last executing test programs: 1m3.588624073s ago: executing program 0 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 1m3.268188183s ago: executing program 0 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0xed, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001070000940001000000fc11c60000000f000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) 53.421815894s ago: executing program 0 (id=369): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/21], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0xd000, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0xc}}, {@debug}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.)){R'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, 'x#('}}]}, 0x1, 0x502, &(0x7f0000002080)="$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") ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 51.086496549s ago: executing program 0 (id=374): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x402100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) dup3(r4, r5, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'}) socketpair$unix(0x1, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd4b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000071103900000000004600000002c1cef0cc0000005aced435c700000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 50.171353632s ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) fcntl$setstatus(r5, 0x4, 0x46100) write$cgroup_type(r5, &(0x7f0000000200), 0xf642e7e) 26.693493883s ago: executing program 1 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fe80000000000000000000000000000008000a00", @ANYRES32=r4], 0x50}}, 0x0) 20.102837767s ago: executing program 1 (id=483): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r0) close_range(r7, 0xffffffffffffffff, 0x0) 18.923580726s ago: executing program 1 (id=489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000240)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 17.422593073s ago: executing program 1 (id=496): bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a49002, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000003,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maciceland,overriderockperm,map=normal,mode=0x000000000000001,map=acorn,check=strict,overriderockperm,map=normal,cruft,\x00\x00'], 0x3, 0x3f8, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x189505a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat$cgroup(r0, &(0x7f0000001080)='syz0\x00', 0x1ff) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 17.172532916s ago: executing program 1 (id=499): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x43, 0x1, 0x5, 0x1ff, 0x8001], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) getsockopt$inet_tcp_int(r4, 0x6, 0x25, 0x0, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000340)={0x0, 0xffffff20, 0x7, 0x5, 0x3a55, 0x1000, 0x4, 0x4, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x25b, 0x2, 0x0, 0x2, 0xe}}, &(0x7f0000000480)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={r6, 0x4}, 0xfffffffffffffeff) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2c0000a22807e6489625d1b99f3fc875ed68ad5627e320c4bafcb56589847cbf3383e59b7e52361216145440fcc3fd378cc29c8ba37cd0d6fbb685ef49d68b5259971ca91555be6c54756804a388d5692e45"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x17}}}}], 0x20}, 0x20000041) syz_init_net_socket$ax25(0x3, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1) socket(0x10, 0x80002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') 13.800039905s ago: executing program 1 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) utime(&(0x7f0000003dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.477371288s ago: executing program 4 (id=546): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x4008000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xc4}, {&(0x7f00000007c0)=""/154, 0x3a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x500}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.154395628s ago: executing program 3 (id=547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000080)={0x2}, 0x8, 0x800) 5.153827658s ago: executing program 4 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 4.772155763s ago: executing program 3 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.086577596s ago: executing program 4 (id=550): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0) 3.797889342s ago: executing program 3 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_io_uring_setup(0xf3b, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 2.635923539s ago: executing program 3 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000240)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r1, r0, 0x0) recvmmsg$unix(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 2.202742149s ago: executing program 2 (id=555): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1081e, &(0x7f0000000200)=ANY=[], 0x1, 0x6d0, &(0x7f0000000a40)="$eJzs3V1v29Ydx/Ef5QcpzhAU2xAEQZqcpBtgY5lCyY0DIwNWjaJsbpIokPKQAAOKtLGLIEq6JRmw+Cb1zR6A7g3srje72IsYsOte7w3sbgO67W7AdsGBT5ZkiVGcyEmLfj8CKurw8Jz/IRX+S1k8EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOU0bbtmqe11d2798wNTxGkGfid/8b/J9WlrS1pLF9Zm9itZ1oEsVSo6lxad+/Zw9dn4P1d0IX11QZX4qaL902ffuvmtxVK2vQrDfTk6boOPn+7fvzMY7D56gboLOnbzb5JKw+XF7KgkL0b3+pbb9ULf6zS2XOOFvtnc2LCvbbdC0/LabqiS1DFO4Jb6fmBWnTVT29xcN271tr/T3Wo22m5eeOP7ddveMD8upwdaUjV0tr122+tuJXXi1XGdG+bTn6UV3EYnfhrsrs8ayd69wW7tRSrVZ1Wq2/qkVqvXaxvXN6/fsO3Ful2vjxXYMcs+pIkac3/T4itmLudtYB5Kcf7/myW1VVFXO7olM/XhqKlAvjoF6zNJ4j+QdM0t6jI/xVtxDo/zf57lz0k/zNadV5L/L6avLhbl/4JYjEyywbQ1VkH58R5LSURGj/VU+7qvOxoo0q4ezaFtI3NpLq2c0CMa2e9bctWVp1C+PHXUSEpMVmK0qQ1tyNb72lZLoYxa8tSWq1C3FaovN3lHOQrkqqG+fAUyWpWjNRnVtKlNrcvIVVW35WtHXW2pqYb+E0XRnu5poN2kRtFDeaVaQYXyaKX6c1qaSOZZwQfP0vdplv9t8v/XlRRF0bNy+nb4vKhOdooE3rQou/4/pksnEw0AAAAAADgJVvLpu5X87f5tSZFaXtu133RYAAAAAABgjixFZV2QFV//S3pb1otf/5dOOjgAAAAAADAXVnKPnSVpJflSvzW8E+pFPgRYeA0hAgAAAACAV5Tc+X9xWYqSSSsuyTrW9T8AAAAAAPgK+O3IHPuL+Ry7Uf5n/ZKksFe2/vyvsoIl66B36zvWg0a8pvEgqzP+DYBFqd86b53JJupNnpYlJa8c94KV9ZbNF5x8+mAtSl/szZrr3wqOBLC8kDdwxGgAVtzzxmL2Sp/qcrrJ5WwS4rv7JSVr0l5WWl7brTp++2ZNjcaZUt+91f/lw3u/koLDce7dG+xWP/x4cDeJJZnH8+BB3OizsXBKE7EkT8NYniTzLST3XEwb8Sm18i5/1+2sWEm/dj7+BTUelEY7Khj/kT5/rSvpMbuyktZd2R9OxyxZlXj8tepyfMjGRh8sWcMoakdHPu1ATI0iD/ad7Gn1nfRp//TZv+btlKzK9xakenXyGIxFUR+NonQ4jKIorH9P7IspUYy8F5J9sR5H8Ze4oSSKaOKIrI9HcewjAgBvyt4wCyWTmE/k3fy8mp/UXirvzM7u741n9yd/iNJz7UL8/xRReWYvFcVn9FUryUPLSk6si+ennNHtLK9UVJBX7JfObmlff9JaejPlmrKwJ6L4bxRFN2tJv78/klU/izf4rLDfsF1fiHfhtScPfp5MgB/7aPej3Yf1+vqG/a5tX69rKRlG9rQgcg8AYMLs39iZWcN6V5fTGpfv/uO76dJYxvvm4VcKqvpQH2ugu7qa/4TApemtrox8DeFqetWqkatWc/atm6eko3Vrulp4VZd+1rAy8kMved0l5ZuMZ+ph3fUTPgoAALxeV2bk4en5vzKW/69qNa2xen7qdfd4Ls9+Gvjwkr6obm128O/Ne28AAPD14AZfWCv931hB4PXer21u1hr9bdcEvvMTE3jNLdd43b4bONuN7pZreoHf9x2/bXqByl7TDU240+v5Qd+0/MD0/NC7lfzyuwlvh323Y0K30+j2PSfstd1G6BrH7/YbTt80vdAxvZ0ftb1w2w2SjcOe63gtz2n0Pb9rQn8ncNyqMaHrjlT0mm6377W8eLFreoHXaQS3zU/99k7HNU03dAKv1/fTBvO+vG7LDzpJs9Xkp2sBAMDjp/v37wwGu4+OLpyKL83TkgMV1JlcWJ7SIHMEAQDwJTNM18fYaPp3rQEAAAAAAAAAAAAAAAAAAAAAwAmZfUvfMReWpt0sKB2W/OJMVqJPNLzFcKIdS68Yz7PoFTYvHXer/JaI/fufP6fyqcOSfPeP1jmY+7EoWvj7N6TTSYnSksV41fmXa7AcD+O594/GJdlUxc9ObFw/2Ev3aGGdeOXUVeXDY7E4/38O8cLDPxasivfIaEk+JfOwpDz+D2T5eQMcX4jberT84nfuTiy83vMQgNfv/wEAAP//Nkg53w==") r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 2.18299888s ago: executing program 4 (id=556): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x4008000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xc4}, {&(0x7f00000007c0)=""/154, 0x3a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x500}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.715422553s ago: executing program 3 (id=557): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) select(0x40, &(0x7f0000000340)={0x1f}, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x18, 0x0, 0x20000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 1.64401525s ago: executing program 2 (id=558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 708.647316ms ago: executing program 4 (id=559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 654.4866ms ago: executing program 3 (id=560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) r2 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil) shmat(0x0, &(0x7f000018b000/0x3000)=nil, 0x5000) mlockall(0x1) shmdt(r2) shmat(r3, &(0x7f00003b7000/0x1000)=nil, 0x6000) mlockall(0x7) shmget$private(0x0, 0x2000, 0x400, &(0x7f00003dc000/0x2000)=nil) 546.046501ms ago: executing program 2 (id=561): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) 412.937343ms ago: executing program 2 (id=562): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 232.125749ms ago: executing program 2 (id=563): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 192.061753ms ago: executing program 4 (id=564): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0) 157.715766ms ago: executing program 2 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="2b0300000ec00000000005"], 0x124}}, 0x0) 0s ago: executing program 0 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0xc) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) kernel console output (not intermixed with test programs): interface [ 93.903472][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.417195][ T102] bond0 (unregistering): Released all slaves [ 94.577452][ T4000] IPv6: Can't replace route, no match found [ 94.590325][ T4002] netlink: 'syz.3.52': attribute type 22 has an invalid length. [ 94.654311][ T3829] team0: Port device team_slave_0 added [ 94.826984][ T3829] team0: Port device team_slave_1 added [ 95.060194][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.129342][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.312378][ T3829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.295944][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.352298][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.435872][ T4025] overlayfs: failed to resolve './file1': -2 [ 96.446331][ T4022] loop2: detected capacity change from 0 to 4096 [ 96.457492][ T3829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.477657][ T4022] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 96.642592][ T3829] device hsr_slave_0 entered promiscuous mode [ 96.751740][ T3829] device hsr_slave_1 entered promiscuous mode [ 96.816607][ T3829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.826413][ T3829] Cannot create hsr debugfs directory [ 96.837861][ T26] audit: type=1326 audit(1727174865.277:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 96.943677][ T26] audit: type=1326 audit(1727174865.277:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 97.042942][ T26] audit: type=1326 audit(1727174865.277:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 97.158717][ T26] audit: type=1326 audit(1727174865.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 97.192314][ T26] audit: type=1326 audit(1727174865.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 97.584941][ T26] kauditd_printk_skb: 147 callbacks suppressed [ 97.584959][ T26] audit: type=1326 audit(1727174866.027:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 97.615743][ T26] audit: type=1326 audit(1727174866.027:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000 [ 97.641862][ T26] audit: type=1326 audit(1727174866.027:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 97.681982][ T26] audit: type=1326 audit(1727174866.057:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 97.738753][ T26] audit: type=1326 audit(1727174866.057:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000 [ 97.968499][ T26] audit: type=1326 audit(1727174866.057:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 98.019564][ T26] audit: type=1326 audit(1727174866.057:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000 [ 98.100298][ T26] audit: type=1326 audit(1727174866.057:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 98.130225][ T4045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'. [ 98.179313][ T26] audit: type=1326 audit(1727174866.077:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 98.341001][ T26] audit: type=1326 audit(1727174866.077:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000 [ 98.554883][ T4051] netlink: 'syz.3.65': attribute type 22 has an invalid length. [ 98.679418][ T4054] loop4: detected capacity change from 0 to 1024 [ 98.971185][ T3829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.983171][ T4054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.293332][ T3829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.684525][ T3829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.755444][ T3829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.857350][ T3638] EXT4-fs (loop4): unmounting filesystem. [ 100.092180][ T4071] loop0: detected capacity change from 0 to 8192 [ 100.183294][ T4071] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.238265][ T3829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.501207][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.532936][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.663464][ T3829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.730165][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.762425][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.808719][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.816002][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.065732][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.074608][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.121350][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.148980][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.156229][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.166918][ T4088] loop3: detected capacity change from 0 to 128 [ 101.195536][ T4088] ======================================================= [ 101.195536][ T4088] WARNING: The mand mount option has been deprecated and [ 101.195536][ T4088] and is ignored by this kernel. Remove the mand [ 101.195536][ T4088] option from the mount to silence this warning. [ 101.195536][ T4088] ======================================================= [ 101.237196][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.271342][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.320626][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.346584][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.375001][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.422262][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.448316][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.481916][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.509208][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.543193][ T3829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.626775][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.657067][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.667099][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.711765][ T4077] loop4: detected capacity change from 0 to 32768 [ 101.721668][ T4100] loop3: detected capacity change from 0 to 128 [ 101.758590][ T4077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4077) [ 101.834599][ T4077] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.892814][ T4077] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 101.938015][ T4077] BTRFS info (device loop4): using free space tree [ 102.357666][ T4077] BTRFS info (device loop4): enabling ssd optimizations [ 102.382801][ T4127] loop3: detected capacity change from 0 to 512 [ 102.443922][ T4127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.678626][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.714029][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.792543][ T4127] EXT4-fs (loop3): 1 truncate cleaned up [ 102.833145][ T4127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.861278][ T3829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.145446][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.176592][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.299217][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 103.355197][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.426403][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.488587][ T3829] device veth0_vlan entered promiscuous mode [ 103.518368][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.539003][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.550617][ T3638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.561185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.589281][ T3829] device veth1_vlan entered promiscuous mode [ 103.634834][ T4147] tipc: Started in network mode [ 103.664120][ T4147] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.758583][ T4147] tipc: New replicast peer: 100.1.1.1 [ 103.835247][ T4147] tipc: Enabled bearer , priority 10 [ 103.884480][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.904343][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.990315][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.011133][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.036552][ T3829] device veth0_macvtap entered promiscuous mode [ 104.090012][ T3829] device veth1_macvtap entered promiscuous mode [ 104.245477][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.279235][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.300784][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.408772][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.430228][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.447041][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.695374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.704610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 104.712972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 104.721879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 104.730281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 105.227706][ T3754] tipc: Node number set to 2886997162 [ 105.316939][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.341656][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.401535][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.436506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.458105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.492407][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.544894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.576486][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.603898][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.653733][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.694784][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.858666][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.639499][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.707736][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.790653][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.868466][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.887052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.897967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.011462][ T3829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.083658][ T3829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.092605][ T3829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.256636][ T3829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.908618][ T4194] 9pnet: Could not find request transport: ­|¼V¡äM!Œ•jS’©•ñúèéòï»3…MÇ×MÀwHùt\·–Ú-ûqJ [ 108.184633][ T3778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.193157][ T3778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.307538][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.307786][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.365440][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.521146][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.567607][ T4207] loop2: detected capacity change from 0 to 4096 [ 108.821381][ T4207] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 109.336521][ T4218] loop1: detected capacity change from 0 to 256 [ 109.359768][ T4218] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 109.721627][ T4224] loop1: detected capacity change from 0 to 512 [ 109.801156][ T4224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.845732][ T4224] EXT4-fs (loop1): 1 truncate cleaned up [ 109.878177][ T4224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.032521][ T4229] loop2: detected capacity change from 0 to 8192 [ 110.093242][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 110.112414][ T4229] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.782373][ T4211] loop3: detected capacity change from 0 to 32768 [ 110.890361][ T4211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.93 (4211) [ 111.035079][ T4211] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.091109][ T4211] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 111.104993][ T4211] BTRFS info (device loop3): setting nodatacow, compression disabled [ 111.113192][ T4211] BTRFS info (device loop3): force clearing of disk cache [ 111.130971][ T4211] BTRFS info (device loop3): setting datacow [ 111.138161][ T4211] BTRFS info (device loop3): doing ref verification [ 111.155669][ T4211] BTRFS info (device loop3): turning off barriers [ 111.162585][ T4211] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.253690][ T4211] BTRFS info (device loop3): use zstd compression, level 3 [ 111.261260][ T4211] BTRFS info (device loop3): enabling ssd optimizations [ 111.368510][ T4211] BTRFS info (device loop3): using spread ssd allocation scheme [ 111.410690][ T4211] BTRFS info (device loop3): not using ssd optimizations [ 111.432835][ T4211] BTRFS info (device loop3): not using spread ssd allocation scheme [ 111.495258][ T4211] BTRFS info (device loop3): using free space tree [ 112.073185][ T4211] BTRFS error (device loop3): open_ctree failed [ 112.385518][ T4227] loop0: detected capacity change from 0 to 32768 [ 112.444536][ T4227] XFS: ikeep mount option is deprecated. [ 112.455352][ T4227] XFS: noikeep mount option is deprecated. [ 112.542633][ T4278] loop2: detected capacity change from 0 to 256 [ 112.557217][ T4277] loop4: detected capacity change from 0 to 4096 [ 112.603689][ T4277] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 112.694870][ T4278] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.745875][ T4288] loop1: detected capacity change from 0 to 512 [ 113.799385][ T4288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.823670][ T4292] loop3: detected capacity change from 0 to 136 [ 113.862455][ T4288] EXT4-fs (loop1): 1 truncate cleaned up [ 113.868430][ T4288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.984268][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 113.996059][ T4292] tmpfs: Unknown parameter '' [ 114.185761][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 114.185777][ T26] audit: type=1326 audit(1727174882.627:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 114.376649][ T4303] loop3: detected capacity change from 0 to 128 [ 114.393175][ T26] audit: type=1326 audit(1727174882.627:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.124006][ T26] audit: type=1326 audit(1727174882.627:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.148117][ T26] audit: type=1326 audit(1727174882.627:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.183055][ T26] audit: type=1326 audit(1727174882.627:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.276077][ T26] audit: type=1326 audit(1727174882.627:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.299309][ T26] audit: type=1326 audit(1727174882.637:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.391574][ T26] audit: type=1326 audit(1727174882.637:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.483679][ T26] audit: type=1326 audit(1727174882.637:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 115.646445][ T26] audit: type=1326 audit(1727174882.637:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000 [ 116.629604][ T4319] loop4: detected capacity change from 0 to 256 [ 116.706806][ T4319] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 117.886201][ T4307] loop0: detected capacity change from 0 to 32768 [ 117.929663][ T4307] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4307) [ 118.018016][ T4307] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.049601][ T4307] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.073172][ T4307] BTRFS info (device loop0): setting nodatacow, compression disabled [ 118.090617][ T4307] BTRFS info (device loop0): force clearing of disk cache [ 118.118441][ T4307] BTRFS info (device loop0): setting datacow [ 118.152592][ T4307] BTRFS info (device loop0): doing ref verification [ 118.177982][ T4307] BTRFS info (device loop0): turning off barriers [ 118.205237][ T4307] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.245176][ T4307] BTRFS info (device loop0): use zstd compression, level 3 [ 118.268045][ T4335] loop1: detected capacity change from 0 to 4096 [ 118.268523][ T4307] BTRFS info (device loop0): enabling ssd optimizations [ 118.310518][ T4307] BTRFS info (device loop0): using spread ssd allocation scheme [ 118.333647][ T4335] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 118.357204][ T4307] BTRFS info (device loop0): not using ssd optimizations [ 118.376019][ T4307] BTRFS info (device loop0): not using spread ssd allocation scheme [ 118.490872][ T4307] BTRFS info (device loop0): using free space tree [ 118.897011][ T4307] BTRFS error (device loop0): open_ctree failed [ 119.568743][ T4327] loop4: detected capacity change from 0 to 32768 [ 119.613948][ T4327] XFS: ikeep mount option is deprecated. [ 119.619678][ T4327] XFS: noikeep mount option is deprecated. [ 119.716333][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 119.716349][ T26] audit: type=1326 audit(1727174888.157:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.775289][ T26] audit: type=1326 audit(1727174888.167:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.802673][ T26] audit: type=1326 audit(1727174888.167:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.827874][ T3630] udevd[3630]: failed to send result of seq 10572 to main daemon: Connection refused [ 119.839100][ T26] audit: type=1326 audit(1727174888.167:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.864004][ T26] audit: type=1326 audit(1727174888.177:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.889253][ T4327] XFS (loop4): Mounting V5 Filesystem [ 119.895873][ T26] audit: type=1326 audit(1727174888.197:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.920542][ T26] audit: type=1326 audit(1727174888.207:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 119.943471][ T26] audit: type=1326 audit(1727174888.207:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000 [ 119.966046][ T26] audit: type=1326 audit(1727174888.207:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 119.989247][ T26] audit: type=1326 audit(1727174888.207:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000 [ 120.158782][ T4327] XFS (loop4): Ending clean mount [ 120.660065][ T4327] XFS (loop4): Quotacheck needed: Please wait. [ 120.808844][ T4438] loop3: detected capacity change from 0 to 256 [ 121.042044][ T4438] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 121.204439][ T4327] XFS (loop4): Quotacheck: Done. [ 122.094388][ T3638] XFS (loop4): Unmounting Filesystem [ 122.233340][ T4448] loop0: detected capacity change from 0 to 512 [ 123.507384][ T4451] loop3: detected capacity change from 0 to 32768 [ 123.518784][ T4464] loop0: detected capacity change from 0 to 2048 [ 123.547500][ T4451] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.138 (4451) [ 123.592064][ T4451] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 123.620893][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.639821][ T4451] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 123.707628][ T4451] BTRFS info (device loop3): doing ref verification [ 123.747900][ T4451] BTRFS info (device loop3): use zlib compression, level 3 [ 123.759980][ T4454] loop1: detected capacity change from 0 to 32768 [ 123.790192][ T4464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.814561][ T4451] BTRFS info (device loop3): using free space tree [ 123.831526][ T4464] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 123.852578][ T4454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.136 (4454) [ 123.883359][ T4464] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.883359][ T4464] [ 123.901912][ T4464] EXT4-fs (loop0): Total free blocks count 0 [ 123.935881][ T4464] EXT4-fs (loop0): Free/Dirty block details [ 123.955017][ T4464] EXT4-fs (loop0): free_blocks=2415919104 [ 123.983078][ T4464] EXT4-fs (loop0): dirty_blocks=32 [ 123.993932][ T4454] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.019639][ T4464] EXT4-fs (loop0): Block reservation details [ 124.041825][ T4454] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.041992][ T4454] BTRFS info (device loop1): setting nodatacow, compression disabled [ 124.042057][ T4454] BTRFS info (device loop1): force clearing of disk cache [ 124.042078][ T4454] BTRFS info (device loop1): setting datacow [ 124.042101][ T4454] BTRFS info (device loop1): doing ref verification [ 124.042120][ T4454] BTRFS info (device loop1): turning off barriers [ 124.042172][ T4454] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.042219][ T4454] BTRFS info (device loop1): use zstd compression, level 3 [ 124.042247][ T4454] BTRFS info (device loop1): enabling ssd optimizations [ 124.042265][ T4454] BTRFS info (device loop1): using spread ssd allocation scheme [ 124.042286][ T4454] BTRFS info (device loop1): not using ssd optimizations [ 124.042303][ T4454] BTRFS info (device loop1): not using spread ssd allocation scheme [ 124.042321][ T4454] BTRFS info (device loop1): using free space tree [ 124.105138][ T4464] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 124.215688][ T4451] BTRFS info (device loop3): enabling ssd optimizations [ 124.695975][ T4454] BTRFS info (device loop1): rebuilding free space tree [ 125.939280][ T3640] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 125.981781][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 125.981799][ T26] audit: type=1326 audit(1727174894.417:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 126.010784][ T26] audit: type=1326 audit(1727174894.417:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 126.071917][ T26] audit: type=1326 audit(1727174894.417:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.299784][ T26] audit: type=1326 audit(1727174894.437:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.329005][ T26] audit: type=1326 audit(1727174894.437:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.351846][ T26] audit: type=1326 audit(1727174894.437:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.385524][ T26] audit: type=1326 audit(1727174894.437:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.449971][ T26] audit: type=1326 audit(1727174894.437:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.552453][ T3829] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.613794][ T26] audit: type=1326 audit(1727174894.447:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.694326][ T26] audit: type=1326 audit(1727174894.447:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 127.907704][ T4528] loop4: detected capacity change from 0 to 2048 [ 128.116507][ T4532] loop2: detected capacity change from 0 to 512 [ 128.180268][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.782799][ T3638] EXT4-fs (loop4): unmounting filesystem. [ 131.271222][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 131.441600][ T4558] loop2: detected capacity change from 0 to 32768 [ 131.532783][ T4558] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.155 (4558) [ 131.659424][ T4558] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 131.660165][ T4563] loop4: detected capacity change from 0 to 32768 [ 131.685773][ T4558] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 131.720003][ T4558] BTRFS info (device loop2): doing ref verification [ 131.734550][ T4563] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.156 (4563) [ 131.735441][ T4558] BTRFS info (device loop2): use zlib compression, level 3 [ 131.788266][ T4563] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.811382][ T4558] BTRFS info (device loop2): using free space tree [ 131.814238][ T4563] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.863721][ T4563] BTRFS info (device loop4): setting nodatacow, compression disabled [ 131.892652][ T4563] BTRFS info (device loop4): force clearing of disk cache [ 131.919509][ T4563] BTRFS info (device loop4): setting datacow [ 131.938876][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 131.946666][ T4563] BTRFS info (device loop4): doing ref verification [ 131.980572][ T4563] BTRFS info (device loop4): turning off barriers [ 132.023702][ T4563] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.033211][ T4563] BTRFS info (device loop4): use zstd compression, level 3 [ 132.045511][ T4578] loop3: detected capacity change from 0 to 512 [ 132.118830][ T4563] BTRFS info (device loop4): enabling ssd optimizations [ 132.136737][ T4563] BTRFS info (device loop4): using spread ssd allocation scheme [ 132.145780][ T4563] BTRFS info (device loop4): not using ssd optimizations [ 132.153273][ T4563] BTRFS info (device loop4): not using spread ssd allocation scheme [ 132.163154][ T4563] BTRFS info (device loop4): using free space tree [ 132.194760][ T4558] BTRFS info (device loop2): enabling ssd optimizations [ 132.318561][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 132.318582][ T26] audit: type=1800 audit(1727174900.747:354): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 132.345568][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.430612][ T4563] BTRFS info (device loop4): rebuilding free space tree [ 132.505561][ T26] audit: type=1800 audit(1727174900.767:355): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 132.846065][ T26] audit: type=1326 audit(1727174901.287:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 132.877100][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883598][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.983627][ T26] audit: type=1326 audit(1727174901.317:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 133.010681][ T3638] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.054944][ T26] audit: type=1326 audit(1727174901.327:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 133.245287][ T26] audit: type=1326 audit(1727174901.327:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 133.269730][ T26] audit: type=1326 audit(1727174901.327:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 133.368044][ T3645] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 134.038877][ T26] audit: type=1326 audit(1727174902.477:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 134.162179][ T26] audit: type=1326 audit(1727174902.517:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 134.303067][ T26] audit: type=1326 audit(1727174902.517:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 134.558333][ T4629] syz.0.171[4629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.558466][ T4629] syz.0.171[4629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.584937][ T4627] loop1: detected capacity change from 0 to 512 [ 134.685460][ T4627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.222973][ T4627] EXT4-fs (loop1): 1 truncate cleaned up [ 135.237506][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.424644][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 135.802077][ T4656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.177'. [ 135.836142][ T4658] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 135.916160][ T4658] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.092245][ T4664] loop0: detected capacity change from 0 to 512 [ 136.228519][ T4666] loop2: detected capacity change from 0 to 1024 [ 136.475426][ T4664] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.179: Failed to acquire dquot type 1 [ 136.707310][ T4654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.104680][ T4664] EXT4-fs (loop0): 1 truncate cleaned up [ 137.110507][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.130719][ T4664] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 137.161465][ T4654] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 137.262413][ T4666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.315791][ T4653] loop1: detected capacity change from 0 to 32768 [ 137.321981][ T4666] EXT4-fs (loop2): unmounting filesystem. [ 137.348711][ T4678] loop3: detected capacity change from 0 to 1024 [ 137.381395][ T4653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.175 (4653) [ 137.394872][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 137.449024][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.501572][ T4653] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.545752][ T4666] support for the xor transformation has been removed. [ 137.556830][ T4653] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.608632][ T4653] BTRFS info (device loop1): setting nodatacow, compression disabled [ 137.640145][ T4653] BTRFS info (device loop1): force clearing of disk cache [ 137.673183][ T4653] BTRFS info (device loop1): setting datacow [ 137.701602][ T4653] BTRFS info (device loop1): doing ref verification [ 137.714315][ T4653] BTRFS info (device loop1): turning off barriers [ 137.733028][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 137.749329][ T4653] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.765832][ T4653] BTRFS info (device loop1): use zstd compression, level 3 [ 137.793045][ T4653] BTRFS info (device loop1): enabling ssd optimizations [ 137.800697][ T4653] BTRFS info (device loop1): using spread ssd allocation scheme [ 137.840979][ T4653] BTRFS info (device loop1): not using ssd optimizations [ 137.848693][ T4653] BTRFS info (device loop1): not using spread ssd allocation scheme [ 137.877291][ T4653] BTRFS info (device loop1): using free space tree [ 137.897248][ T4685] loop2: detected capacity change from 0 to 1024 [ 138.024530][ T4694] loop0: detected capacity change from 0 to 128 [ 138.146609][ T4692] loop3: detected capacity change from 0 to 512 [ 138.164845][ T4694] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.281941][ T4692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.515747][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.540590][ T4692] EXT4-fs (loop3): 1 truncate cleaned up [ 138.554253][ T4692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.665376][ T4653] BTRFS error (device loop1): open_ctree failed [ 138.924520][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 138.934431][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 139.171000][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 139.171017][ T26] audit: type=1326 audit(1727174907.607:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 139.276018][ T26] audit: type=1326 audit(1727174907.717:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 139.360279][ T26] audit: type=1326 audit(1727174907.717:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 139.433217][ T26] audit: type=1326 audit(1727174907.717:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 139.634094][ T26] audit: type=1326 audit(1727174907.717:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 139.999257][ T26] audit: type=1326 audit(1727174907.737:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 140.104030][ T26] audit: type=1326 audit(1727174907.737:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 140.143654][ T26] audit: type=1326 audit(1727174907.737:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 140.176267][ T26] audit: type=1326 audit(1727174907.737:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 140.219249][ T26] audit: type=1326 audit(1727174907.737:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 140.369692][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.196'. [ 140.468194][ T4733] loop2: detected capacity change from 0 to 512 [ 140.524160][ T4733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.752650][ T4733] EXT4-fs (loop2): 1 truncate cleaned up [ 140.758647][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.781563][ T4741] loop3: detected capacity change from 0 to 8192 [ 140.880850][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 140.914358][ T4735] loop0: detected capacity change from 0 to 32768 [ 140.957730][ T4735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.199 (4735) [ 140.970652][ T4741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.016125][ T4735] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.037109][ T4735] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 141.066363][ T4735] BTRFS info (device loop0): setting nodatacow, compression disabled [ 141.084855][ T4735] BTRFS info (device loop0): force clearing of disk cache [ 141.105723][ T4735] BTRFS info (device loop0): setting datacow [ 141.115965][ T4735] BTRFS info (device loop0): doing ref verification [ 141.139190][ T4735] BTRFS info (device loop0): turning off barriers [ 141.155911][ T4735] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.204123][ T4735] BTRFS info (device loop0): use zstd compression, level 3 [ 141.228502][ T4735] BTRFS info (device loop0): enabling ssd optimizations [ 141.252702][ T4735] BTRFS info (device loop0): using spread ssd allocation scheme [ 141.302772][ T4735] BTRFS info (device loop0): not using ssd optimizations [ 141.337565][ T4735] BTRFS info (device loop0): not using spread ssd allocation scheme [ 141.364499][ T4735] BTRFS info (device loop0): using free space tree [ 141.517306][ T4735] BTRFS info (device loop0): rebuilding free space tree [ 141.757358][ T3641] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.537646][ T4770] netlink: 'syz.0.203': attribute type 11 has an invalid length. [ 142.872455][ T4774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.158753][ T4776] loop0: detected capacity change from 0 to 1024 [ 143.259304][ T4776] EXT4-fs: Ignoring removed nobh option [ 143.305348][ T4776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.402381][ T4776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.516648][ T4782] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 143.561892][ T4780] IPVS: stopping master sync thread 4782 ... [ 143.635119][ T4776] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 143.678429][ T4776] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.678429][ T4776] [ 143.698217][ T4776] EXT4-fs (loop0): Total free blocks count 0 [ 143.743783][ T4776] EXT4-fs (loop0): Free/Dirty block details [ 143.766071][ T4776] EXT4-fs (loop0): free_blocks=0 [ 143.779223][ T4776] EXT4-fs (loop0): dirty_blocks=0 [ 143.811816][ T4776] EXT4-fs (loop0): Block reservation details [ 143.833770][ T4776] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 143.956167][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 144.311464][ T4799] loop3: detected capacity change from 0 to 1024 [ 144.527658][ T4802] loop2: detected capacity change from 0 to 164 [ 144.934432][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.270949][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 146.374157][ T4822] loop0: detected capacity change from 0 to 256 [ 146.382769][ T4822] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 146.992615][ T4834] loop1: detected capacity change from 0 to 512 [ 147.109272][ T3652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.120939][ T3652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.132253][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.148108][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.156483][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.166735][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.250574][ T4834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.280387][ T4834] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 147.554884][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 147.554900][ T26] audit: type=1326 audit(1727174915.997:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 147.616532][ T4834] netlink: '+}[@': attribute type 10 has an invalid length. [ 147.682588][ T26] audit: type=1326 audit(1727174916.027:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 147.733463][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.752337][ T26] audit: type=1326 audit(1727174916.027:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4fbb7c890 code=0x7ffc0000 [ 147.794336][ T4834] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.854293][ T26] audit: type=1326 audit(1727174916.027:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 147.885162][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 147.930281][ T26] audit: type=1326 audit(1727174916.027:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 148.065339][ T26] audit: type=1326 audit(1727174916.027:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 148.127666][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 148.152759][ T4835] loop0: detected capacity change from 0 to 32768 [ 148.504122][ T4835] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.226 (4835) [ 148.536541][ T26] audit: type=1326 audit(1727174916.027:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 148.854524][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 148.866912][ T26] audit: type=1326 audit(1727174916.027:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 148.909998][ T26] audit: type=1326 audit(1727174916.027:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 148.927213][ T4835] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.952985][ T4835] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.018028][ T4835] BTRFS info (device loop0): setting nodatacow, compression disabled [ 149.028503][ T26] audit: type=1326 audit(1727174916.027:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 149.108248][ T4835] BTRFS info (device loop0): force clearing of disk cache [ 149.143656][ T4835] BTRFS info (device loop0): setting datacow [ 149.187039][ T4864] loop3: detected capacity change from 0 to 1024 [ 149.193823][ T4835] BTRFS info (device loop0): doing ref verification [ 149.200491][ T4835] BTRFS info (device loop0): turning off barriers [ 149.233718][ T4835] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.243192][ T4835] BTRFS info (device loop0): use zstd compression, level 3 [ 149.266540][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.282327][ T3651] Bluetooth: hci5: command tx timeout [ 149.303270][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.341667][ T4836] device bridge_slave_0 entered promiscuous mode [ 149.354707][ T4864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.373761][ T4835] BTRFS info (device loop0): enabling ssd optimizations [ 149.380941][ T4835] BTRFS info (device loop0): using spread ssd allocation scheme [ 149.460568][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.485581][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.512663][ T4835] BTRFS info (device loop0): not using ssd optimizations [ 149.551363][ T4836] device bridge_slave_1 entered promiscuous mode [ 149.579522][ T4835] BTRFS info (device loop0): not using spread ssd allocation scheme [ 149.616708][ T4835] BTRFS info (device loop0): using free space tree [ 149.637991][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.715379][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.789693][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 150.308625][ T4835] BTRFS error (device loop0): open_ctree failed [ 150.361907][ T4895] random: crng reseeded on system resumption [ 150.767305][ T4898] loop1: detected capacity change from 0 to 512 [ 150.817341][ T4898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.847852][ T4836] team0: Port device team_slave_0 added [ 150.890651][ T4836] team0: Port device team_slave_1 added [ 150.899132][ T4898] EXT4-fs (loop1): 1 truncate cleaned up [ 150.937781][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.097012][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.132622][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 151.138684][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.309997][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.383764][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.391147][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.053692][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.087398][ T3651] Bluetooth: hci5: command tx timeout [ 154.254620][ T4915] mmap: syz.0.244 (4915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.343189][ T4917] loop2: detected capacity change from 0 to 1024 [ 154.381432][ T4836] device hsr_slave_0 entered promiscuous mode [ 154.411131][ T4836] device hsr_slave_1 entered promiscuous mode [ 154.445098][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.452728][ T4836] Cannot create hsr debugfs directory [ 154.573765][ T4920] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 154.576733][ T4922] overlayfs: missing 'lowerdir' [ 154.609811][ T4917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.968746][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 155.092500][ T4935] loop2: detected capacity change from 0 to 512 [ 155.288631][ T4935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.432897][ T4935] EXT4-fs (loop2): 1 truncate cleaned up [ 155.440218][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.467781][ T4930] loop3: detected capacity change from 0 to 32768 [ 155.484455][ T4930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.249 (4930) [ 155.629805][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 155.664781][ T4930] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.686006][ T4930] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 155.778708][ T4943] loop2: detected capacity change from 0 to 128 [ 155.796891][ T4930] BTRFS info (device loop3): setting nodatacow, compression disabled [ 155.811270][ T4943] EXT4-fs: Ignoring removed nobh option [ 155.817364][ T4930] BTRFS info (device loop3): force clearing of disk cache [ 155.844345][ T4930] BTRFS info (device loop3): setting datacow [ 155.850632][ T4930] BTRFS info (device loop3): doing ref verification [ 155.884057][ T4930] BTRFS info (device loop3): turning off barriers [ 155.891656][ T4930] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.907055][ T4930] BTRFS info (device loop3): use zstd compression, level 3 [ 155.914510][ T4930] BTRFS info (device loop3): enabling ssd optimizations [ 155.921579][ T4930] BTRFS info (device loop3): using spread ssd allocation scheme [ 155.929430][ T4930] BTRFS info (device loop3): not using ssd optimizations [ 155.936578][ T4930] BTRFS info (device loop3): not using spread ssd allocation scheme [ 155.945756][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.954665][ T4930] BTRFS info (device loop3): using free space tree [ 156.257244][ T3651] Bluetooth: hci5: command tx timeout [ 156.297170][ T4943] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff) [ 156.859918][ T4967] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 157.015560][ T4930] BTRFS info (device loop3): rebuilding free space tree [ 157.487081][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 157.668498][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 157.668514][ T26] audit: type=1326 audit(1727174926.107:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 157.797087][ T26] audit: type=1326 audit(1727174926.167:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 157.801478][ T3640] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.861221][ T4975] loop2: detected capacity change from 0 to 2048 [ 157.996949][ T26] audit: type=1326 audit(1727174926.167:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.030094][ T4977] loop0: detected capacity change from 0 to 1024 [ 158.053444][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 158.140289][ T26] audit: type=1326 audit(1727174926.167:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.187364][ T4977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.205579][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 158.257258][ T26] audit: type=1326 audit(1727174926.187:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.299510][ T26] audit: type=1326 audit(1727174926.187:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.327594][ T4836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.350859][ T3651] Bluetooth: hci5: command tx timeout [ 158.457070][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 158.513814][ T26] audit: type=1326 audit(1727174926.187:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.550834][ T4983] device ipvlan1 entered promiscuous mode [ 158.561221][ T4985] overlayfs: missing 'lowerdir' [ 158.590876][ T4983] device ipvlan1 left promiscuous mode [ 158.620369][ T26] audit: type=1326 audit(1727174926.187:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.731273][ T26] audit: type=1326 audit(1727174926.187:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.803755][ T26] audit: type=1326 audit(1727174926.187:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 158.831635][ T4990] loop3: detected capacity change from 0 to 128 [ 158.847761][ T4990] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.327044][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.984370][ T5005] loop3: detected capacity change from 0 to 32768 [ 162.033141][ T5005] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.268 (5005) [ 162.089415][ T5005] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.121445][ T5005] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 162.153678][ T5005] BTRFS info (device loop3): setting nodatacow, compression disabled [ 162.163201][ T5005] BTRFS info (device loop3): force clearing of disk cache [ 162.202982][ T5005] BTRFS info (device loop3): setting datacow [ 162.227878][ T5005] BTRFS info (device loop3): doing ref verification [ 162.259244][ T5005] BTRFS info (device loop3): turning off barriers [ 162.283454][ T5005] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.305340][ T5011] syz.0.270[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.305452][ T5011] syz.0.270[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.333741][ T5005] BTRFS info (device loop3): use zstd compression, level 3 [ 162.386615][ T5005] BTRFS info (device loop3): enabling ssd optimizations [ 162.407445][ T5005] BTRFS info (device loop3): using spread ssd allocation scheme [ 162.427727][ T5005] BTRFS info (device loop3): not using ssd optimizations [ 162.451080][ T5005] BTRFS info (device loop3): not using spread ssd allocation scheme [ 162.474265][ T5005] BTRFS info (device loop3): using free space tree [ 162.815233][ T5005] BTRFS info (device loop3): rebuilding free space tree [ 163.566022][ T4836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.037636][ T5033] overlayfs: missing 'lowerdir' [ 164.076257][ T5034] netlink: 332 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.091037][ T3640] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.151383][ T5034] netlink: 'syz.2.273': attribute type 9 has an invalid length. [ 164.207944][ T5034] netlink: 108 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.313672][ T5034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.273'. [ 164.687176][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 165.440698][ T5061] syz.3.284[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.440814][ T5061] syz.3.284[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.716556][ T5063] loop0: detected capacity change from 0 to 512 [ 165.751208][ T5065] overlayfs: missing 'lowerdir' [ 165.933333][ T5057] loop2: detected capacity change from 0 to 32768 [ 165.966494][ T5057] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.283 (5057) [ 166.016762][ T5057] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.035740][ T5057] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.053837][ T5057] BTRFS info (device loop2): setting nodatacow, compression disabled [ 166.062038][ T5057] BTRFS info (device loop2): force clearing of disk cache [ 166.083615][ T5057] BTRFS info (device loop2): setting datacow [ 166.089692][ T5057] BTRFS info (device loop2): doing ref verification [ 166.128954][ T5057] BTRFS info (device loop2): turning off barriers [ 166.172329][ T5057] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.182921][ T5057] BTRFS info (device loop2): use zstd compression, level 3 [ 166.216149][ T5057] BTRFS info (device loop2): enabling ssd optimizations [ 166.223340][ T5057] BTRFS info (device loop2): using spread ssd allocation scheme [ 166.240764][ T5057] BTRFS info (device loop2): not using ssd optimizations [ 166.264982][ T5057] BTRFS info (device loop2): not using spread ssd allocation scheme [ 166.273310][ T5057] BTRFS info (device loop2): using free space tree [ 166.413090][ T5057] BTRFS info (device loop2): rebuilding free space tree [ 166.553701][ T3645] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.903463][ T4836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.338969][ T5111] loop1: detected capacity change from 0 to 136 [ 168.356502][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 168.356519][ T26] audit: type=1326 audit(1727174936.797:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 168.406801][ T26] audit: type=1326 audit(1727174936.837:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 168.434237][ T26] audit: type=1326 audit(1727174936.837:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 168.460276][ T26] audit: type=1326 audit(1727174936.837:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000 [ 169.008840][ T5120] syz.1.301[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.019632][ T5120] syz.1.301[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.201329][ T5124] syz.1.301[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.426336][ T5124] syz.1.301[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.120139][ T5140] loop1: detected capacity change from 0 to 512 [ 173.289902][ T5153] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 173.454246][ T5153] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 173.487898][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 175.090343][ T26] audit: type=1326 audit(1727174943.527:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.463607][ T26] audit: type=1326 audit(1727174943.527:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.485911][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.589452][ T26] audit: type=1326 audit(1727174943.527:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.623435][ T26] audit: type=1326 audit(1727174943.717:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.648719][ T5175] loop0: detected capacity change from 0 to 1024 [ 175.678028][ T26] audit: type=1326 audit(1727174943.717:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.711852][ T5179] loop1: detected capacity change from 0 to 512 [ 175.717287][ T26] audit: type=1326 audit(1727174943.737:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.764755][ T5175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 175.847553][ T26] audit: type=1326 audit(1727174943.737:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 175.972970][ T26] audit: type=1326 audit(1727174943.737:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 176.007450][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 176.101758][ T4836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.137206][ T26] audit: type=1326 audit(1727174943.747:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 176.319957][ T5192] loop2: detected capacity change from 0 to 1024 [ 176.328315][ T5192] EXT4-fs: Ignoring removed i_version option [ 176.334797][ T5192] EXT4-fs: Ignoring removed bh option [ 176.341218][ T26] audit: type=1326 audit(1727174943.747:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 176.374731][ T5192] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 176.400664][ T5192] EXT4-fs (loop2): mount failed [ 178.526064][ T5208] loop2: detected capacity change from 0 to 512 [ 178.582215][ T5208] EXT4-fs (loop2): too many log groups per flexible block group [ 178.610767][ T5208] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 178.625886][ T5208] EXT4-fs (loop2): mount failed [ 179.579880][ T5219] loop0: detected capacity change from 0 to 128 [ 181.164703][ T5234] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 182.283325][ T5245] loop3: detected capacity change from 0 to 512 [ 182.378114][ T5240] loop1: detected capacity change from 0 to 8192 [ 182.640367][ T5240] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.113538][ C1] sched: RT throttling activated [ 184.583826][ T5261] syz.0.346 uses obsolete (PF_INET,SOCK_PACKET) [ 184.934097][ T5273] loop2: detected capacity change from 0 to 256 [ 185.240917][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.355748][ T5273] FAT-fs (loop2): Filesystem has been set read-only [ 185.411436][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.427065][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.457324][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.472100][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.484246][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.496238][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.560309][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.571584][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.581236][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 185.594329][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 185.594345][ T26] audit: type=1800 audit(1727174954.037:508): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.351" name="file1" dev="loop2" ino=1048634 res=0 errno=0 [ 185.660268][ T5273] syz.2.351 (5273) used greatest stack depth: 19120 bytes left [ 185.974188][ T4836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.041253][ T4836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.072133][ T4836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.100816][ T26] audit: type=1326 audit(1727174954.537:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.152268][ T4836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.182283][ T26] audit: type=1326 audit(1727174954.567:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.254064][ T26] audit: type=1326 audit(1727174954.567:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.352741][ T26] audit: type=1326 audit(1727174954.567:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.438006][ T26] audit: type=1326 audit(1727174954.567:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.533117][ T26] audit: type=1326 audit(1727174954.567:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.622646][ T26] audit: type=1326 audit(1727174954.577:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.650264][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.692484][ T26] audit: type=1326 audit(1727174954.577:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 186.708665][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.715033][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.769990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.832944][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.904788][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.954890][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.987459][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.994942][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.062176][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.111082][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.162885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.203013][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.210324][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.267018][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.298606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.333680][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.399829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.439125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.467341][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.509388][ T4836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.540671][ T4836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.557982][ T5300] loop2: detected capacity change from 0 to 8192 [ 187.572309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.591087][ T5300] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.607339][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.626550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.642794][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.655702][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.676039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.329192][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.381830][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.422088][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.771874][ T26] audit: type=1326 audit(1727174958.207:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000 [ 190.166866][ T5326] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.226339][ T5326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.319584][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 190.346715][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 190.590900][ T5336] loop2: detected capacity change from 0 to 1024 [ 191.515087][ T5336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.532255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.564586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.713446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.765276][ T5339] loop1: detected capacity change from 0 to 8192 [ 191.773009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.790326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.800148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.820890][ T4836] device veth0_vlan entered promiscuous mode [ 191.829428][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 191.842919][ T4836] device veth1_vlan entered promiscuous mode [ 191.880899][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.891001][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.907684][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.918263][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.930199][ T4836] device veth0_macvtap entered promiscuous mode [ 191.943453][ T4836] device veth1_macvtap entered promiscuous mode [ 191.966216][ T5339] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.981657][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.002366][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.022310][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.040066][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.051307][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.069819][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.081806][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.100134][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.112536][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.126895][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.140413][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.156218][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.171088][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.185635][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.208319][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.448110][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.563625][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.638860][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.729723][ T5352] loop0: detected capacity change from 0 to 512 [ 192.766179][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.800949][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.840034][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.872766][ T5348] loop2: detected capacity change from 0 to 8192 [ 192.879462][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.903632][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.935426][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.987523][ T4836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.026835][ T4836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.098106][ T4836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.343975][ T4836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.552246][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.726385][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.717238][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.725549][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.822179][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.842321][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.882764][ T5370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.077171][ T5370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 195.591530][ T5382] loop2: detected capacity change from 0 to 512 [ 195.599384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.624654][ T5382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.725566][ T5382] EXT4-fs (loop2): 1 truncate cleaned up [ 195.739069][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.749700][ T5382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.766773][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.855740][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.916139][ T5386] loop1: detected capacity change from 0 to 512 [ 195.989672][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 196.017112][ T5386] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 196.075096][ T5386] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.091084][ T5388] loop0: detected capacity change from 0 to 512 [ 196.118564][ T5386] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.153396][ T5386] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 196.214835][ T5386] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2924: inode #16: comm syz.1.378: corrupted xattr block 31 [ 196.237154][ T5388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 196.253489][ T5388] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 196.268032][ T5386] EXT4-fs (loop1): Remounting filesystem read-only [ 196.286288][ T5386] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 196.313751][ T5386] EXT4-fs (loop1): 1 orphan inode deleted [ 196.319904][ T5386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.725212][ T3656] Bluetooth: hci4: command 0x0406 tx timeout [ 196.731795][ T3651] Bluetooth: hci1: command 0x0406 tx timeout [ 196.784445][ T3651] Bluetooth: hci3: command 0x0406 tx timeout [ 196.913973][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 197.301917][ T5404] loop1: detected capacity change from 0 to 1024 [ 197.309489][ T5404] EXT4-fs: Ignoring removed oldalloc option [ 197.392019][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.747688][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 197.946149][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 197.946166][ T26] audit: type=1326 audit(1727174966.387:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 198.002239][ T5417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.024252][ T26] audit: type=1326 audit(1727174966.427:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 198.208293][ T26] audit: type=1326 audit(1727174966.427:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000 [ 198.830731][ T5427] loop1: detected capacity change from 0 to 512 [ 198.841458][ T5427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.869512][ T5427] EXT4-fs (loop1): 1 truncate cleaned up [ 198.876706][ T5427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.898167][ T5429] loop4: detected capacity change from 0 to 256 [ 198.945558][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 198.997909][ T5429] FAT-fs (loop4): Directory bread(block 64) failed [ 199.033796][ T5429] FAT-fs (loop4): Directory bread(block 65) failed [ 199.040586][ T5429] FAT-fs (loop4): Directory bread(block 66) failed [ 199.083674][ T5429] FAT-fs (loop4): Directory bread(block 67) failed [ 199.107960][ T5429] FAT-fs (loop4): Directory bread(block 68) failed [ 199.129058][ T5429] FAT-fs (loop4): Directory bread(block 69) failed [ 199.148341][ T5429] FAT-fs (loop4): Directory bread(block 70) failed [ 199.183053][ T5429] FAT-fs (loop4): Directory bread(block 71) failed [ 199.193745][ T5429] FAT-fs (loop4): Directory bread(block 72) failed [ 199.233709][ T5429] FAT-fs (loop4): Directory bread(block 73) failed [ 199.322494][ T5429] process 'syz.4.390' launched './file0' with NULL argv: empty string added [ 199.346890][ T5439] netlink: 9 bytes leftover after parsing attributes in process `syz.2.395'. [ 199.368047][ T5429] syz.4.390: attempt to access beyond end of device [ 199.368047][ T5429] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 199.444510][ T5429] syz.4.390: attempt to access beyond end of device [ 199.444510][ T5429] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 199.499680][ T5441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'. [ 199.743017][ T5446] loop1: detected capacity change from 0 to 128 [ 199.902185][ T5446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.922641][ T5451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.065763][ T5449] loop2: detected capacity change from 0 to 8192 [ 200.102918][ T5449] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.955326][ T5463] xt_hashlimit: max too large, truncated to 1048576 [ 201.166930][ T5465] loop1: detected capacity change from 0 to 1024 [ 201.191554][ T5467] loop4: detected capacity change from 0 to 512 [ 201.194637][ T5465] EXT4-fs: Ignoring removed orlov option [ 201.214589][ T5467] EXT4-fs: Ignoring removed oldalloc option [ 201.234023][ T5465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.282898][ T5467] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.406: Parent and EA inode have the same ino 15 [ 201.337231][ T5465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.353307][ T5467] EXT4-fs (loop4): Remounting filesystem read-only [ 201.403084][ T5467] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.406: couldn't truncate inode 15 (err -30) [ 201.452976][ T5467] EXT4-fs (loop4): 1 orphan inode deleted [ 201.488242][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.592821][ T4836] EXT4-fs (loop4): unmounting filesystem. [ 201.660405][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 202.090645][ T5481] loop1: detected capacity change from 0 to 512 [ 202.171048][ T5481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.224038][ T5481] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 202.475719][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 202.764376][ T5478] 9pnet_fd: Insufficient options for proto=fd [ 202.894957][ T5490] atomic_op ffff8880575f1198 conn xmit_atomic 0000000000000000 [ 205.697354][ T5522] loop3: detected capacity change from 0 to 1024 [ 205.720877][ T5522] EXT4-fs: Ignoring removed bh option [ 205.831199][ T5522] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 205.892137][ T5522] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 205.995203][ T5522] EXT4-fs (loop3): mount failed [ 207.031170][ T5515] loop1: detected capacity change from 0 to 32768 [ 207.084922][ T5515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.421 (5515) [ 207.804696][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.836354][ T5515] BTRFS error (device loop1): open_ctree failed [ 207.933748][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.936158][ T5538] loop4: detected capacity change from 0 to 128 [ 207.942942][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.957758][ T3656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.966711][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.974620][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.981521][ T5538] FAT-fs (loop4): Unrecognized mount option "ÿÿ18446744073709551615" or missing value [ 208.435972][ T5552] loop2: detected capacity change from 0 to 1024 [ 208.504123][ T5533] chnl_net:caif_netlink_parms(): no params data found [ 209.316328][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.943398][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.989094][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.999320][ T5533] device bridge_slave_0 entered promiscuous mode [ 210.008718][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.028880][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.041722][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 210.054473][ T3656] Bluetooth: hci2: command tx timeout [ 210.105777][ T5533] device bridge_slave_1 entered promiscuous mode [ 210.399312][ T5533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.472045][ T5533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.597220][ T5533] team0: Port device team_slave_0 added [ 210.650092][ T5533] team0: Port device team_slave_1 added [ 210.940288][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.998779][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.220995][ T5533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.390125][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.453254][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.522013][ T5533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.672004][ T5576] IPVS: Error connecting to the multicast addr [ 211.709808][ T5533] device hsr_slave_0 entered promiscuous mode [ 211.734753][ T5533] device hsr_slave_1 entered promiscuous mode [ 211.761016][ T5533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.771175][ T5533] Cannot create hsr debugfs directory [ 211.791246][ T5569] loop3: detected capacity change from 0 to 32768 [ 211.798726][ T5576] loop2: detected capacity change from 0 to 1024 [ 211.820942][ T5569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.438 (5569) [ 211.851097][ T5569] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.870850][ T5576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.873331][ T5569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 211.891640][ T5569] BTRFS info (device loop3): using free space tree [ 212.057831][ T5569] BTRFS info (device loop3): enabling ssd optimizations [ 212.066938][ T3651] Bluetooth: hci0: command 0x0406 tx timeout [ 212.152467][ T3651] Bluetooth: hci2: command tx timeout [ 212.152944][ T5599] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 212.368699][ T5602] loop1: detected capacity change from 0 to 512 [ 212.419199][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 212.442796][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 212.499636][ T5602] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff) [ 212.666575][ T26] audit: type=1800 audit(1727174981.107:561): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.429" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 213.053241][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 214.229713][ T3651] Bluetooth: hci2: command tx timeout [ 214.499617][ T5625] loop2: detected capacity change from 0 to 1024 [ 215.181623][ T3640] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.234629][ T5625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.295331][ T5533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.313861][ T3651] Bluetooth: hci2: command tx timeout [ 216.489456][ T5634] loop1: detected capacity change from 0 to 512 [ 216.617884][ T26] audit: type=1326 audit(1727174985.057:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 216.640448][ T5634] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.640872][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 216.696191][ T26] audit: type=1326 audit(1727174985.097:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 216.738104][ T5634] EXT4-fs (loop1): 1 truncate cleaned up [ 216.763052][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.819443][ T26] audit: type=1326 audit(1727174985.097:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 217.148667][ T3829] EXT4-fs (loop1): unmounting filesystem. [ 218.292079][ T5647] loop2: detected capacity change from 0 to 32768 [ 218.325733][ T5647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.456 (5647) [ 219.194817][ T5647] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.234200][ T5647] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 219.248989][ T5647] BTRFS info (device loop2): using free space tree [ 219.319930][ T5674] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 219.367337][ T5681] loop3: detected capacity change from 0 to 1024 [ 219.400295][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.430514][ T5674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.569928][ T5685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.601477][ T5685] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 219.639457][ T5685] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 219.657910][ T5647] BTRFS info (device loop2): enabling ssd optimizations [ 219.921061][ T5702] loop4: detected capacity change from 0 to 512 [ 220.019025][ T5702] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 220.034805][ T5702] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 220.101767][ T5533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.107953][ T5702] EXT4-fs (loop4): 1 truncate cleaned up [ 220.221621][ T5702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.277018][ T5702] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 220.313145][ T5702] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 220.410511][ T4836] EXT4-fs (loop4): unmounting filesystem. [ 221.768519][ T5710] loop4: detected capacity change from 0 to 512 [ 221.796443][ T5710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.822819][ T3645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.900217][ T5710] EXT4-fs (loop4): 1 truncate cleaned up [ 221.925674][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 221.934339][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.148993][ T5715] loop3: detected capacity change from 0 to 512 [ 222.236468][ T4836] EXT4-fs (loop4): unmounting filesystem. [ 222.265989][ T5715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.303464][ T5715] ext4 filesystem being mounted at /109/bus supports timestamps until 2038 (0x7fffffff) [ 223.320369][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 225.120924][ T5747] loop4: detected capacity change from 0 to 1024 [ 225.351614][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.724977][ T4836] EXT4-fs (loop4): unmounting filesystem. [ 225.821344][ T5533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.857353][ T26] audit: type=1326 audit(1727174994.297:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.1.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x0 [ 225.966687][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 226.066236][ T5738] loop2: detected capacity change from 0 to 32768 [ 226.084521][ T5738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.478 (5738) [ 226.149130][ T5738] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.162572][ T5533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.173845][ T5738] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 226.183105][ T5738] BTRFS info (device loop2): using free space tree [ 227.032376][ T5738] BTRFS error (device loop2): open_ctree failed [ 227.244923][ T5795] loop3: detected capacity change from 0 to 1024 [ 227.314850][ T5795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.968074][ T3640] EXT4-fs (loop3): unmounting filesystem. [ 228.007493][ T5791] loop1: detected capacity change from 0 to 8192 [ 228.026328][ T5791] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.132474][ T5800] loop4: detected capacity change from 0 to 1024 [ 228.178204][ T5800] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 228.420445][ T5533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.436740][ T5808] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 228.548655][ T5808] device bond1 entered promiscuous mode [ 228.559898][ T5533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.587310][ T5814] loop1: detected capacity change from 0 to 136 [ 228.669207][ T5811] team0: Port device team_slave_1 removed [ 228.675965][ T5817] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.693701][ T5533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.728418][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 228.749001][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.778524][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.792881][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.825613][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.997385][ T5823] loop2: detected capacity change from 0 to 1024 [ 229.199155][ T5823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.765621][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 229.923678][ T5533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.484077][ T5387] EXT4-fs (loop0): unmounting filesystem. [ 230.675143][ T5533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.784282][ T5836] loop4: detected capacity change from 0 to 8192 [ 230.854861][ T5836] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.434383][ T5829] loop2: detected capacity change from 0 to 32768 [ 231.460762][ T5829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.503 (5829) [ 231.563904][ T5829] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.618627][ T5829] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 231.644350][ T5829] BTRFS info (device loop2): using free space tree [ 231.777906][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.787109][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.830536][ T5533] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.983168][ T5829] BTRFS info (device loop2): enabling ssd optimizations [ 232.061074][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.075984][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.098516][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.106013][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.190481][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.206962][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.247235][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.262992][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.270217][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.310403][ T4381] device hsr_slave_0 left promiscuous mode [ 232.332297][ T4381] device hsr_slave_1 left promiscuous mode [ 232.352052][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.379719][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.402856][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.422457][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.433645][ T4381] device bridge_slave_1 left promiscuous mode [ 232.482434][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.512817][ T4381] device bridge_slave_0 left promiscuous mode [ 232.530814][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.556460][ T3645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.646168][ T4381] device veth1_macvtap left promiscuous mode [ 232.652415][ T4381] device veth0_macvtap left promiscuous mode [ 232.690516][ T4381] device veth1_vlan left promiscuous mode [ 232.707814][ T4381] device veth0_vlan left promiscuous mode [ 232.991422][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.000503][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.011324][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.024279][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.032818][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.042510][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.027738][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 234.095921][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 234.155287][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.219824][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.511126][ T26] audit: type=1326 audit(1727175002.947:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.559607][ T26] audit: type=1326 audit(1727175002.947:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.612203][ T26] audit: type=1326 audit(1727175002.947:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.652422][ T26] audit: type=1326 audit(1727175002.947:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.680334][ T5892] loop4: detected capacity change from 0 to 512 [ 234.697136][ T5892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.702095][ T26] audit: type=1326 audit(1727175002.947:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.744232][ T26] audit: type=1326 audit(1727175002.947:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.770431][ T26] audit: type=1326 audit(1727175002.947:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.795296][ T26] audit: type=1326 audit(1727175002.947:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.820399][ T26] audit: type=1326 audit(1727175002.947:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.837070][ T5892] EXT4-fs (loop4): 1 truncate cleaned up [ 234.844631][ T26] audit: type=1326 audit(1727175002.947:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000 [ 234.871788][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.954109][ T4836] EXT4-fs (loop4): unmounting filesystem. [ 235.093757][ T3651] Bluetooth: hci0: command tx timeout [ 235.280664][ T4381] bond0 (unregistering): Released all slaves [ 235.365154][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.447008][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.468804][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.491021][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.524717][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.560535][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.574991][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.616159][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.658891][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.847788][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.864828][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.934731][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.174955][ T3651] Bluetooth: hci0: command tx timeout [ 237.384946][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 237.418839][ T5919] loop2: detected capacity change from 0 to 8192 [ 237.484800][ T5919] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.166076][ T4381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.262283][ T5930] loop2: detected capacity change from 0 to 256 [ 238.284541][ T5930] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 238.357277][ T4381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.380471][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.403776][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.426260][ T5872] device bridge_slave_0 entered promiscuous mode [ 238.451005][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.509687][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.534630][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.608534][ T4381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.610682][ T5939] loop2: detected capacity change from 0 to 512 [ 238.664696][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.677951][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.695173][ T5872] device bridge_slave_1 entered promiscuous mode [ 238.716209][ T5939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.734030][ T5939] ext4 filesystem being mounted at /135/bus supports timestamps until 2038 (0x7fffffff) [ 238.777694][ T4381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.826832][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.839300][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.876947][ T5872] team0: Port device team_slave_0 added [ 238.888795][ T5872] team0: Port device team_slave_1 added [ 239.002626][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.041215][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.264842][ T3651] Bluetooth: hci0: command tx timeout [ 239.306961][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.366903][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 239.431185][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.530429][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.560278][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.569730][ T5953] loop3: detected capacity change from 0 to 8192 [ 239.578196][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.579895][ T5953] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.628748][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.682422][ T5957] loop2: detected capacity change from 0 to 512 [ 239.703092][ T5872] device hsr_slave_0 entered promiscuous mode [ 239.715428][ T5872] device hsr_slave_1 entered promiscuous mode [ 239.726170][ T5957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 239.755258][ T5957] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 239.861204][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'. [ 239.907695][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.927249][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.962029][ T5533] device veth0_vlan entered promiscuous mode [ 239.970785][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.979721][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.006473][ T3645] EXT4-fs (loop2): unmounting filesystem. [ 240.116396][ T5533] device veth1_vlan entered promiscuous mode [ 240.493753][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.528215][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.572953][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.588306][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.598350][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 240.598368][ T26] audit: type=1326 audit(1727175009.037:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 240.741901][ T26] audit: type=1326 audit(1727175009.077:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 240.842375][ T26] audit: type=1326 audit(1727175009.077:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 240.887662][ T5533] device veth0_macvtap entered promiscuous mode [ 241.091505][ T5533] device veth1_macvtap entered promiscuous mode [ 241.206243][ T26] audit: type=1326 audit(1727175009.077:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.703850][ T3651] Bluetooth: hci0: command tx timeout [ 241.752803][ T26] audit: type=1326 audit(1727175009.077:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.803644][ T26] audit: type=1326 audit(1727175009.087:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.843574][ T26] audit: type=1326 audit(1727175009.087:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.903668][ T26] audit: type=1326 audit(1727175009.087:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.963239][ T26] audit: type=1326 audit(1727175009.087:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 241.997183][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.037886][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.058331][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.095762][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.119957][ T26] audit: type=1326 audit(1727175009.087:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000 [ 242.130064][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.213151][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.298498][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.515282][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.559018][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.695000][ T5989] loop4: detected capacity change from 0 to 32768 [ 242.704133][ T5989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.550 (5989) [ 242.722929][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.741063][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.798913][ T5989] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 242.809508][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.828096][ T5989] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 242.837786][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.854279][ T5989] BTRFS info (device loop4): setting nodatacow, compression disabled [ 242.859568][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.878259][ T5989] BTRFS info (device loop4): force clearing of disk cache [ 242.889605][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.898043][ T5989] BTRFS info (device loop4): setting datacow [ 242.910136][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.918102][ T5989] BTRFS info (device loop4): doing ref verification [ 242.941413][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.953623][ T5989] BTRFS info (device loop4): turning off barriers [ 242.957856][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.970396][ T5989] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 242.980406][ T5989] BTRFS info (device loop4): use zstd compression, level 3 [ 242.989881][ T5989] BTRFS info (device loop4): enabling ssd optimizations [ 242.997404][ T5989] BTRFS info (device loop4): using spread ssd allocation scheme [ 243.005740][ T5989] BTRFS info (device loop4): not using ssd optimizations [ 243.024762][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.033385][ T5989] BTRFS info (device loop4): not using spread ssd allocation scheme [ 243.055251][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.070453][ T5989] BTRFS info (device loop4): using free space tree [ 243.144383][ T5533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.161412][ T5533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.171056][ T5533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.184640][ T5533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.198800][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 243.218190][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.230353][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.247839][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.262468][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.309389][ T6011] loop3: detected capacity change from 0 to 8192 [ 243.316722][ T5989] BTRFS info (device loop4): rebuilding free space tree [ 243.330260][ T6011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.729205][ T4836] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.776918][ T6021] loop2: detected capacity change from 0 to 164 [ 243.791033][ T6021] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 243.820117][ T6021] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 243.993954][ T6022] syz.2.555: attempt to access beyond end of device [ 243.993954][ T6022] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 244.016464][ T6022] syz.2.555: attempt to access beyond end of device [ 244.016464][ T6022] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 244.035192][ T6021] syz.2.555: attempt to access beyond end of device [ 244.035192][ T6021] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 244.338100][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.351146][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.496280][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.436900][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.488611][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.525990][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.528284][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.546353][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.662987][ T6045] usb usb1: usbfs: process 6045 (syz.2.563) did not claim interface 0 before use [ 245.786109][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.795428][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.833183][ T6049] netlink: 272 bytes leftover after parsing attributes in process `syz.2.565'. [ 245.904583][ T6049] ------------[ cut here ]------------ [ 245.910175][ T6049] WARNING: CPU: 1 PID: 6049 at net/wireless/core.h:231 wdev_lock+0x96/0xc0 [ 245.918933][ T6049] Modules linked in: [ 245.922885][ T6049] CPU: 1 PID: 6049 Comm: syz.2.565 Not tainted 6.1.111-syzkaller #0 [ 245.931072][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 245.941392][ T6049] RIP: 0010:wdev_lock+0x96/0xc0 [ 245.946451][ T6049] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 245.967041][ T6049] RSP: 0018:ffffc90003acef40 EFLAGS: 00010287 [ 245.973602][ T6049] RAX: ffffffff8a0ccac6 RBX: ffff88807e600c90 RCX: 0000000000040000 [ 245.981722][ T6049] RDX: ffffc9000a61a000 RSI: 0000000000004065 RDI: 0000000000004066 [ 245.989899][ T6049] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed1009448412 [ 245.998129][ T6049] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 246.006209][ T6049] R13: ffff8880629278c0 R14: dffffc0000000000 R15: ffff88804a242014 [ 246.014367][ T6049] FS: 00007f7c4cbff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 246.023446][ T6049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.030506][ T6049] CR2: 00007f368f3d7000 CR3: 0000000076336000 CR4: 00000000003506e0 [ 246.038688][ T6049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.046884][ T6049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.054978][ T6049] Call Trace: [ 246.058447][ T6049] [ 246.061438][ T6049] ? __warn+0x15a/0x520 [ 246.065787][ T6049] ? wdev_lock+0x96/0xc0 [ 246.070089][ T6049] ? report_bug+0x2af/0x500 [ 246.074766][ T6049] ? wdev_lock+0x96/0xc0 [ 246.079074][ T6049] ? handle_bug+0x3d/0x70 [ 246.083601][ T6049] ? exc_invalid_op+0x16/0x40 [ 246.088468][ T6049] ? asm_exc_invalid_op+0x16/0x20 [ 246.093709][ T6049] ? wdev_lock+0x6f/0xc0 [ 246.098003][ T6049] ? wdev_lock+0x96/0xc0 [ 246.102340][ T6049] ? wdev_lock+0x96/0xc0 [ 246.106685][ T6049] nl80211_send_iface+0x816/0x1470 [ 246.111879][ T6049] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.118076][ T6049] ? nl80211_notify_iface+0x160/0x160 [ 246.123569][ T6049] ? kasan_quarantine_put+0xd4/0x220 [ 246.128995][ T6049] ? lockdep_hardirqs_on+0x94/0x130 [ 246.134397][ T6049] ? __kmem_cache_free+0x25c/0x3c0 [ 246.139577][ T6049] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 246.145433][ T6049] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 246.151233][ T6049] ? nl80211_exit+0x20/0x20 [ 246.155875][ T6049] nl80211_dump_interface+0x490/0x6a0 [ 246.161480][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.167055][ T6049] ? netlink_dump+0x267/0xca0 [ 246.171827][ T6049] ? __alloc_skb+0x419/0x670 [ 246.176543][ T6049] netlink_dump+0x5a2/0xca0 [ 246.181125][ T6049] ? netlink_lookup+0x200/0x200 [ 246.186206][ T6049] ? genl_start+0x2e1/0x490 [ 246.190862][ T6049] __netlink_dump_start+0x521/0x6c0 [ 246.196202][ T6049] genl_rcv_msg+0x9f3/0xf70 [ 246.200807][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.206415][ T6049] ? genl_bind+0x400/0x400 [ 246.210990][ T6049] ? genl_rcv_msg+0xf70/0xf70 [ 246.215779][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.221372][ T6049] ? genl_lock_done+0xd0/0xd0 [ 246.226151][ T6049] ? read_lock_is_recursive+0x10/0x10 [ 246.231776][ T6049] ? __might_sleep+0xb0/0xb0 [ 246.236477][ T6049] ? ref_tracker_free+0x638/0x7d0 [ 246.241777][ T6049] ? nl80211_set_wiphy+0x2f60/0x2f60 [ 246.247172][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.252691][ T6049] ? refcount_inc+0x80/0x80 [ 246.257299][ T6049] ? __copy_skb_header+0x47b/0x600 [ 246.262481][ T6049] netlink_rcv_skb+0x1cd/0x410 [ 246.267359][ T6049] ? genl_bind+0x400/0x400 [ 246.271839][ T6049] ? netlink_ack+0x1290/0x1290 [ 246.276733][ T6049] genl_rcv+0x24/0x40 [ 246.280762][ T6049] netlink_unicast+0x7d8/0x970 [ 246.285731][ T6049] ? netlink_detachskb+0x90/0x90 [ 246.290725][ T6049] ? __virt_addr_valid+0x45b/0x530 [ 246.295945][ T6049] ? __phys_addr_symbol+0x2b/0x70 [ 246.301030][ T6049] ? __check_object_size+0x4dd/0xa30 [ 246.306409][ T6049] ? bpf_lsm_netlink_send+0x5/0x10 [ 246.311572][ T6049] netlink_sendmsg+0xa26/0xd60 [ 246.316502][ T6049] ? netlink_getsockopt+0x580/0x580 [ 246.322024][ T6049] ? aa_sock_msg_perm+0x91/0x150 [ 246.327160][ T6049] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 246.332508][ T6049] ? security_socket_sendmsg+0x7d/0xa0 [ 246.338066][ T6049] ? netlink_getsockopt+0x580/0x580 [ 246.343533][ T6049] ____sys_sendmsg+0x5a5/0x8f0 [ 246.348650][ T6049] ? __sys_sendmsg_sock+0x30/0x30 [ 246.353789][ T6049] __sys_sendmsg+0x2a9/0x390 [ 246.358448][ T6049] ? ____sys_sendmsg+0x8f0/0x8f0 [ 246.363534][ T6049] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.369593][ T6049] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.375691][ T6049] ? lockdep_hardirqs_on+0x94/0x130 [ 246.381053][ T6049] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.387376][ T6049] do_syscall_64+0x3b/0xb0 [ 246.391866][ T6049] ? clear_bhb_loop+0x45/0xa0 [ 246.396763][ T6049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.402719][ T6049] RIP: 0033:0x7f7c4cd7def9 [ 246.407282][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.427161][ T6049] RSP: 002b:00007f7c4cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.435868][ T6049] RAX: ffffffffffffffda RBX: 00007f7c4cf35f80 RCX: 00007f7c4cd7def9 [ 246.444043][ T6049] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000006 [ 246.452154][ T6049] RBP: 00007f7c4cdf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 246.460246][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.468453][ T6049] R13: 0000000000000000 R14: 00007f7c4cf35f80 R15: 00007ffc3081ef38 [ 246.476584][ T6049] [ 246.479652][ T6049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.486970][ T6049] CPU: 1 PID: 6049 Comm: syz.2.565 Not tainted 6.1.111-syzkaller #0 [ 246.494987][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.505079][ T6049] Call Trace: [ 246.508393][ T6049] [ 246.511446][ T6049] dump_stack_lvl+0x1e3/0x2cb [ 246.516191][ T6049] ? nf_tcp_handle_invalid+0x642/0x642 [ 246.521713][ T6049] ? panic+0x764/0x764 [ 246.525827][ T6049] ? 0xffffffffa0001fb0 [ 246.530014][ T6049] ? vscnprintf+0x59/0x80 [ 246.534397][ T6049] panic+0x318/0x764 [ 246.538410][ T6049] ? __warn+0x169/0x520 [ 246.542585][ T6049] ? memcpy_page_flushcache+0xfc/0xfc [ 246.547985][ T6049] __warn+0x348/0x520 [ 246.552238][ T6049] ? wdev_lock+0x96/0xc0 [ 246.556522][ T6049] report_bug+0x2af/0x500 [ 246.560904][ T6049] ? wdev_lock+0x96/0xc0 [ 246.565168][ T6049] handle_bug+0x3d/0x70 [ 246.569418][ T6049] exc_invalid_op+0x16/0x40 [ 246.573953][ T6049] asm_exc_invalid_op+0x16/0x20 [ 246.578960][ T6049] RIP: 0010:wdev_lock+0x96/0xc0 [ 246.583847][ T6049] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 246.603762][ T6049] RSP: 0018:ffffc90003acef40 EFLAGS: 00010287 [ 246.610044][ T6049] RAX: ffffffff8a0ccac6 RBX: ffff88807e600c90 RCX: 0000000000040000 [ 246.618110][ T6049] RDX: ffffc9000a61a000 RSI: 0000000000004065 RDI: 0000000000004066 [ 246.626185][ T6049] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed1009448412 [ 246.634336][ T6049] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 246.642402][ T6049] R13: ffff8880629278c0 R14: dffffc0000000000 R15: ffff88804a242014 [ 246.650388][ T6049] ? wdev_lock+0x6f/0xc0 [ 246.654668][ T6049] ? wdev_lock+0x96/0xc0 [ 246.658942][ T6049] nl80211_send_iface+0x816/0x1470 [ 246.664165][ T6049] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.670185][ T6049] ? nl80211_notify_iface+0x160/0x160 [ 246.675575][ T6049] ? kasan_quarantine_put+0xd4/0x220 [ 246.680869][ T6049] ? lockdep_hardirqs_on+0x94/0x130 [ 246.686081][ T6049] ? __kmem_cache_free+0x25c/0x3c0 [ 246.691254][ T6049] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 246.697005][ T6049] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 246.702832][ T6049] ? nl80211_exit+0x20/0x20 [ 246.707443][ T6049] nl80211_dump_interface+0x490/0x6a0 [ 246.713006][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.718557][ T6049] ? netlink_dump+0x267/0xca0 [ 246.723254][ T6049] ? __alloc_skb+0x419/0x670 [ 246.727947][ T6049] netlink_dump+0x5a2/0xca0 [ 246.732475][ T6049] ? netlink_lookup+0x200/0x200 [ 246.737349][ T6049] ? genl_start+0x2e1/0x490 [ 246.741865][ T6049] __netlink_dump_start+0x521/0x6c0 [ 246.747087][ T6049] genl_rcv_msg+0x9f3/0xf70 [ 246.751599][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.757065][ T6049] ? genl_bind+0x400/0x400 [ 246.761497][ T6049] ? genl_rcv_msg+0xf70/0xf70 [ 246.766178][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.771643][ T6049] ? genl_lock_done+0xd0/0xd0 [ 246.776328][ T6049] ? read_lock_is_recursive+0x10/0x10 [ 246.781712][ T6049] ? __might_sleep+0xb0/0xb0 [ 246.786310][ T6049] ? ref_tracker_free+0x638/0x7d0 [ 246.791342][ T6049] ? nl80211_set_wiphy+0x2f60/0x2f60 [ 246.796634][ T6049] ? nl80211_get_interface+0x200/0x200 [ 246.802119][ T6049] ? refcount_inc+0x80/0x80 [ 246.806637][ T6049] ? __copy_skb_header+0x47b/0x600 [ 246.811770][ T6049] netlink_rcv_skb+0x1cd/0x410 [ 246.816556][ T6049] ? genl_bind+0x400/0x400 [ 246.820980][ T6049] ? netlink_ack+0x1290/0x1290 [ 246.825772][ T6049] genl_rcv+0x24/0x40 [ 246.829758][ T6049] netlink_unicast+0x7d8/0x970 [ 246.834549][ T6049] ? netlink_detachskb+0x90/0x90 [ 246.839519][ T6049] ? __virt_addr_valid+0x45b/0x530 [ 246.844662][ T6049] ? __phys_addr_symbol+0x2b/0x70 [ 246.849737][ T6049] ? __check_object_size+0x4dd/0xa30 [ 246.855049][ T6049] ? bpf_lsm_netlink_send+0x5/0x10 [ 246.860189][ T6049] netlink_sendmsg+0xa26/0xd60 [ 246.864987][ T6049] ? netlink_getsockopt+0x580/0x580 [ 246.870200][ T6049] ? aa_sock_msg_perm+0x91/0x150 [ 246.875156][ T6049] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 246.880539][ T6049] ? security_socket_sendmsg+0x7d/0xa0 [ 246.886039][ T6049] ? netlink_getsockopt+0x580/0x580 [ 246.891262][ T6049] ____sys_sendmsg+0x5a5/0x8f0 [ 246.896059][ T6049] ? __sys_sendmsg_sock+0x30/0x30 [ 246.901112][ T6049] __sys_sendmsg+0x2a9/0x390 [ 246.905721][ T6049] ? ____sys_sendmsg+0x8f0/0x8f0 [ 246.910716][ T6049] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.916739][ T6049] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.922907][ T6049] ? lockdep_hardirqs_on+0x94/0x130 [ 246.928125][ T6049] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.934473][ T6049] do_syscall_64+0x3b/0xb0 [ 246.938906][ T6049] ? clear_bhb_loop+0x45/0xa0 [ 246.943609][ T6049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.949871][ T6049] RIP: 0033:0x7f7c4cd7def9 [ 246.954473][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.974205][ T6049] RSP: 002b:00007f7c4cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.983130][ T6049] RAX: ffffffffffffffda RBX: 00007f7c4cf35f80 RCX: 00007f7c4cd7def9 [ 246.991322][ T6049] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000006 [ 246.999748][ T6049] RBP: 00007f7c4cdf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 247.007731][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.015711][ T6049] R13: 0000000000000000 R14: 00007f7c4cf35f80 R15: 00007ffc3081ef38 [ 247.023727][ T6049] [ 247.027041][ T6049] Kernel Offset: disabled [ 247.031439][ T6049] Rebooting in 86400 seconds..