last executing test programs: 15m3.486467759s ago: executing program 32 (id=11): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 13m56.411208339s ago: executing program 0 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010300000000000000400a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 13m56.160559274s ago: executing program 0 (id=384): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) getrandom(0x0, 0x0, 0x0) 13m56.008576627s ago: executing program 0 (id=385): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 13m55.663808194s ago: executing program 0 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 13m55.31699004s ago: executing program 0 (id=388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000030900000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) clock_getres(0x6, 0x0) 13m55.253765131s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sync() 13m41.516140897s ago: executing program 33 (id=378): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="00d8", 0x2, 0x4044005, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 13m40.212161932s ago: executing program 34 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sync() 13m13.96093736s ago: executing program 1 (id=577): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x200000}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close(r0) 13m13.892674661s ago: executing program 1 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 13m13.251706993s ago: executing program 1 (id=582): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x1, 0xf2c2) 13m12.740858194s ago: executing program 1 (id=587): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13m10.544915176s ago: executing program 1 (id=600): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800800, &(0x7f0000000200)={[{@shortname_mixed}, {@utf8no}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@uni_xlate}, {@rodir}, {@shortname_lower}, {@uni_xlate}]}, 0x35, 0x34f, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) 13m9.623037543s ago: executing program 1 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) sync() 12m55.014097456s ago: executing program 35 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) sync() 12m20.397114965s ago: executing program 5 (id=901): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 12m20.15679712s ago: executing program 5 (id=903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nomblk_io_submit}, {@debug}, {@errors_continue}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@jqfmt_vfsv1}, {@acl}, {@jqfmt_vfsv1}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 12m19.65312242s ago: executing program 5 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 12m19.308392876s ago: executing program 5 (id=909): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 12m18.944620694s ago: executing program 5 (id=912): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 12m18.524955411s ago: executing program 5 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_sync_fs\x00', r1, 0x0, 0xc}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r2}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 12m3.997329823s ago: executing program 36 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_sync_fs\x00', r1, 0x0, 0xc}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r2}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 10m59.662054016s ago: executing program 8 (id=1296): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 10m59.388169872s ago: executing program 8 (id=1299): r0 = socket$packet(0x11, 0xa, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4040014, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x1000000}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x8000) 10m58.640416286s ago: executing program 8 (id=1307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0xb) 10m58.388801721s ago: executing program 8 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000500)='./bus/../file0\x00', 0x400100, 0xfd) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2000, &(0x7f0000000100)="850ab4561dce189e75b2bb9bce", 0xd, 0x0, &(0x7f0000000180), &(0x7f0000000340)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 10m58.087004047s ago: executing program 8 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 10m57.208004024s ago: executing program 8 (id=1324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 10m56.686608214s ago: executing program 37 (id=1324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 7m57.692971244s ago: executing program 9 (id=2741): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x94) 7m57.578382187s ago: executing program 9 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 7m57.42093491s ago: executing program 9 (id=2744): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 7m56.86938244s ago: executing program 9 (id=2746): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x7, 'veth0_macvtap\x00', {0x9}, 0x4}) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7m56.444893419s ago: executing program 9 (id=2751): capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x94) 7m56.083685866s ago: executing program 9 (id=2755): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m55.657472834s ago: executing program 38 (id=2755): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m24.772784761s ago: executing program 4 (id=3715): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") socket$caif_stream(0x25, 0x1, 0x0) creat(0x0, 0xecf86c37d53048fc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 5m24.500856376s ago: executing program 4 (id=3718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 5m24.209757382s ago: executing program 4 (id=3722): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x1) shutdown(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x9e469c245e046100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) symlink(&(0x7f0000000340)='./file1/file0\x00', &(0x7f0000000640)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e184000008001b0000000000"], 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m22.892971827s ago: executing program 4 (id=3730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m22.651052052s ago: executing program 4 (id=3735): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5m20.959825125s ago: executing program 4 (id=3741): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 5m20.480827724s ago: executing program 39 (id=3741): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 2.656685699s ago: executing program 6 (id=6193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mlockall(0x7) 2.524980332s ago: executing program 7 (id=6194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_channels={0x3c, 0x8, 0x8, 0x4, 0x5, 0x139f, 0x6, 0x3ff, 0xffffffff}}) 2.433497873s ago: executing program 7 (id=6196): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x13, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, 0x1, 0x41, 0x9, 0x6}}) 2.360933905s ago: executing program 6 (id=6197): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.263937397s ago: executing program 7 (id=6199): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x7}, 0x18) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.180827629s ago: executing program 6 (id=6200): r0 = open(&(0x7f0000000000)='./file0\x00', 0xca3c0, 0x104) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x1e2b, &(0x7f0000004bc0)={0x0, 0xb07b, 0x42, 0x2, 0x3b5}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000004c40)=[@ioring_restriction_sqe_op={0x1, 0x54}], 0x1) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x3c, 0x1a, 0x10, 0xa, 0x3, 0x3, 0x2, 0x75, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000600000008000000080000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r7}, 0x38) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50) 1.970694573s ago: executing program 3 (id=6202): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) 1.732239167s ago: executing program 2 (id=6204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r2, 0xffff, 0x5, 0x4) 1.625038519s ago: executing program 3 (id=6205): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000002c00000000000008000f0001000000", 0x24) 1.412815784s ago: executing program 2 (id=6206): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getrlimit(0x8, 0x0) 1.336988415s ago: executing program 3 (id=6207): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 992.416262ms ago: executing program 3 (id=6208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xfc) 776.880986ms ago: executing program 6 (id=6209): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 654.027249ms ago: executing program 7 (id=6210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 622.360628ms ago: executing program 3 (id=6211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) syz_pidfd_open(0x0, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 424.885463ms ago: executing program 7 (id=6212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x8804) 421.690563ms ago: executing program 2 (id=6213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x924}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 331.068914ms ago: executing program 2 (id=6214): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r2, 0x7) 275.601325ms ago: executing program 6 (id=6215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 188.840787ms ago: executing program 7 (id=6216): r0 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) unshare(0x2040400) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314", 0x10}], 0x1}}], 0x2, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) lseek(r3, 0x8, 0x2) 165.951847ms ago: executing program 6 (id=6217): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={0x0, r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 163.790578ms ago: executing program 2 (id=6218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 10.033511ms ago: executing program 3 (id=6219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) 0s ago: executing program 2 (id=6220): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) kernel console output (not intermixed with test programs): er that may corrupt user memory! [ 882.270342][ T28] audit: type=1326 audit(915.417:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.6.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 882.355580][ T28] audit: type=1326 audit(915.427:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.6.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 882.404120][ T28] audit: type=1326 audit(915.427:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.6.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 882.442330][ T28] audit: type=1326 audit(915.427:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.6.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 882.480207][ T28] audit: type=1326 audit(915.427:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.6.5317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 883.433081][ T28] audit: type=1107 audit(916.634:8016): pid=24232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 883.550677][ T28] audit: type=1326 audit(916.760:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.7.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 883.609838][ T28] audit: type=1326 audit(916.791:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.7.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 883.642691][ T28] audit: type=1326 audit(916.791:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.7.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 883.667318][ T28] audit: type=1326 audit(916.791:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24237 comm="syz.7.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 884.747313][T24271] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5343'. [ 885.055724][T24286] loop2: detected capacity change from 0 to 1024 [ 885.064808][T24286] EXT4-fs: Ignoring removed nobh option [ 885.070448][T24286] EXT4-fs: Ignoring removed bh option [ 885.076733][T24286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 885.160712][T24286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.225646][T24295] loop6: detected capacity change from 0 to 256 [ 885.311728][T24297] loop3: detected capacity change from 0 to 1024 [ 885.320013][T24297] EXT4-fs: Ignoring removed orlov option [ 885.357471][T24298] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.5349: Allocating blocks 497-513 which overlap fs metadata [ 885.402514][T24298] EXT4-fs (loop2): pa ffff888048a90828: logic 128, phys. 449, len 4 [ 885.411170][T24305] syz.7.5354[24305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 885.411300][T24305] syz.7.5354[24305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 885.423397][T24298] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 885.548317][T24297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 885.575172][T24306] ALSA: seq fatal error: cannot create timer (-19) [ 885.660896][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5357'. [ 885.671295][T24315] netlink: 'syz.6.5357': attribute type 10 has an invalid length. [ 885.681143][T24315] netlink: 'syz.6.5357': attribute type 10 has an invalid length. [ 885.681341][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.696155][T24315] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 886.251183][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 887.040874][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5371'. [ 887.045191][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 887.045213][ T28] audit: type=1326 audit(920.422:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.087736][T24366] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5371'. [ 887.088702][ T28] audit: type=1326 audit(920.422:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.127302][ T28] audit: type=1326 audit(920.422:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.161974][ T28] audit: type=1326 audit(920.422:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.201070][ T28] audit: type=1326 audit(920.422:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.231075][ T28] audit: type=1326 audit(920.474:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3cc9185b67 code=0x7ffc0000 [ 887.236802][T24366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 887.286313][ T28] audit: type=1326 audit(920.474:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3cc912ada9 code=0x7ffc0000 [ 887.291417][T24366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 887.358816][ T28] audit: type=1326 audit(920.474:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.6.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 887.388532][T24366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 887.395188][ T28] audit: type=1326 audit(920.474:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24373 comm="syz.7.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 887.417544][ T28] audit: type=1326 audit(920.474:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24373 comm="syz.7.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 887.462095][T24366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 887.474954][T24366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 887.483738][T24366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 887.495403][T24366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 887.511873][T24366] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 887.525771][T24366] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 887.722008][T24393] loop2: detected capacity change from 0 to 512 [ 887.755918][T24393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5380: bg 0: block 248: padding at end of block bitmap is not set [ 887.782731][T24393] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.5380: Failed to acquire dquot type 1 [ 887.796244][T24393] EXT4-fs (loop2): 1 truncate cleaned up [ 887.804133][T24393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.825458][T24393] syz.2.5380[24393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 887.825597][T24393] syz.2.5380[24393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 888.050576][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.273423][T24406] lo speed is unknown, defaulting to 1000 [ 888.290160][T24406] lo speed is unknown, defaulting to 1000 [ 888.813874][T24445] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5391'. [ 889.108075][T22538] kernel write not supported for file /83/oom_adj (pid: 22538 comm: kworker/0:13) [ 889.198872][T17157] Bluetooth: hci1: command 0x0c1a tx timeout [ 889.266724][T17157] Bluetooth: hci3: command 0x0406 tx timeout [ 889.314284][T24465] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5400'. [ 889.737759][T24468] lo speed is unknown, defaulting to 1000 [ 889.752141][T24468] lo speed is unknown, defaulting to 1000 [ 890.105053][T17157] Bluetooth: hci0: command 0x0c1a tx timeout [ 890.111304][T17157] Bluetooth: hci4: command 0x0c1a tx timeout [ 891.240041][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 891.730413][T24529] loop3: detected capacity change from 0 to 512 [ 891.823591][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 891.823610][ T28] audit: type=1326 audit(925.448:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfc7d8d80a code=0x7ffc0000 [ 891.829598][T24529] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 891.866750][ T28] audit: type=1326 audit(925.448:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfc7d8d80a code=0x7ffc0000 [ 891.910552][ T28] audit: type=1326 audit(925.448:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbfc7d8d417 code=0x7ffc0000 [ 891.933070][ T28] audit: type=1326 audit(925.448:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbfc7d9034a code=0x7ffc0000 [ 891.973521][ T28] audit: type=1326 audit(925.490:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfc7d8d510 code=0x7ffc0000 [ 892.017297][ T28] audit: type=1326 audit(925.490:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfc7d8e7ab code=0x7ffc0000 [ 892.039965][ T28] audit: type=1326 audit(925.647:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfc7d8d80a code=0x7ffc0000 [ 892.077347][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 892.083576][T17157] Bluetooth: hci0: command 0x0c1a tx timeout [ 892.102399][ T28] audit: type=1326 audit(925.647:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 892.130301][T24529] loop3: detected capacity change from 0 to 1024 [ 892.143257][T24529] EXT4-fs: Ignoring removed bh option [ 892.150088][ T28] audit: type=1326 audit(925.742:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 892.173956][ T28] audit: type=1326 audit(925.742:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.3.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 892.331061][T24529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.882946][T24573] netlink: 'syz.7.5420': attribute type 10 has an invalid length. [ 892.945439][T24573] team0: Port device dummy0 added [ 892.964736][T24573] netlink: 'syz.7.5420': attribute type 10 has an invalid length. [ 893.024850][T24573] team0: Port device dummy0 removed [ 893.049263][T24573] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 893.170201][T24581] loop2: detected capacity change from 0 to 512 [ 893.230995][T24581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.312979][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.391460][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.626491][T24604] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5433'. [ 893.702191][T24608] loop6: detected capacity change from 0 to 256 [ 893.796827][T24614] syz.6.5436[24614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 893.796930][T24614] syz.6.5436[24614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 893.924492][T24616] wg2: entered promiscuous mode [ 893.953371][T24610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5428'. [ 893.954488][T24616] wg2: entered allmulticast mode [ 893.985080][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5437'. [ 894.002184][T24618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.024205][T24620] loop6: detected capacity change from 0 to 512 [ 894.040376][T24618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.052189][T24618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.059373][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 894.060523][T24620] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 894.065753][T17157] Bluetooth: hci0: command 0x0c1a tx timeout [ 894.101718][T24618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.130090][T24620] EXT4-fs (loop6): 1 truncate cleaned up [ 894.137697][T24620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.321285][T24621] bond0: (slave dummy0): Releasing backup interface [ 894.367970][T24621] bridge_slave_0: left allmulticast mode [ 894.378577][T24621] bridge_slave_0: left promiscuous mode [ 894.387130][T24621] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.409009][T24621] bridge_slave_1: left allmulticast mode [ 894.418761][T24621] bridge_slave_1: left promiscuous mode [ 894.427331][T24621] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.456709][T24621] bond0: (slave bond_slave_0): Releasing backup interface [ 894.483703][T24621] bond0: (slave bond_slave_1): Releasing backup interface [ 894.558333][T24621] team0: Port device team_slave_0 removed [ 894.580453][T24621] team0: Port device team_slave_1 removed [ 894.602848][T24628] all: renamed from bridge_slave_0 (while UP) [ 894.652383][T24640] netlink: 'syz.2.5444': attribute type 13 has an invalid length. [ 894.695026][T24640] gretap0: refused to change device tx_queue_len [ 894.703600][T24640] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 894.717131][T24642] syz.7.5445[24642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.719501][T24642] syz.7.5445[24642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 894.847877][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.038802][T24657] loop2: detected capacity change from 0 to 1024 [ 895.096322][T24657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.407210][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.391807][T24683] tipc: New replicast peer: 255.255.255.255 [ 896.465060][T24683] tipc: Enabled bearer , priority 10 [ 896.536231][T24693] IPv6: Can't replace route, no match found [ 896.553610][T24692] loop6: detected capacity change from 0 to 512 [ 896.580440][T24692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.617385][T24692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.669271][T24692] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.5460: corrupted xattr block 19: overlapping e_value [ 896.735102][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.801042][T24704] loop3: detected capacity change from 0 to 1024 [ 896.921760][T24710] loop6: detected capacity change from 0 to 2048 [ 896.977004][T24704] __quota_error: 176 callbacks suppressed [ 896.977025][T24704] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 896.994286][T24704] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 897.004998][T24704] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.5466: Failed to acquire dquot type 0 [ 897.017808][T24704] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 897.034086][T24704] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.5466: corrupted inode contents [ 897.056504][T24710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.078826][T24704] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #13: comm syz.3.5466: mark_inode_dirty error [ 897.091986][T24704] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.5466: corrupted inode contents [ 897.097901][T24710] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #16: comm syz.6.5465: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 897.109045][T24704] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.5466: mark_inode_dirty error [ 897.164374][T24704] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.5466: corrupted inode contents [ 897.231291][T24704] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 897.259127][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.312236][T24704] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #13: comm syz.3.5466: corrupted inode contents [ 897.331107][T24704] EXT4-fs error (device loop3): ext4_truncate:4288: inode #13: comm syz.3.5466: mark_inode_dirty error [ 897.398675][T24704] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 897.417797][T24704] EXT4-fs (loop3): 1 truncate cleaned up [ 897.430857][T24704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.629202][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.639004][T24741] siw: device registration error -23 [ 897.649367][T24742] loop6: detected capacity change from 0 to 128 [ 897.730088][ T28] audit: type=1800 audit(931.639:8573): pid=24742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5478" name="bus" dev="loop6" ino=1048695 res=0 errno=0 [ 897.878535][T24749] syz.6.5478: attempt to access beyond end of device [ 897.878535][T24749] loop6: rw=2049, sector=577, nr_sectors = 464 limit=128 [ 897.955404][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.038796][T24756] loop2: detected capacity change from 0 to 1024 [ 898.046409][T24756] EXT4-fs: inline encryption not supported [ 898.053735][T24756] EXT4-fs: Ignoring removed bh option [ 898.060059][T24756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 898.103737][T24756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.140761][T24756] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.239580][T24756] $Hÿ: renamed from bond0 (while UP) [ 898.265887][T24756] $Hÿ: entered promiscuous mode [ 898.271311][T24756] bond_slave_0: entered promiscuous mode [ 898.281801][T24756] bond_slave_1: entered promiscuous mode [ 898.531428][T24779] loop6: detected capacity change from 0 to 256 [ 898.608991][ T28] audit: type=1800 audit(932.562:8574): pid=24779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5485" name=93FDD4787ADAD4209069 dev="loop6" ino=1048696 res=0 errno=0 [ 898.843045][T24785] netlink: 'syz.3.5486': attribute type 10 has an invalid length. [ 898.934259][T24785] team0: Port device dummy0 added [ 899.377359][T24812] loop2: detected capacity change from 0 to 512 [ 899.380425][T24814] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5494'. [ 899.385157][T24812] ext4: Unknown parameter 'rootcontext' [ 899.514077][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5495'. [ 899.528232][ C1] vcan0: j1939_session_tx_dat: 0xffff8880693a1400: queue data error: -100 [ 899.603671][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.620562][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.630332][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.639858][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.649392][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.659020][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.670228][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.679816][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.689951][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 899.699622][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 900.147874][T24827] tipc: Started in network mode [ 900.163027][T24827] tipc: Node identity c2c5d245b253, cluster identity 4711 [ 900.180746][T24827] tipc: Enabled bearer , priority 0 [ 900.191681][T24827] syzkaller0: entered promiscuous mode [ 900.197453][T24827] syzkaller0: entered allmulticast mode [ 900.240862][T24827] tipc: Resetting bearer [ 900.268983][T24826] tipc: Resetting bearer [ 900.306994][T24826] tipc: Disabling bearer [ 900.558024][T24837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.705044][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.713566][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.722055][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.729643][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.737345][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.749142][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.770854][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.786430][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.802335][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.813024][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.840722][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.850919][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.858545][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.876389][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.890190][T24837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.891564][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.920819][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.927526][T24848] tipc: Enabled bearer , priority 0 [ 900.935688][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.944589][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.952158][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.959821][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.969782][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.977334][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.990529][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 900.999401][T24864] syz.7.5507[24864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 900.999591][T24864] syz.7.5507[24864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 901.011346][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.031684][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.041428][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.071294][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.083184][T24837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.099811][T24864] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5507'. [ 901.108919][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.108955][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.108980][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109006][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109031][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109056][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109081][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109106][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.109132][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.178038][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.185658][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.202292][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.210148][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.219183][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.227313][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.235687][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.243410][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.251057][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.259775][T24862] syzkaller0: entered promiscuous mode [ 901.266975][T24862] syzkaller0: entered allmulticast mode [ 901.283166][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.290664][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.314043][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.340279][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.347769][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.356165][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.363855][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.393668][ T27] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 901.412731][T24837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.430441][ T27] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 901.471784][T24847] tipc: Resetting bearer [ 901.580866][T24847] tipc: Disabling bearer [ 901.627873][ T28] audit: type=1326 audit(935.731:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.659853][ T28] audit: type=1326 audit(935.731:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.713880][ T28] audit: type=1326 audit(935.731:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.759960][ T28] audit: type=1326 audit(935.731:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.793840][T24837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.803525][ T28] audit: type=1326 audit(935.731:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.867798][T24837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.876373][ T28] audit: type=1326 audit(935.731:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.913506][ T28] audit: type=1326 audit(935.731:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 901.937207][T24837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.967183][T24837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.975688][ T28] audit: type=1326 audit(935.731:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 902.016901][ T28] audit: type=1326 audit(935.731:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24883 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 902.354740][ T28] audit: type=1326 audit(936.497:8584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24914 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 902.410511][ T28] audit: type=1326 audit(936.518:8585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24914 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 902.455374][ T28] audit: type=1326 audit(936.518:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24914 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 902.509919][ T28] audit: type=1326 audit(936.518:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24914 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 902.708330][T24923] tipc: Enabled bearer , priority 0 [ 902.759097][T24918] tipc: Resetting bearer [ 903.591181][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5527'. [ 903.773650][T10023] tipc: Node number set to 2658626776 [ 904.494394][T24954] syz.7.5535[24954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.494536][T24954] syz.7.5535[24954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 904.533407][T24954] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5535'. [ 905.085456][ T5856] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 905.257053][ T5856] usb 3-1: device descriptor read/64, error -71 [ 905.518896][ T5856] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 905.680981][ T5856] usb 3-1: device descriptor read/64, error -71 [ 905.827913][ T5856] usb usb3-port1: attempt power cycle [ 906.256866][ T5856] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 906.322033][ T5856] usb 3-1: device descriptor read/8, error -71 [ 906.588701][ T5856] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 906.639559][ T5856] usb 3-1: device descriptor read/8, error -71 [ 906.762934][ T5856] usb usb3-port1: unable to enumerate USB device [ 908.487053][T24918] tipc: Disabling bearer [ 908.662447][T24989] loop3: detected capacity change from 0 to 256 [ 908.680874][T24991] unsupported nla_type 52263 [ 908.682880][T24989] FAT-fs (loop3): Unrecognized mount option "fs" or missing value [ 908.799967][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 908.799984][ T28] audit: type=1326 audit(943.255:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 908.874525][ T28] audit: type=1326 audit(943.255:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 908.908570][T25000] qrtr: Invalid version 183 [ 908.928119][ T28] audit: type=1326 audit(943.265:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 908.989672][ T28] audit: type=1326 audit(943.265:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.018357][ T28] audit: type=1326 audit(943.265:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.042377][ T28] audit: type=1326 audit(943.265:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.064952][ T28] audit: type=1326 audit(943.265:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.107480][ T28] audit: type=1326 audit(943.265:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.166993][ T28] audit: type=1326 audit(943.265:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.231913][ T28] audit: type=1326 audit(943.265:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24993 comm="syz.2.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 909.677804][T25015] random: crng reseeded on system resumption [ 910.295754][T25019] netlink: 'syz.2.5557': attribute type 10 has an invalid length. [ 910.327432][T25021] loop3: detected capacity change from 0 to 512 [ 910.337264][T25019] macvlan0: entered promiscuous mode [ 910.342668][T25019] macvlan0: entered allmulticast mode [ 910.391935][T25019] veth1_vlan: entered allmulticast mode [ 910.425922][T25019] $Hÿ: (slave macvlan0): Enslaving as an active interface with an up link [ 910.429636][T25021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.441852][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5557'. [ 910.676852][T25032] sd 0:0:1:0: device reset [ 911.250712][T25040] loop2: detected capacity change from 0 to 512 [ 911.271442][T25021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 911.363241][T25040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5565: bg 0: block 248: padding at end of block bitmap is not set [ 911.409806][T25040] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.5565: Failed to acquire dquot type 1 [ 911.449199][T25040] EXT4-fs (loop2): 1 truncate cleaned up [ 911.479915][T25040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.608772][T25021] EXT4-fs (loop3): Remounting filesystem read-only [ 911.637714][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.996888][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.417827][T25071] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5574'. [ 912.506987][T25075] loop3: detected capacity change from 0 to 512 [ 912.515119][T25075] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 912.760646][T25078] random: crng reseeded on system resumption [ 914.116790][T25091] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 914.123503][T25091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 914.167707][T25091] vhci_hcd vhci_hcd.0: Device attached [ 914.214560][T25091] loop6: detected capacity change from 0 to 512 [ 914.329494][T25091] __quota_error: 10 callbacks suppressed [ 914.352349][T25091] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 914.387303][ T5856] vhci_hcd: vhci_device speed not set [ 914.407073][T25091] EXT4-fs warning (device loop6): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 914.472871][ T5856] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 914.481896][T25091] EXT4-fs (loop6): mount failed [ 914.624368][T25091] loop6: detected capacity change from 0 to 512 [ 914.659194][T25091] EXT4-fs: Ignoring removed nobh option [ 914.729048][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #3: comm syz.6.5580: corrupted inode contents [ 914.755526][T25117] loop2: detected capacity change from 0 to 512 [ 914.762930][T25117] EXT4-fs: Ignoring removed bh option [ 914.776964][T25091] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #3: comm syz.6.5580: mark_inode_dirty error [ 914.809449][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #3: comm syz.6.5580: corrupted inode contents [ 914.809920][T25091] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.5580: mark_inode_dirty error [ 914.825530][T25091] Quota error (device loop6): write_blk: dquota write failed [ 914.825683][T25091] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 914.825736][T25091] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.5580: Failed to acquire dquot type 0 [ 914.835176][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.5580: corrupted inode contents [ 914.874454][T25117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.890657][T25091] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #16: comm syz.6.5580: mark_inode_dirty error [ 914.959406][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.5580: corrupted inode contents [ 914.959913][T25091] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.5580: mark_inode_dirty error [ 914.960486][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.5580: corrupted inode contents [ 914.988754][T25126] loop3: detected capacity change from 0 to 512 [ 915.017656][T25091] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 915.044729][T25091] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #16: comm syz.6.5580: corrupted inode contents [ 915.065698][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.066626][T25091] EXT4-fs error (device loop6): ext4_truncate:4288: inode #16: comm syz.6.5580: mark_inode_dirty error [ 915.067023][T25091] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 915.099202][T25091] EXT4-fs (loop6): 1 truncate cleaned up [ 915.101531][T25091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.111934][T25091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.180030][T25136] loop2: detected capacity change from 0 to 512 [ 915.181276][T25136] EXT4-fs: Ignoring removed nobh option [ 915.196454][T25136] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 915.200380][T25136] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5589: invalid indirect mapped block 256 (level 1) [ 915.221726][ T28] audit: type=1107 audit(949.991:8621): pid=25090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W‰í' [ 915.221779][ T28] audit: type=1326 audit(949.991:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.221827][ T28] audit: type=1326 audit(949.991:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.221874][ T28] audit: type=1326 audit(949.991:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.222501][ T28] audit: type=1326 audit(949.991:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.222551][ T28] audit: type=1326 audit(949.991:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.222598][ T28] audit: type=1326 audit(949.991:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25090 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 915.230300][T25092] vhci_hcd: connection reset by peer [ 915.230816][ T8003] vhci_hcd: stop threads [ 915.246675][T25136] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5589: invalid indirect mapped block 2683928664 (level 1) [ 915.339065][ T8003] vhci_hcd: release socket [ 915.377517][T25126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.383071][ T8003] vhci_hcd: disconnect device [ 915.405721][T25136] EXT4-fs (loop2): 1 truncate cleaned up [ 915.426458][T25136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.454591][T25136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.5589: Invalid block bitmap block 3 in block_group 0 [ 915.455576][T25136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.5589: Invalid block bitmap block 3 in block_group 0 [ 915.456087][T25136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.5589: Invalid block bitmap block 3 in block_group 0 [ 915.493548][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.597650][T25142] loop2: detected capacity change from 0 to 164 [ 915.607558][T25142] Unable to read rock-ridge attributes [ 915.624902][T25142] Unable to read rock-ridge attributes [ 915.664667][T25142] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 915.981907][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.072124][T25154] usb usb8: usbfs: process 25154 (syz.7.5591) did not claim interface 0 before use [ 916.205185][T25154] lo speed is unknown, defaulting to 1000 [ 916.220574][T25154] lo speed is unknown, defaulting to 1000 [ 916.815445][T25156] program syz.6.5596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.835240][T25156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 917.052473][T25181] loop2: detected capacity change from 0 to 164 [ 917.081162][T25181] Unable to read rock-ridge attributes [ 917.094472][T25181] Unable to read rock-ridge attributes [ 917.137111][T25181] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 918.812828][T25229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5601'. [ 919.313519][T25258] program syz.7.5616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.332102][T25258] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 919.369950][T25258] netlink: 'syz.7.5616': attribute type 30 has an invalid length. [ 919.386841][ T5856] vhci_hcd: vhci_device speed not set [ 919.419560][T25258] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.428456][T25258] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.437289][T25258] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.446327][T25258] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.500994][T25258] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.510800][T25258] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.520428][T25258] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.529698][T25258] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.621835][T25274] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5619'. [ 919.687991][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5622'. [ 920.145515][T25294] syz.7.5631[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.145740][T25294] syz.7.5631[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.172142][T25294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5631'. [ 920.193106][T25294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5631'. [ 920.265635][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 920.265652][ T28] audit: type=1326 audit(955.280:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.400673][T25304] smc: net device bond0 applied user defined pnetid SYZ0 [ 920.419840][ T28] audit: type=1326 audit(955.458:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.632448][ T28] audit: type=1326 audit(955.678:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.680538][ T28] audit: type=1326 audit(955.678:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.734133][ T28] audit: type=1326 audit(955.678:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.756291][ T28] audit: type=1326 audit(955.783:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 920.876320][ T28] audit: type=1326 audit(955.920:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25297 comm="syz.3.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 921.039258][ T28] audit: type=1326 audit(956.098:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25325 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 921.067337][ T28] audit: type=1326 audit(956.098:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25325 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 921.096222][ T28] audit: type=1326 audit(956.119:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25325 comm="syz.6.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 921.242147][T25324] loop2: detected capacity change from 0 to 8192 [ 921.283274][T25324] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 921.295544][T25324] FAT-fs (loop2): Filesystem has been set read-only [ 921.724366][T25331] loop3: detected capacity change from 0 to 32768 [ 921.878087][T25331] loop3: p1 p2 p3 < p5 p6 > [ 922.181340][T25331] loop3: p1 size 242222080 extends beyond EOD, truncated [ 922.350992][T25356] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 922.412111][T25331] loop3: p2 start 4294967295 is beyond EOD, truncated [ 922.436140][T25358] loop2: detected capacity change from 0 to 512 [ 922.448427][T25358] EXT4-fs: Ignoring removed bh option [ 922.473068][T25358] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.5657: corrupted inode contents [ 922.495796][T25358] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 922.506554][T25358] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #15: comm syz.2.5657: corrupted inode contents [ 922.554234][T25358] EXT4-fs error (device loop2): ext4_evict_inode:300: inode #15: comm syz.2.5657: mark_inode_dirty error [ 922.579814][T25358] EXT4-fs (loop2): 1 orphan inode deleted [ 922.629326][T25358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.734066][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.305087][T25400] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 924.093652][T25419] loop9: detected capacity change from 0 to 7 [ 924.112194][ C1] blk_print_req_error: 32 callbacks suppressed [ 924.112213][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.127728][ C1] buffer_io_error: 32 callbacks suppressed [ 924.127743][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.154654][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.163930][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.184240][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.193469][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.201861][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.211134][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.219310][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.228795][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.237150][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.246433][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.256807][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.266067][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.274070][T25419] ldm_validate_partition_table(): Disk read failed. [ 924.289726][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.298999][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.307498][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.316783][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.324922][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 924.334230][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 924.342680][T25419] Dev loop9: unable to read RDB block 0 [ 924.353122][T25419] loop9: unable to read partition table [ 924.372140][T25419] loop9: partition table beyond EOD, truncated [ 924.380363][T25431] loop2: detected capacity change from 0 to 128 [ 924.387050][T25419] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 924.387050][T25419] ) failed (rc=-5) [ 925.089741][T25453] netlink: 'syz.3.5685': attribute type 1 has an invalid length. [ 925.097868][T25453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5685'. [ 925.367868][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5687'. [ 925.378393][T25458] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5687'. [ 925.470150][T25460] loop6: detected capacity change from 0 to 512 [ 925.519876][T25460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.549827][T25460] vlan0: entered allmulticast mode [ 925.558118][T25460] bridge_slave_0: entered allmulticast mode [ 925.564454][T25460] bridge0: port 1(vlan0) entered blocking state [ 925.572383][T25460] bridge0: port 1(vlan0) entered disabled state [ 925.581590][T25460] vlan0: entered promiscuous mode [ 925.587143][T25460] bridge_slave_0: entered promiscuous mode [ 925.630607][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.722124][T25474] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5691'. [ 925.736642][T25476] netem: change failed [ 926.008997][T25489] loop2: detected capacity change from 0 to 1024 [ 926.024909][T25489] EXT4-fs: inline encryption not supported [ 926.065551][T25489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.160708][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.275456][T25502] loop2: detected capacity change from 0 to 512 [ 926.300490][T25502] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 926.309645][T25502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 926.331897][T25502] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.5699: corrupted inode contents [ 926.344449][T25502] EXT4-fs (loop2): Remounting filesystem read-only [ 926.351488][T25502] EXT4-fs (loop2): 1 truncate cleaned up [ 926.357639][ T2937] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 926.376472][ T2937] __quota_error: 814 callbacks suppressed [ 926.376492][ T2937] Quota error (device loop2): write_blk: dquota write failed [ 926.401313][ T2937] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 926.414858][ T2937] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 926.440036][ T2937] Quota error (device loop2): write_blk: dquota write failed [ 926.448421][ T2937] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 926.467261][ T2937] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 926.484549][ T2937] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 926.495756][ T2937] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 926.516116][T25502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 926.602777][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.432138][ T28] audit: type=1326 audit(962.803:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.6.5710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 927.462561][ T28] audit: type=1326 audit(962.803:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.6.5710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 927.498314][ T28] audit: type=1326 audit(962.803:9480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25526 comm="syz.2.5709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f246e98eba9 code=0x0 [ 927.533099][ T28] audit: type=1326 audit(962.835:9481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.6.5710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc918eba9 code=0x7ffc0000 [ 927.624516][T25486] netlink: 'syz.7.5696': attribute type 1 has an invalid length. [ 927.713533][T25486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 927.726802][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5696'. [ 927.745578][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5696'. [ 928.288065][T25580] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 928.309957][T25583] netlink: 8 bytes leftover after parsing attributes in process `ÿÿÿ'. [ 930.096303][T25634] loop6: detected capacity change from 0 to 2048 [ 930.609930][T25634] loop6: p1 < > p4 [ 930.624609][T25634] loop6: p4 size 8388608 extends beyond EOD, truncated [ 931.166517][T25651] loop6: detected capacity change from 0 to 1024 [ 931.176716][T25651] ext4: Unknown parameter 'noacl' [ 935.602055][T25640] netlink: 'syz.7.5737': attribute type 4 has an invalid length. [ 935.636923][T25608] netlink: 'syz.2.5730': attribute type 1 has an invalid length. [ 935.659778][T25608] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 935.684777][T25614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5730'. [ 935.726100][T25614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5730'. [ 936.011061][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 936.011079][ T28] audit: type=1326 audit(971.817:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.7.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.089568][ T28] audit: type=1326 audit(971.817:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.7.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.118221][ T28] audit: type=1326 audit(971.848:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.7.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.129999][T25670] loop6: detected capacity change from 0 to 164 [ 936.157966][ T28] audit: type=1326 audit(971.848:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.7.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.196488][ T28] audit: type=1326 audit(971.848:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.7.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.231492][ T28] audit: type=1326 audit(972.048:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.7.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.254645][ T28] audit: type=1326 audit(972.048:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.7.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.283845][T25670] Unable to read rock-ridge attributes [ 936.317090][ T28] audit: type=1326 audit(972.068:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.7.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.374010][ T28] audit: type=1326 audit(972.068:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.7.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.387134][T25670] Unable to read rock-ridge attributes [ 936.421338][T25670] syz.6.5745: attempt to access beyond end of device [ 936.421338][T25670] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 936.432359][ T28] audit: type=1326 audit(972.068:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.7.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 936.460282][T25670] syz.6.5745: attempt to access beyond end of device [ 936.460282][T25670] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 936.802484][T25685] tipc: Enabled bearer , priority 0 [ 936.826260][T25685] tipc: Disabling bearer [ 937.039576][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5753'. [ 937.781825][T25719] loop2: detected capacity change from 0 to 2048 [ 937.864995][T25719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.909652][T25719] EXT4-fs (loop2): shut down requested (1) [ 937.993801][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.299365][T25727] netlink: 'syz.6.5761': attribute type 1 has an invalid length. [ 939.372585][T25757] loop2: detected capacity change from 0 to 512 [ 939.402385][T25727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.425072][T25752] netlink: 830 bytes leftover after parsing attributes in process `syz.7.5770'. [ 939.470785][T25728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5761'. [ 939.482091][T25728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5761'. [ 939.611620][T25796] loop2: detected capacity change from 0 to 512 [ 939.630466][T25796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 939.663497][T25796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.094143][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.455832][T25818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5782'. [ 940.892430][T25820] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5783'. [ 940.926993][T25838] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 940.985541][T10023] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 940.995732][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 940.995833][ T28] audit: type=1326 audit(977.042:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cc918e7ab code=0x7ffc0000 [ 941.058356][ T28] audit: type=1326 audit(977.074:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25828 comm="syz.6.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cc918e7ab code=0x7ffc0000 [ 941.076218][T25841] syz.7.5790[25841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 941.080502][T25841] syz.7.5790[25841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 941.088289][ T28] audit: type=1326 audit(977.095:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.127050][ T28] audit: type=1326 audit(977.095:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.160811][ T28] audit: type=1326 audit(977.095:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.190779][ T28] audit: type=1326 audit(977.095:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.217505][T25845] loop3: detected capacity change from 0 to 512 [ 941.220121][ T28] audit: type=1326 audit(977.095:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.250086][ T28] audit: type=1326 audit(977.105:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.273869][ T28] audit: type=1326 audit(977.105:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.277848][T25829] loop6: detected capacity change from 0 to 1024 [ 941.296390][ T28] audit: type=1326 audit(977.105:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.7.5790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 941.354723][T25829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.375400][T25845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.397397][T10023] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 941.405149][T10023] usb 7-1: can't read configurations, error -71 [ 941.588815][T25858] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.5789: iget: bad i_size value: 2533274857506816 [ 941.734831][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.759263][T25861] netlink: 'syz.2.5792': attribute type 3 has an invalid length. [ 942.008140][T25873] netlink: 'syz.7.5796': attribute type 3 has an invalid length. [ 942.024056][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.191857][T25880] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5798'. [ 942.240062][T25883] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5797'. [ 942.756556][T25897] loop2: detected capacity change from 0 to 512 [ 942.813205][T25897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 942.967802][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 943.267317][T25912] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5811'. [ 943.357780][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5813'. [ 943.435159][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5813'. [ 945.886940][T25954] 9pnet: Could not find request transport: f [ 946.060051][T25965] loop2: detected capacity change from 0 to 512 [ 946.076248][T25965] EXT4-fs: Ignoring removed bh option [ 946.087069][T25965] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 946.117122][T25965] EXT4-fs (loop2): 1 truncate cleaned up [ 946.125149][T25965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.336882][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.798505][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5836'. [ 947.864480][T26002] geneve2: entered promiscuous mode [ 949.614039][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 949.614054][ T28] audit: type=1326 audit(986.087:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 949.687106][ T28] audit: type=1326 audit(986.129:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 949.727460][ T28] audit: type=1326 audit(986.129:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 950.055671][T26057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5856'. [ 950.165176][T26057] team1: entered promiscuous mode [ 950.170488][T26057] team1: entered allmulticast mode [ 950.183899][ T28] audit: type=1326 audit(986.675:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26059 comm="syz.7.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 950.238096][ T28] audit: type=1326 audit(986.675:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26059 comm="syz.7.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 950.296825][ T28] audit: type=1326 audit(986.706:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26059 comm="syz.7.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 950.361532][ T28] audit: type=1326 audit(986.706:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26059 comm="syz.7.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 950.391397][ T28] audit: type=1326 audit(986.706:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26059 comm="syz.7.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 951.825338][T26109] loop3: detected capacity change from 0 to 512 [ 951.980594][T26117] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5865'. [ 952.335019][T26126] IPv6: Can't replace route, no match found [ 952.368500][T26128] lo speed is unknown, defaulting to 1000 [ 952.376449][T26128] lo speed is unknown, defaulting to 1000 [ 952.969100][T26146] loop6: detected capacity change from 0 to 128 [ 953.069287][T26146] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 953.969703][T17706] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 954.162420][T26132] loop3: detected capacity change from 0 to 8192 [ 954.170171][T26132] FAT-fs (loop3): Unrecognized mount option "A" or missing value [ 954.234531][T26179] bond0: (slave dummy0): Releasing backup interface [ 954.360781][T26179] bond0: (slave bond_slave_0): Releasing backup interface [ 954.393660][T26179] bond0: (slave bond_slave_1): Releasing backup interface [ 954.425147][T26179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.447237][T26179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.462906][T26179] vlan0: left promiscuous mode [ 954.470682][T26179] bridge_slave_0: left promiscuous mode [ 954.479810][T26188] netlink: 'syz.7.5882': attribute type 3 has an invalid length. [ 954.488057][T26179] bridge0: port 1(vlan0) entered disabled state [ 954.688814][T26192] loop2: detected capacity change from 0 to 1024 [ 954.716645][T26192] EXT4-fs: Ignoring removed orlov option [ 954.725827][ T28] audit: type=1326 audit(991.439:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 954.751472][ T28] audit: type=1326 audit(991.439:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 954.773903][ T28] audit: type=1326 audit(991.470:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 954.796320][T26192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.874254][ T28] audit: type=1326 audit(991.470:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 954.963201][ T28] audit: type=1326 audit(991.470:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.007206][ T28] audit: type=1326 audit(991.544:9712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.045862][ T28] audit: type=1326 audit(991.544:9713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.075772][ T28] audit: type=1326 audit(991.544:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.100970][ T28] audit: type=1326 audit(991.544:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.123897][ T28] audit: type=1326 audit(991.544:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.5886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 955.635211][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.665495][T26208] pim6reg: entered allmulticast mode [ 955.681003][T26212] pim6reg: left allmulticast mode [ 956.344771][T26224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5891'. [ 956.508765][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.552508][T26247] loop6: detected capacity change from 0 to 512 [ 956.606989][T26247] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 956.640685][T26247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 956.650585][T26247] System zones: 1-12 [ 956.661751][T26247] EXT4-fs (loop6): orphan cleanup on readonly fs [ 956.669028][T26247] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.5898: invalid indirect mapped block 12 (level 1) [ 956.689483][T26247] EXT4-fs (loop6): Remounting filesystem read-only [ 956.697044][T26247] EXT4-fs (loop6): 1 truncate cleaned up [ 956.704287][T26247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 956.776485][T26247] net_ratelimit: 990 callbacks suppressed [ 956.776508][T26247] openvswitch: netlink: Message has 8999 unknown bytes. [ 956.895574][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 957.510887][T26267] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 957.658128][T26285] loop2: detected capacity change from 0 to 512 [ 957.752807][T26285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.023524][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.263491][T26313] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 958.270102][T26313] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 958.312023][T26313] vhci_hcd vhci_hcd.0: Device attached [ 958.344991][T26318] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 958.351684][T26318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 958.382326][T26318] vhci_hcd vhci_hcd.0: Device attached [ 958.424554][T26313] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 958.431251][T26313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 958.438786][T26318] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 958.445439][T26318] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 958.464176][T26318] vhci_hcd vhci_hcd.0: Device attached [ 958.470767][T26313] vhci_hcd vhci_hcd.0: Device attached [ 958.570766][T26313] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 958.577453][T26313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 958.604881][T26313] vhci_hcd vhci_hcd.0: Device attached [ 958.636931][T22537] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 958.652950][T26318] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(21) [ 958.659666][T26318] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 958.697957][T26313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 958.706091][T26318] vhci_hcd vhci_hcd.0: Device attached [ 958.761892][T26313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 958.802274][T26313] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(28) [ 958.808979][T26313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 958.836794][T26313] vhci_hcd vhci_hcd.0: Device attached [ 958.859458][T26318] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(31) [ 958.866159][T26318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 958.933801][T26318] vhci_hcd vhci_hcd.0: Device attached [ 958.976104][T26336] vhci_hcd: connection closed [ 958.976854][T26327] vhci_hcd: connection closed [ 958.981625][T26330] vhci_hcd: connection closed [ 958.986483][ T11] vhci_hcd: stop threads [ 958.989641][T26324] vhci_hcd: connection closed [ 958.991611][T26321] vhci_hcd: connection reset by peer [ 959.005613][T26315] vhci_hcd: connection closed [ 959.015330][T26342] vhci_hcd: connection closed [ 959.021819][ T11] vhci_hcd: release socket [ 959.043165][ T11] vhci_hcd: disconnect device [ 959.052091][ T11] vhci_hcd: stop threads [ 959.066455][ T11] vhci_hcd: release socket [ 959.082419][ T11] vhci_hcd: disconnect device [ 959.093273][ T11] vhci_hcd: stop threads [ 959.097665][ T11] vhci_hcd: release socket [ 959.112470][ T11] vhci_hcd: disconnect device [ 959.122406][ T11] vhci_hcd: stop threads [ 959.126742][ T11] vhci_hcd: release socket [ 959.158501][ T11] vhci_hcd: disconnect device [ 959.163955][ T11] vhci_hcd: stop threads [ 959.168269][ T11] vhci_hcd: release socket [ 959.193750][ T11] vhci_hcd: disconnect device [ 959.207596][ T11] vhci_hcd: stop threads [ 959.213596][ T11] vhci_hcd: release socket [ 959.225957][ T11] vhci_hcd: disconnect device [ 959.234110][ T11] vhci_hcd: stop threads [ 959.242915][ T11] vhci_hcd: release socket [ 959.255497][ T11] vhci_hcd: disconnect device [ 959.508012][T26368] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 959.531395][T26368] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0/file1 [ 959.559345][T26346] vhci_hcd: connection closed [ 959.576822][ T2949] vhci_hcd: stop threads [ 959.601252][ T2949] vhci_hcd: release socket [ 959.620920][ T2949] vhci_hcd: disconnect device [ 959.976726][T26374] loop3: detected capacity change from 0 to 1024 [ 959.993995][T26374] EXT4-fs: Ignoring removed mblk_io_submit option [ 960.007085][T26374] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 4194309)! [ 960.021003][T26374] EXT4-fs (loop3): group descriptors corrupted! [ 960.158521][T26399] netlink: 360 bytes leftover after parsing attributes in process `syz.6.5927'. [ 960.657294][T26413] syz.7.5930: attempt to access beyond end of device [ 960.657294][T26413] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 960.701011][T26413] FAT-fs (loop15): unable to read boot sector [ 960.825054][T26421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5932'. [ 960.838057][T26421] unsupported nlmsg_type 40 [ 961.166623][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 961.166640][ T28] audit: type=1326 audit(998.207:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.246991][ T28] audit: type=1326 audit(998.238:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.314284][ T28] audit: type=1326 audit(998.238:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.371241][ T28] audit: type=1326 audit(998.238:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.409557][ T28] audit: type=1326 audit(998.270:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.484407][ T28] audit: type=1326 audit(998.270:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.545850][ T28] audit: type=1326 audit(998.270:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.643758][ T28] audit: type=1326 audit(998.270:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.719458][ T28] audit: type=1326 audit(998.270:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.828328][ T28] audit: type=1326 audit(998.270:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26438 comm="syz.7.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 961.870376][T26458] netlink: 'syz.6.5944': attribute type 10 has an invalid length. [ 961.890013][T26458] netlink: 'syz.6.5944': attribute type 10 has an invalid length. [ 961.903177][T26458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 962.099605][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5946'. [ 962.150343][T26469] tipc: Started in network mode [ 962.160199][T26469] tipc: Node identity 0e94cc7ee65f, cluster identity 4711 [ 962.176773][T26469] tipc: Enabled bearer , priority 0 [ 962.217683][T26475] syzkaller0: entered promiscuous mode [ 962.238369][T26475] syzkaller0: entered allmulticast mode [ 962.348676][T26469] tipc: Resetting bearer [ 962.395922][T26467] tipc: Resetting bearer [ 962.503783][T26467] tipc: Disabling bearer [ 963.228006][T26514] loop3: detected capacity change from 0 to 1024 [ 963.268290][T26514] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.274815][T26514] EXT4-fs: Ignoring removed bh option [ 963.313752][T26514] ext3: Unknown parameter 'subj_type' [ 963.543802][T22537] vhci_hcd: vhci_device speed not set [ 963.597479][T26530] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 963.787063][T26545] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5967'. [ 964.610854][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5977'. [ 964.833519][ T5857] usb usb38-port1: attempt power cycle [ 964.898664][T26583] loop2: detected capacity change from 0 to 1024 [ 964.911007][T26583] EXT4-fs: Ignoring removed bh option [ 964.919790][T26583] EXT4-fs: inline encryption not supported [ 964.931025][T26583] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 964.970358][T26583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 965.004004][T26583] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.5981: lblock 2 mapped to illegal pblock 2 (length 1) [ 965.047397][T26583] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.5981: lblock 0 mapped to illegal pblock 48 (length 1) [ 965.098339][T26583] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.5981: Failed to acquire dquot type 0 [ 965.142905][T26583] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 965.174445][T26583] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.5981: mark_inode_dirty error [ 965.193187][T26583] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 965.210159][T26583] EXT4-fs (loop2): 1 orphan inode deleted [ 965.217649][T26583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.240276][ T2937] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 965.300409][ T2937] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:8: Failed to release dquot type 0 [ 965.406264][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.431092][T22396] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 965.451133][ T5857] usb usb38-port1: unable to enumerate USB device [ 965.461547][T22396] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 965.484290][T22396] EXT4-fs error (device loop2): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 966.178127][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 966.178143][ T28] audit: type=1326 audit(1003.464:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.7.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 966.223181][ T28] audit: type=1326 audit(1003.485:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.7.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 966.347539][ T28] audit: type=1326 audit(1003.631:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.7.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 966.492252][ T28] audit: type=1326 audit(1003.631:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.7.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 966.649706][ T28] audit: type=1326 audit(1003.631:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26622 comm="syz.7.5993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 967.091170][ T28] audit: type=1326 audit(1004.429:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 967.128869][T26636] loop6: detected capacity change from 0 to 128 [ 967.185492][T26636] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 967.194186][ T28] audit: type=1326 audit(1004.429:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 967.220492][ T28] audit: type=1326 audit(1004.429:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 967.243601][ T28] audit: type=1326 audit(1004.429:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 967.273439][ T28] audit: type=1326 audit(1004.429:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 967.302740][T26636] syz.6.5998[26636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.302886][T26636] syz.6.5998[26636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.409689][T26636] syz.6.5998: attempt to access beyond end of device [ 967.409689][T26636] loop6: rw=0, sector=97, nr_sectors = 944 limit=128 [ 967.438538][T26646] loop3: detected capacity change from 0 to 2364 [ 967.508092][ T2949] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 967.546036][T26646] program syz.3.6002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.569562][T26646] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 967.894847][T26662] syzkaller0: entered promiscuous mode [ 967.914698][T26662] syzkaller0: entered allmulticast mode [ 968.061920][T26673] loop3: detected capacity change from 0 to 2048 [ 968.079856][T26673] EXT4-fs: inline encryption not supported [ 968.128779][T26673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.498588][T26680] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6009'. [ 972.507973][T26680] 0ªX¹¦À: renamed from caif0 [ 972.516029][T26680] 0ªX¹¦À: entered allmulticast mode [ 972.523496][T26680] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 972.611358][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.828088][T26701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6013'. [ 972.943535][T26705] pim6reg: entered allmulticast mode [ 972.992148][T26705] pim6reg: left allmulticast mode [ 973.281806][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 973.281826][ T28] audit: type=1326 audit(1010.903:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26722 comm="syz.2.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 973.342962][ T28] audit: type=1326 audit(1010.903:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26722 comm="syz.2.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 973.382695][ T28] audit: type=1326 audit(1010.924:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26722 comm="syz.2.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 973.410424][ T28] audit: type=1326 audit(1010.924:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26722 comm="syz.2.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 973.479437][ T28] audit: type=1326 audit(1010.987:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.514245][T26732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6026'. [ 973.534670][ T28] audit: type=1326 audit(1010.987:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.594963][ T28] audit: type=1326 audit(1010.987:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.652106][ T28] audit: type=1326 audit(1010.987:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.721029][ T28] audit: type=1326 audit(1010.987:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.774359][ T28] audit: type=1326 audit(1010.987:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26724 comm="syz.3.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc7d8eba9 code=0x7ffc0000 [ 973.913403][T26741] 9pnet_fd: Insufficient options for proto=fd [ 974.334718][T26763] rdma_op ffff8880304589f0 conn xmit_rdma 0000000000000000 [ 974.422955][T26765] syz.3.6040[26765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.423104][T26765] syz.3.6040[26765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.647026][T26776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6044'. [ 974.672712][T26776] IPVS: Error joining to the multicast group [ 975.029901][T26787] loop3: detected capacity change from 0 to 2048 [ 975.120267][T26787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 975.148301][T26790] lo speed is unknown, defaulting to 1000 [ 975.168593][T26790] lo speed is unknown, defaulting to 1000 [ 975.341745][T26801] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 975.379777][T26801] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [ 975.400808][T26804] syz.2.6053[26804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.400959][T26804] syz.2.6053[26804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.427277][T26801] EXT4-fs (loop3): This should not happen!! Data will be lost [ 975.427277][T26801] [ 975.486178][T26801] EXT4-fs (loop3): Total free blocks count 0 [ 975.492292][T26801] EXT4-fs (loop3): Free/Dirty block details [ 975.521062][T26801] EXT4-fs (loop3): free_blocks=2415919104 [ 975.537615][T26801] EXT4-fs (loop3): dirty_blocks=128 [ 975.555902][T26801] EXT4-fs (loop3): Block reservation details [ 975.579871][T26801] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 975.773370][T20304] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 977.688227][T26852] syz.2.6063[26852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.688369][T26852] syz.2.6063[26852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.487021][T26860] loop2: detected capacity change from 0 to 1024 [ 978.597926][T26860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.638275][T26860] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.6067: Allocating blocks 385-513 which overlap fs metadata [ 978.660238][T26860] EXT4-fs (loop2): pa ffff888076ae39f8: logic 16, phys. 129, len 24 [ 978.669570][T26860] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 978.721080][T26867] loop6: detected capacity change from 0 to 1024 [ 978.874858][T26867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.898289][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 978.898306][ T28] audit: type=1326 audit(1016.811:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 978.924222][T26867] syz.6.6069[26867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.931353][T26867] syz.6.6069[26867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.944140][ T28] audit: type=1326 audit(1016.811:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.018862][ T28] audit: type=1326 audit(1016.884:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.042537][ T28] audit: type=1326 audit(1016.884:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.089412][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.090687][ T28] audit: type=1326 audit(1016.884:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.136773][ T28] audit: type=1326 audit(1016.905:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.159361][ T28] audit: type=1326 audit(1016.905:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.225619][ T28] audit: type=1326 audit(1016.905:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.288096][ T28] audit: type=1326 audit(1016.905:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.353227][ T28] audit: type=1326 audit(1016.905:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26882 comm="syz.7.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 979.731754][T20304] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm kworker/u4:2: bg 0: block 393: padding at end of block bitmap is not set [ 979.774158][T20304] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2008 with error 117 [ 979.795564][T20304] EXT4-fs (loop6): This should not happen!! Data will be lost [ 979.795564][T20304] [ 979.907311][ T58] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 979.914740][T26911] loop2: detected capacity change from 0 to 512 [ 979.939078][ T58] EXT4-fs (loop6): This should not happen!! Data will be lost [ 979.939078][ T58] [ 979.952649][T26911] ext4: Unknown parameter 'smackfsfloor' [ 979.959019][ T58] EXT4-fs (loop6): Total free blocks count 0 [ 979.973526][ T58] EXT4-fs (loop6): Free/Dirty block details [ 979.982994][ T58] EXT4-fs (loop6): free_blocks=0 [ 979.988009][ T58] EXT4-fs (loop6): dirty_blocks=32 [ 980.002309][ T58] EXT4-fs (loop6): Block reservation details [ 980.142164][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'. [ 980.264836][T26931] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6080'. [ 981.036462][T26961] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.6091'. [ 981.056374][T26958] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.6091'. [ 981.581426][T26979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6101'. [ 981.630402][T26981] netlink: 'syz.7.6100': attribute type 1 has an invalid length. [ 981.750085][T26983] loop2: detected capacity change from 0 to 1024 [ 981.794896][T26983] EXT4-fs: Ignoring removed bh option [ 981.800437][T26983] EXT4-fs: inline encryption not supported [ 981.820028][T26983] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 981.912959][T26983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 981.930446][T26983] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.6102: lblock 2 mapped to illegal pblock 2 (length 1) [ 981.945140][T26983] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.6102: lblock 0 mapped to illegal pblock 48 (length 1) [ 981.975044][T26983] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.6102: Failed to acquire dquot type 0 [ 981.997495][T26983] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 982.024195][T26983] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.6102: mark_inode_dirty error [ 982.049135][T26983] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 982.079127][T26983] EXT4-fs (loop2): 1 orphan inode deleted [ 982.090989][T26983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.091907][ T8003] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 982.220780][ T8003] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:13: Failed to release dquot type 0 [ 982.291875][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.310129][T22396] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 982.375331][T22396] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 982.415654][T22396] EXT4-fs error (device loop2): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 982.538600][T27012] veth0_to_team: entered promiscuous mode [ 982.727272][T27021] loop3: detected capacity change from 0 to 512 [ 982.778762][T27021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.833466][T27030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 982.847657][T27030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 982.857907][T27030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 982.873747][T27030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 982.886654][T27021] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.6112: corrupted inode contents [ 982.918722][T27030] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 982.927107][T27030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 982.935132][T27021] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #4: comm syz.3.6112: mark_inode_dirty error [ 982.958203][T17157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 982.993846][T17157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.012753][T17157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.020827][T27021] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.6112: corrupted inode contents [ 983.039125][T17157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.049207][T27021] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #4: comm syz.3.6112: mark_inode_dirty error [ 983.068723][T27037] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.6112: corrupted inode contents [ 983.069020][T17157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 983.088458][T27021] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.6112: Failed to acquire dquot type 1 [ 983.100441][T17157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 983.114499][T27037] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #4: comm syz.3.6112: mark_inode_dirty error [ 983.147219][T27037] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.6112: corrupted inode contents [ 983.161242][T27037] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #4: comm syz.3.6112: mark_inode_dirty error [ 983.226015][T27037] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.6112: Failed to acquire dquot type 1 [ 983.270210][T27026] lo speed is unknown, defaulting to 1000 [ 983.284360][T27026] lo speed is unknown, defaulting to 1000 [ 983.392446][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.694414][T27077] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6118'. [ 984.213980][ T11] tipc: Left network mode [ 984.468040][T27026] chnl_net:caif_netlink_parms(): no params data found [ 984.800659][T27231] netlink: 'syz.7.6127': attribute type 6 has an invalid length. [ 985.033618][T27026] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.049346][T27026] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.057118][T27026] bridge_slave_0: entered allmulticast mode [ 985.068272][T27026] bridge_slave_0: entered promiscuous mode [ 985.106045][T27030] Bluetooth: hci2: command tx timeout [ 985.138016][T27026] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.148537][T27026] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.156084][T27026] bridge_slave_1: entered allmulticast mode [ 985.164516][T27026] bridge_slave_1: entered promiscuous mode [ 985.283325][T27026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.381352][T27026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.509425][T27026] team0: Port device team_slave_0 added [ 985.571243][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 985.571259][ T28] audit: type=1326 audit(1023.809:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.625615][T27026] team0: Port device team_slave_1 added [ 985.646399][ T28] audit: type=1326 audit(1023.841:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.706381][ T28] audit: type=1326 audit(1023.841:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.740538][ T28] audit: type=1326 audit(1023.841:10212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.775735][ T28] audit: type=1326 audit(1023.851:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.819218][ T28] audit: type=1326 audit(1023.851:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.849214][ T28] audit: type=1326 audit(1023.851:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.882411][ T28] audit: type=1326 audit(1023.862:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.917662][T27026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.925407][T27026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.954031][ T28] audit: type=1326 audit(1023.862:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 985.994308][T27026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.005243][ T28] audit: type=1326 audit(1023.862:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.7.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 986.039242][T27026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.052415][T27026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.088636][T27026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.348105][T27026] hsr_slave_0: entered promiscuous mode [ 986.364101][T27026] hsr_slave_1: entered promiscuous mode [ 986.375432][T27026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.396784][T27026] Cannot create hsr debugfs directory [ 986.812860][ T11] hsr_slave_0: left promiscuous mode [ 986.833559][ T11] hsr_slave_1: left promiscuous mode [ 987.093723][T27030] Bluetooth: hci2: command tx timeout [ 987.404873][T27445] loop2: detected capacity change from 0 to 512 [ 987.449951][T27445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 987.504201][ T11] bond1 (unregistering): Released all slaves [ 987.524261][T27445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.726391][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.876574][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6151'. [ 988.100999][T27468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6153'. [ 988.427998][ T9904] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 988.590037][ T9904] usb 4-1: device descriptor read/64, error -71 [ 988.835396][ T2937] smc: removing ib device syz! [ 988.867706][ T9904] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 989.068630][T27030] Bluetooth: hci2: command tx timeout [ 989.094266][ T9904] usb 4-1: device descriptor read/64, error -71 [ 989.208565][ T9904] usb usb4-port1: attempt power cycle [ 989.647232][ T9904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 989.695840][ T9904] usb 4-1: device descriptor read/8, error -71 [ 989.975326][ T9904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 990.020603][ T9904] usb 4-1: device descriptor read/8, error -71 [ 990.037892][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 990.161370][ T9904] usb usb4-port1: unable to enumerate USB device [ 990.363258][ T11] bond0 (unregistering): Released all slaves [ 990.424378][T27457] netlink: 'syz.7.6150': attribute type 10 has an invalid length. [ 990.437915][T27457] macvlan1: entered allmulticast mode [ 990.445053][T27457] veth1_vlan: entered allmulticast mode [ 990.472877][T27457] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 990.663469][T27502] netlink: 'syz.2.6156': attribute type 10 has an invalid length. [ 990.682707][T27502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6156'. [ 990.701024][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 990.701039][ T28] audit: type=1326 audit(1029.192:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.748333][ T28] audit: type=1326 audit(1029.192:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.774202][ T28] audit: type=1326 audit(1029.192:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.796456][ T28] audit: type=1326 audit(1029.192:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.831359][ T28] audit: type=1326 audit(1029.203:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.862982][T27502] team0: Port device geneve0 added [ 990.868092][ T28] audit: type=1326 audit(1029.203:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.906934][ T28] audit: type=1326 audit(1029.203:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.940534][ T28] audit: type=1326 audit(1029.203:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 990.989918][ T28] audit: type=1326 audit(1029.203:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 991.033065][ T28] audit: type=1326 audit(1029.203:10233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27499 comm="syz.7.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9498eba9 code=0x7ffc0000 [ 991.048708][T27030] Bluetooth: hci2: command tx timeout [ 991.193609][T27522] rdma_op ffff88801da469f0 conn xmit_rdma 0000000000000000 [ 991.608492][T27026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 991.657852][T27026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 991.680520][T27026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 991.707515][T27026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 991.922550][T27026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.949373][T27026] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.983575][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.990776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.020162][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.027380][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.192498][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6166'. [ 992.223450][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6166'. [ 992.477772][T27581] syz_tun: entered allmulticast mode [ 992.511408][T27580] syz_tun: left allmulticast mode [ 992.552701][T27026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.956340][T27593] pimreg: entered allmulticast mode [ 992.987772][T27590] pimreg: left allmulticast mode [ 993.118577][T27599] smc: net device bond0 erased user defined pnetid SYZ0 [ 993.160264][T27026] veth0_vlan: entered promiscuous mode [ 993.204200][T27026] veth1_vlan: entered promiscuous mode [ 993.276481][T27026] veth0_macvtap: entered promiscuous mode [ 993.313254][T27026] veth1_macvtap: entered promiscuous mode [ 993.366271][T27026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.388586][T27026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.400084][T27026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.449408][T27026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.467193][T27026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.481606][T27026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.525562][T27026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.545128][T27026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.563564][T27026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.580671][T27026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.645087][T27026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.670640][T27026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.697164][T27026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.718656][T27026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.337329][T27634] loop2: detected capacity change from 0 to 1024 [ 994.678250][T27634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.846507][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.870386][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.018220][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.027987][T22396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.050734][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.899571][T27659] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6185'. [ 996.193651][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 996.193668][ T28] audit: type=1326 audit(1034.953:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 996.275586][ T28] audit: type=1326 audit(1034.953:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 996.306295][ T28] audit: type=1326 audit(1034.953:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 996.364121][ T28] audit: type=1326 audit(1034.953:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 996.398816][ T28] audit: type=1326 audit(1034.953:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e98eba9 code=0x7ffc0000 [ 996.489444][ T28] audit: type=1326 audit(1035.257:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27679 comm="syz.6.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff673f8eba9 code=0x7ffc0000 [ 996.532894][ T28] audit: type=1326 audit(1035.257:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27679 comm="syz.6.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff673f8eba9 code=0x7ffc0000 [ 996.565986][ T28] audit: type=1326 audit(1035.257:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27679 comm="syz.6.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ff673f8eba9 code=0x7ffc0000 [ 996.617175][ T28] audit: type=1326 audit(1035.310:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27679 comm="syz.6.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff673f8eba9 code=0x7ffc0000 [ 996.644373][ T28] audit: type=1326 audit(1035.310:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27679 comm="syz.6.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff673f8eba9 code=0x7ffc0000 [ 997.072947][T27704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6201'. [ 997.693210][T27716] loop2: detected capacity change from 0 to 128 [ 997.741255][T27716] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 997.766659][T27716] FAT-fs (loop2): Filesystem has been set read-only [ 997.773367][T27716] syz.2.6206: attempt to access beyond end of device [ 997.773367][T27716] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 997.854585][T27716] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 997.889574][T27716] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 997.943547][T27720] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 997.971164][T27720] syz.2.6206: attempt to access beyond end of device [ 997.971164][T27720] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 997.994086][T27720] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 998.002143][T27720] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 998.024328][T27716] syz.2.6206: attempt to access beyond end of device [ 998.024328][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.071618][T27716] syz.2.6206: attempt to access beyond end of device [ 998.071618][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.120235][T27720] syz.2.6206: attempt to access beyond end of device [ 998.120235][T27720] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.173106][T27724] loop3: detected capacity change from 0 to 512 [ 998.205603][T27720] syz.2.6206: attempt to access beyond end of device [ 998.205603][T27720] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.234822][T27716] syz.2.6206: attempt to access beyond end of device [ 998.234822][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.236703][T27724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.264455][T27716] syz.2.6206: attempt to access beyond end of device [ 998.264455][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.278337][T27716] syz.2.6206: attempt to access beyond end of device [ 998.278337][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.292288][T27716] syz.2.6206: attempt to access beyond end of device [ 998.292288][T27716] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 998.449880][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.610936][T27738] loop3: detected capacity change from 0 to 1024 [ 998.704973][T27738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.784051][T27738] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.6211: Allocating blocks 385-513 which overlap fs metadata [ 998.894968][T27738] EXT4-fs (loop3): pa ffff888076ae3cb0: logic 16, phys. 129, len 24 [ 998.903557][T27738] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 998.991542][T27756] @: renamed from vlan0 (while UP) [ 999.002967][T18077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.110940][ C1] [ 999.113319][ C1] ============================================ [ 999.119462][ C1] WARNING: possible recursive locking detected [ 999.125618][ C1] syzkaller #0 Not tainted [ 999.130029][ C1] -------------------------------------------- [ 999.136178][ C1] ksoftirqd/1/22 is trying to acquire lock: [ 999.142063][ C1] ffffc900044e10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.151647][ C1] [ 999.151647][ C1] but task is already holding lock: [ 999.159044][ C1] ffffc900051430d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.168632][ C1] [ 999.168632][ C1] other info that might help us debug this: [ 999.176689][ C1] Possible unsafe locking scenario: [ 999.176689][ C1] [ 999.184133][ C1] CPU0 [ 999.187413][ C1] ---- [ 999.190692][ C1] lock(&rb->spinlock); [ 999.194935][ C1] lock(&rb->spinlock); [ 999.199180][ C1] [ 999.199180][ C1] *** DEADLOCK *** [ 999.199180][ C1] [ 999.207322][ C1] May be due to missing lock nesting notation [ 999.207322][ C1] [ 999.215638][ C1] 4 locks held by ksoftirqd/1/22: [ 999.220658][ C1] #0: ffffffff8cd2ff40 (rcu_callback){....}-{0:0}, at: rcu_core+0xc51/0x1720 [ 999.229542][ C1] #1: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 999.238854][ C1] #2: ffffc900051430d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.248868][ C1] #3: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 999.258185][ C1] [ 999.258185][ C1] stack backtrace: [ 999.264071][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 999.271362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.281434][ C1] Call Trace: [ 999.284719][ C1] [ 999.287567][ C1] dump_stack_lvl+0x16c/0x230 [ 999.292252][ C1] ? show_regs_print_info+0x20/0x20 [ 999.297460][ C1] ? print_deadlock_bug+0x435/0x5d0 [ 999.302666][ C1] __lock_acquire+0x5d40/0x7c80 [ 999.307534][ C1] ? verify_lock_unused+0x140/0x140 [ 999.312735][ C1] ? try_to_wake_up+0x6f4/0x1140 [ 999.317693][ C1] ? mark_lock+0x94/0x320 [ 999.322111][ C1] lock_acquire+0x197/0x410 [ 999.326647][ C1] ? __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.332153][ C1] ? read_lock_is_recursive+0x20/0x20 [ 999.337598][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 999.342894][ C1] ? __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.348409][ C1] ? _raw_spin_lock+0x40/0x40 [ 999.353093][ C1] ? __lock_acquire+0x1334/0x7c80 [ 999.358128][ C1] __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.363434][ C1] ? bpf_ringbuf_notify+0x30/0x30 [ 999.368471][ C1] ? __cant_sleep+0x210/0x210 [ 999.373157][ C1] bpf_ringbuf_output+0x69/0x1e0 [ 999.378106][ C1] bpf_prog_fab844a31c87a330+0x4d/0x51 [ 999.383579][ C1] bpf_trace_run2+0x1d1/0x3c0 [ 999.388264][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 999.393030][ C1] ? bpf_trace_run1+0x3b0/0x3b0 [ 999.397882][ C1] ? __bpf_trace_contention_end+0xce/0x130 [ 999.403768][ C1] __bpf_trace_contention_end+0xdd/0x130 [ 999.409426][ C1] ? __bpf_trace_contention_begin+0x130/0x130 [ 999.415525][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 999.420998][ C1] ? verify_lock_unused+0x140/0x140 [ 999.426204][ C1] trace_contention_end+0xe6/0x110 [ 999.431323][ C1] __pv_queued_spin_lock_slowpath+0x7ec/0x9d0 [ 999.437417][ C1] ? __lock_acquire+0x1260/0x7c80 [ 999.442452][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 999.448875][ C1] do_raw_spin_lock+0x24e/0x2c0 [ 999.453734][ C1] ? __rwlock_init+0x150/0x150 [ 999.458507][ C1] _raw_spin_lock_irqsave+0xb4/0xf0 [ 999.463709][ C1] ? _raw_spin_lock+0x40/0x40 [ 999.468393][ C1] ? kasan_set_track+0x4e/0x70 [ 999.473163][ C1] __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 999.478462][ C1] ? bpf_ringbuf_notify+0x30/0x30 [ 999.483493][ C1] ? __cant_sleep+0x210/0x210 [ 999.488176][ C1] bpf_ringbuf_reserve+0x5c/0x70 [ 999.493132][ C1] bpf_prog_fe0ed97373b08409+0x2d/0x4a [ 999.498592][ C1] bpf_trace_run3+0x1e7/0x400 [ 999.503270][ C1] ? bpf_trace_run3+0xf4/0x400 [ 999.508033][ C1] ? bpf_trace_run2+0x3c0/0x3c0 [ 999.512886][ C1] ? rcu_core+0xcc4/0x1720 [ 999.517302][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 999.523199][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 999.528407][ C1] ? rcu_core+0xc51/0x1720 [ 999.532821][ C1] ? rcu_core+0xcc4/0x1720 [ 999.537238][ C1] __traceiter_kmem_cache_free+0x34/0x50 [ 999.542877][ C1] ? rcu_core+0xcc4/0x1720 [ 999.547295][ C1] kmem_cache_free+0x1e0/0x280 [ 999.552065][ C1] ? __asan_memset+0x22/0x40 [ 999.556660][ C1] ? plist_check_list+0x240/0x240 [ 999.561692][ C1] rcu_core+0xcc4/0x1720 [ 999.565949][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 999.571153][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 999.576362][ C1] ? sched_clock_cpu+0x75/0x430 [ 999.581213][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 999.587195][ C1] ? lock_chain_count+0x20/0x20 [ 999.592054][ C1] ? try_to_wake_up+0x724/0x1140 [ 999.597007][ C1] handle_softirqs+0x280/0x820 [ 999.601784][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 999.606581][ C1] ? do_softirq+0x180/0x180 [ 999.611190][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 999.616405][ C1] __irq_exit_rcu+0xc7/0x190 [ 999.621099][ C1] ? irq_exit_rcu+0x20/0x20 [ 999.625624][ C1] ? rcu_is_watching+0x15/0xb0 [ 999.630408][ C1] irq_exit_rcu+0x9/0x20 [ 999.634657][ C1] sysvec_irq_work+0xa1/0xc0 [ 999.639260][ C1] [ 999.642190][ C1] [ 999.645146][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 999.650100][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 999.655916][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 80 74 1b 09 e8 3b a7 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 999.675527][ C1] RSP: 0018:ffffc900001c7bb8 EFLAGS: 00000286 [ 999.681596][ C1] RAX: 09cce29439d96d00 RBX: 0000000000000000 RCX: 09cce29439d96d00 [ 999.689586][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc72c0 [ 999.697680][ C1] RBP: ffffc900001c7c10 R08: ffffffff8e4a94ef R09: 1ffffffff1c9529d [ 999.705667][ C1] R10: dffffc0000000000 R11: fffffbfff1c9529e R12: ffff88801be6bc00 [ 999.713663][ C1] R13: dffffc0000000000 R14: ffff888041668000 R15: ffff8880b8f3cf08 [ 999.721662][ C1] ? finish_task_switch+0x265/0x920 [ 999.726878][ C1] __schedule+0x14da/0x44d0 [ 999.731400][ C1] ? __might_sleep+0xe0/0xe0 [ 999.735997][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 999.741988][ C1] ? asan.module_dtor+0x20/0x20 [ 999.746849][ C1] ? run_ksoftirqd+0xa1/0xf0 [ 999.751442][ C1] ? run_ksoftirqd+0xb5/0xf0 [ 999.756043][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 999.761256][ C1] ? takeover_tasklets+0x810/0x810 [ 999.766372][ C1] schedule+0xbd/0x170 [ 999.770448][ C1] ? takeover_tasklets+0x810/0x810 [ 999.775561][ C1] smpboot_thread_fn+0x710/0xa00 [ 999.780510][ C1] ? smpboot_thread_fn+0x50/0xa00 [ 999.785547][ C1] kthread+0x2fa/0x390 [ 999.789615][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 999.796042][ C1] ? kthread_blkcg+0xd0/0xd0 [ 999.800645][ C1] ret_from_fork+0x48/0x80 [ 999.805068][ C1] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 999.809661][ C1] ret_from_fork_asm+0x11/0x20 [ 999.814445][ C1] [ 1000.894111][ T2949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.005349][ T2949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.086828][ T2949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.167080][ T2949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.282579][ T2949] tipc: Disabling bearer [ 1001.288247][ T2949] tipc: Disabling bearer [ 1001.293659][ T2949] tipc: Left network mode [ 1001.962090][ T2949] hsr_slave_0: left promiscuous mode [ 1001.967936][ T2949] hsr_slave_1: left promiscuous mode [ 1001.978876][ T2949] veth1_vlan: left promiscuous mode [ 1001.984141][ T2949] veth0_vlan: left promiscuous mode [ 1002.439516][ T2949] team0 (unregistering): Port device dummy0 removed [ 1002.870843][ T2949] bond0 (unregistering): Released all slaves [ 1003.312298][ T2949] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.370277][ T2949] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.413939][ T2949] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.461673][ T2949] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.552567][ T2949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.602789][ T2949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.670525][ T2949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.721363][ T2949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.803662][ T2949] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.861628][ T2949] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.918685][ T2949] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.966266][ T2949] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.115102][ T2949] tipc: Left network mode [ 1004.132961][ T2949] tipc: Left network mode [ 1005.290872][ T2949] hsr_slave_0: left promiscuous mode [ 1005.298763][ T2949] hsr_slave_1: left promiscuous mode [ 1005.304673][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.316336][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.325245][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.332693][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.340738][ T2949] bridge_slave_1: left allmulticast mode [ 1005.346987][ T2949] bridge_slave_1: left promiscuous mode [ 1005.352968][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.361639][ T2949] bridge_slave_0: left allmulticast mode [ 1005.367484][ T2949] bridge_slave_0: left promiscuous mode [ 1005.374090][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.385954][ T2949] hsr_slave_0: left promiscuous mode [ 1005.394276][ T2949] hsr_slave_1: left promiscuous mode [ 1005.400769][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.408193][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.416245][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.425426][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.433712][ T2949] bridge_slave_1: left allmulticast mode [ 1005.439470][ T2949] bridge_slave_1: left promiscuous mode [ 1005.445171][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.454412][ T2949] bridge_slave_0: left allmulticast mode [ 1005.460253][ T2949] bridge_slave_0: left promiscuous mode [ 1005.466005][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.479247][ T2949] hsr_slave_0: left promiscuous mode [ 1005.485043][ T2949] hsr_slave_1: left promiscuous mode [ 1005.497103][ T2949] veth1_macvtap: left promiscuous mode [ 1005.502654][ T2949] veth0_macvtap: left promiscuous mode [ 1005.508415][ T2949] veth1_vlan: left promiscuous mode [ 1005.513700][ T2949] veth0_vlan: left promiscuous mode [ 1005.520127][ T2949] veth1_macvtap: left promiscuous mode [ 1005.529254][ T2949] veth0_macvtap: left promiscuous mode [ 1005.535031][ T2949] veth1_vlan: left allmulticast mode [ 1005.540497][ T2949] veth1_vlan: left promiscuous mode [ 1005.546034][ T2949] veth0_vlan: left promiscuous mode [ 1005.552367][ T2949] veth1_macvtap: left promiscuous mode [ 1005.558009][ T2949] veth0_macvtap: left promiscuous mode [ 1005.563757][ T2949] veth1_vlan: left allmulticast mode [ 1005.569136][ T2949] veth1_vlan: left promiscuous mode [ 1005.574733][ T2949] veth0_vlan: left promiscuous mode [ 1005.988588][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1006.031651][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1006.077175][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.122086][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.216547][ T2949] bond0 (unregistering): Released all slaves [ 1006.321545][ T2949] team0 (unregistering): Port device geneve0 removed [ 1006.368311][ T2949] $Hÿ (unregistering): (slave macvlan0): Releasing backup interface [ 1006.467248][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1006.514081][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1006.561594][ T2949] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.570745][ T2949] bond_slave_1 (unregistering): left promiscuous mode [ 1006.616609][ T2949] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.627595][ T2949] bond_slave_0 (unregistering): left promiscuous mode [ 1007.238864][ T2949] $Hÿ (unregistering): Released all slaves [ 1007.619100][ T2949] bond1 (unregistering): Released all slaves [ 1008.475725][ T2949] bond0 (unregistering): Released all slaves