893][T19122] RIP: 0033:0x7f7671b9076a [ 1129.813447][T19122] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.833296][T19122] RSP: 002b:00007f7672a22e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1129.841891][T19122] RAX: ffffffffffffffda RBX: 00007f7672a22ef0 RCX: 00007f7671b9076a [ 1129.850407][T19122] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7672a22eb0 [ 1129.858557][T19122] RBP: 0000200000000180 R08: 00007f7672a22ef0 R09: 0000000000800700 [ 1129.866583][T19122] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1129.874555][T19122] R13: 00007f7672a22eb0 R14: 000000000000046f R15: 000000000000002c [ 1129.882748][T19122] [ 1129.885829][T19122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1129.893107][T19122] CPU: 0 UID: 0 PID: 19122 Comm: syz.7.3897 Not tainted syzkaller #0 PREEMPT(full) [ 1129.902478][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1129.912918][T19122] Call Trace: [ 1129.916295][T19122] [ 1129.919316][T19122] dump_stack_lvl+0x3d/0x1f0 [ 1129.923969][T19122] vpanic+0x640/0x6f0 [ 1129.927989][T19122] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.934092][T19122] panic+0xca/0xd0 [ 1129.937850][T19122] ? __pfx_panic+0x10/0x10 [ 1129.942400][T19122] check_panic_on_warn+0xab/0xb0 [ 1129.947385][T19122] __warn+0xf6/0x3c0 [ 1129.951466][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1129.957119][T19122] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.963224][T19122] report_bug+0x3c3/0x580 [ 1129.967565][T19122] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.973592][T19122] handle_bug+0x184/0x210 [ 1129.977950][T19122] exc_invalid_op+0x17/0x50 [ 1129.982601][T19122] asm_exc_invalid_op+0x1a/0x20 [ 1129.987518][T19122] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1129.994236][T19122] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 40 5d a8 8b e8 35 ef ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 16 bd 2e ff 44 0f b6 2d 75 74 dc 0d [ 1130.014302][T19122] RSP: 0018:ffffc90002e87178 EFLAGS: 00010282 [ 1130.020401][T19122] RAX: 0000000000000000 RBX: ffff888054014f18 RCX: ffffc90018dc9000 [ 1130.028474][T19122] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 1130.036455][T19122] RBP: ffffc90002e87240 R08: 0000000000000001 R09: 0000000000000000 [ 1130.044438][T19122] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 1130.052591][T19122] R13: 0000000000000000 R14: 1ffff920005d0e32 R15: ffff888054015108 [ 1130.060685][T19122] ? __warn_printk+0x1a5/0x350 [ 1130.065585][T19122] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 1130.071788][T19122] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1130.078318][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.084092][T19122] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1130.089593][T19122] ext4_xattr_set_entry+0x158f/0x1f00 [ 1130.095020][T19122] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1130.100782][T19122] ? xattr_find_entry+0x289/0x330 [ 1130.106281][T19122] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 1130.111586][T19122] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 1130.117522][T19122] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1130.123789][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.129531][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.135187][T19122] ? dquot_initialize_needed+0x183/0x2a0 [ 1130.140842][T19122] __ext4_expand_extra_isize+0x346/0x480 [ 1130.146559][T19122] __ext4_mark_inode_dirty+0x544/0x870 [ 1130.152049][T19122] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1130.158060][T19122] ? __pfx___might_resched+0x10/0x10 [ 1130.163380][T19122] ? ext4_journal_check_start+0x22b/0x340 [ 1130.169122][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.174774][T19122] ? __ext4_journal_start_sb+0x19e/0x690 [ 1130.180600][T19122] ? ext4_evict_inode+0x5cf/0x18e0 [ 1130.185739][T19122] ext4_evict_inode+0x74e/0x18e0 [ 1130.190789][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1130.196180][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.201862][T19122] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1130.207261][T19122] evict+0x3e6/0x920 [ 1130.211178][T19122] ? __pfx_evict+0x10/0x10 [ 1130.215606][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.221274][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.226970][T19122] iput.part.0+0x6a9/0xb00 [ 1130.231418][T19122] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1130.236724][T19122] iput+0x35/0x40 [ 1130.240372][T19122] ext4_orphan_cleanup+0x731/0x11e0 [ 1130.245877][T19122] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1130.251639][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.257306][T19122] ? ext4_register_li_request+0xec/0x9b0 [ 1130.262978][T19122] ext4_fill_super+0x8db7/0xaf70 [ 1130.267965][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1130.273372][T19122] ? do_raw_spin_lock+0x12c/0x2b0 [ 1130.278432][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.284086][T19122] ? find_held_lock+0x2b/0x80 [ 1130.288822][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.294492][T19122] ? sb_set_blocksize+0x176/0x1d0 [ 1130.299552][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.305293][T19122] ? setup_bdev_super+0x369/0x730 [ 1130.310357][T19122] get_tree_bdev_flags+0x38c/0x620 [ 1130.315503][T19122] ? __pfx_ext4_fill_super+0x10/0x10 [ 1130.320824][T19122] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1130.326498][T19122] ? apparmor_capable+0x114/0x1d0 [ 1130.331559][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.337214][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.343226][T19122] ? security_capable+0x7e/0x260 [ 1130.348201][T19122] vfs_get_tree+0x8e/0x340 [ 1130.352713][T19122] path_mount+0x7b9/0x23a0 [ 1130.357588][T19122] ? __pfx_path_mount+0x10/0x10 [ 1130.362609][T19122] ? putname+0x154/0x1a0 [ 1130.367002][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.372745][T19122] ? putname+0x154/0x1a0 [ 1130.377006][T19122] ? __x64_sys_mount+0x293/0x310 [ 1130.381960][T19122] __x64_sys_mount+0x293/0x310 [ 1130.386833][T19122] ? __pfx___x64_sys_mount+0x10/0x10 [ 1130.392136][T19122] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1130.397801][T19122] do_syscall_64+0xcd/0xfa0 [ 1130.402334][T19122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.408419][T19122] RIP: 0033:0x7f7671b9076a [ 1130.412843][T19122] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.432568][T19122] RSP: 002b:00007f7672a22e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1130.441008][T19122] RAX: ffffffffffffffda RBX: 00007f7672a22ef0 RCX: 00007f7671b9076a [ 1130.449079][T19122] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7672a22eb0 [ 1130.457236][T19122] RBP: 0000200000000180 R08: 00007f7672a22ef0 R09: 0000000000800700 [ 1130.465405][T19122] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1130.473384][T19122] R13: 00007f7672a22eb0 R14: 000000000000046f R15: 000000000000002c [ 1130.481380][T19122] [ 1130.484730][T19122] Kernel Offset: disabled [ 1130.489075][T19122] Rebooting in 86400 seconds..