last executing test programs: 17m57.779692404s ago: executing program 32 (id=19): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800717, &(0x7f0000000080)={[{@dax_always}, {@nogrpid}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xffff}}, {@nombcache}]}, 0xff, 0x494, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100000000000000000000000000000000000000000000003bebf2cde1fdbfc3381181e93cad89fba47ba2d169642d747eb26910cfe2ae01ac7f79c4c272d4681ef8f113dbd7a9cbd994d66ee355caf6a7d2fe8ec789044e730c553518551fd51a5d1cfb006888843899b5394a22f9c82d9ab7942b97c0a68a6df17b41396646afb87fdbfef8aa7ee0b0b4dc56b5cf4abb3f4ae94f575c20e97667b0a5901acb648127176032134c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x50, 0x0}, 0x10) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r7, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000440), 0x1000a) sendfile(r7, r8, &(0x7f0000000000)=0x5, 0x20001) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x50, 0x46]}, 0x45) 9m42.833686132s ago: executing program 3 (id=684): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x9c}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(0x0, 0x0, 0x22001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x34}}, 0x0) 9m37.73707954s ago: executing program 3 (id=690): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000800f00700007e0000009c415393fd6095251f08000312", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=@bridge_newvlan={0x68, 0x70, 0x0, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x44, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881) fchdir(0xffffffffffffffff) 9m35.422846629s ago: executing program 3 (id=693): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000900)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x18}}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x101) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x5800) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(0xffffffffffffffff, 0x1) 9m34.218507369s ago: executing program 3 (id=694): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f0000000180)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0xfe}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) listen(r1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000d80)={0x2, 0xc, 0x1, "1f7e4866ed22b6b475c53e9ea337f839087ef9ed5307b7ca4523d440ca318628", 0x3132564e}) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) r9 = openat(r8, &(0x7f0000000000)='./file0\x00', 0x400000, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x4010586e, &(0x7f00000000c0)={0x2000, 0x300000000000000, 0x0, 0x7}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 9m33.049045273s ago: executing program 3 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000900)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x18}}, 0x0) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r5 = msgget$private(0x0, 0x101) msgsnd(r5, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x5800) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 9m31.922998698s ago: executing program 3 (id=698): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x20000014) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0x8ce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xfffffffe}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x0, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0x8, 0x40, 0xf4, 0x6, 0x200}], 0xfffffffe}) 9m16.429872323s ago: executing program 33 (id=698): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x20000014) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0x8ce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xfffffffe}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x0, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0x8, 0x40, 0xf4, 0x6, 0x200}], 0xfffffffe}) 1m33.345599946s ago: executing program 0 (id=1511): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580), 0x0, 0x20000084}, 0x40880) socket$alg(0x26, 0x5, 0x0) 1m32.999286993s ago: executing program 0 (id=1515): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) 1m32.834439292s ago: executing program 0 (id=1517): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x96}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1m32.548232635s ago: executing program 0 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m32.282385271s ago: executing program 0 (id=1525): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x4004000) recvmsg$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) dup3(r1, r3, 0x80000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x5, 0x68000, 0x200, 0xa34, 0x0, 0x1}, {0x3, 0x7, 0x8, 0x9, 0xfffffffffffffff9, 0xe86}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1m31.978504302s ago: executing program 0 (id=1529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000003c0)={0x1}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.419685225s ago: executing program 34 (id=1529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000003c0)={0x1}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.885865218s ago: executing program 5 (id=1563): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) 1m27.717353725s ago: executing program 5 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.499254662s ago: executing program 5 (id=1569): syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m26.133571192s ago: executing program 5 (id=1575): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 1m25.051485574s ago: executing program 4 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, 0x0}, 0x94) 1m24.790621674s ago: executing program 4 (id=1582): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setrlimit(0x40000000000008, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 1m24.691991542s ago: executing program 4 (id=1583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r0, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m24.210417311s ago: executing program 5 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x1, 0xc000}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m23.958690951s ago: executing program 4 (id=1585): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d6370313235312c757466382c6f76657272696465726f636b7065726d2c6e6f6a6f6c6965742c6e6f6a6f6c6965742c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303365382c6e6f726f636b2c626c6f636b3d3078303030303030303030303030303230302c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d61703d61636f726e2c00aaf173231c8fa2125fe6f2a7691bf718642c029cb01a995f84dfc799c1a997db60e5eaf9103b75f05682a57c9bf5d42b69634b1ce70512ad02fa514664ff526420a42e66f59ae74f883b354af5e974a51cc3699b92bcef11ba1c6f747eef2f1e6929c0839509e2b5588d97e9eafab0aa57dcfa15eec0f15cbefddb09ede996f076f8320ffb2935d820e69df2ff1aaa022261f7ea565017b85eedd6426a51559c8b7227f27ca697034550e9184a0bc21df03bd64eb7f4573ecf2a47891375f522c24bed2e751c31e567d0eb8d1f8ede3f4169efad70fee6bec277e28f8da5b0ce03e705ede26c8f63def6e8052d7280e28d69d5d62f76696d465faf5f440c345d5a5720277587a958d795940e149f35bdb6f91d49fc2029fdf86731baa97bda944032df343da307b2285f777ae8edde19bb09e35550274dc0cf88ec034e45912e79522eb41e93e587ba425598208fef00eee7218bfc5d41c464c75939ea647634f57a991f5e1d082d357c6d433d"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m23.489602424s ago: executing program 4 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_io_uring_setup(0x494, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m22.302500686s ago: executing program 4 (id=1589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.69958533s ago: executing program 35 (id=1589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.685613447s ago: executing program 5 (id=1592): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\x00', "0b3ea924c47b25d7624cd362581725c7", "1300deff", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/217, 0xd9, 0x120, 0x0, 0x0) r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x47b6, 0x800000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x1ff, 0x2, 0x1543, 0x7fffffffffffffff, 0x2, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xd, &(0x7f0000000780)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x0, 0x6, 0x5, 0x7, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0xa, 0x8, 0x2, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x1, 0x5, 0x1}, @ldst={0x0, 0x2, 0x0, 0x3, 0x8, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @generic={0xf, 0xe, 0xc, 0x200, 0x7}], &(0x7f0000000680)='GPL\x00', 0x2, 0x26, &(0x7f0000000700)=""/38, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x1, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000840)=[r3, r2], &(0x7f0000000880)=[{0x3, 0x2, 0x4, 0xa}, {0x5, 0x3, 0x1, 0x2}], 0x10, 0x7d8}, 0x94) sendmmsg(r0, 0x0, 0x0, 0x4000000) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1m21.685092006s ago: executing program 36 (id=1592): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\x00', "0b3ea924c47b25d7624cd362581725c7", "1300deff", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/217, 0xd9, 0x120, 0x0, 0x0) r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x47b6, 0x800000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x1ff, 0x2, 0x1543, 0x7fffffffffffffff, 0x2, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xd, &(0x7f0000000780)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x0, 0x6, 0x5, 0x7, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ldst={0x3, 0x2, 0x2, 0xa, 0x8, 0x2, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x1, 0x5, 0x1}, @ldst={0x0, 0x2, 0x0, 0x3, 0x8, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @generic={0xf, 0xe, 0xc, 0x200, 0x7}], &(0x7f0000000680)='GPL\x00', 0x2, 0x26, &(0x7f0000000700)=""/38, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x1, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000840)=[r3, r2], &(0x7f0000000880)=[{0x3, 0x2, 0x4, 0xa}, {0x5, 0x3, 0x1, 0x2}], 0x10, 0x7d8}, 0x94) sendmmsg(r0, 0x0, 0x0, 0x4000000) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 46.273614134s ago: executing program 9 (id=1840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 46.058727816s ago: executing program 9 (id=1842): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_io_uring_setup(0xe2b, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 45.402031618s ago: executing program 9 (id=1848): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) 45.029321725s ago: executing program 9 (id=1852): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 43.417604641s ago: executing program 9 (id=1864): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 41.182196498s ago: executing program 9 (id=1878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 40.774605831s ago: executing program 37 (id=1878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4.234090507s ago: executing program 1 (id=2248): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.154710803s ago: executing program 1 (id=2249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) 4.063438033s ago: executing program 1 (id=2251): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.950329267s ago: executing program 1 (id=2254): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3.872252813s ago: executing program 1 (id=2255): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x861}, 0x1c) 2.670363406s ago: executing program 2 (id=2269): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) 2.289206218s ago: executing program 7 (id=2276): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2.190530253s ago: executing program 1 (id=2277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 1.706762244s ago: executing program 8 (id=2280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffc}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 1.667536383s ago: executing program 2 (id=2281): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x8000, 0x0, 0x0, 0x300}}) 1.609797713s ago: executing program 7 (id=2282): socket$inet(0x2, 0x3, 0x6) r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a91831178f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd62", 0xcb}], 0x1}}], 0x1, 0x10) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.542569331s ago: executing program 8 (id=2283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) 1.32862231s ago: executing program 8 (id=2285): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1094a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sysinfo(&(0x7f0000019200)=""/17) 1.256717917s ago: executing program 6 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) 1.244461375s ago: executing program 7 (id=2287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB="71bd0505cd02020201010603012c040ffc7001c2ab62fc49a8e6e6baf865ab294a75a9e00f62ace5433dd0a5ae2791c1df7b3519da5863e886449e3c7660301ab1f4b668795b114f4ae75673fc4e12013e7bbc7b68df9e1624bd1211ed6bab70797eba71471b6f5ddb554dc6871f9a9b69a92da1b648541116589fe276ef1290f3b135852b20bf79c211cffbbc6372220434989992bad1f2aab7db79e3844949970b3cd7140e10d5a03a485852"], 0x13) 1.237859302s ago: executing program 2 (id=2288): write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1030023, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0]) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x6d, 0x0, &(0x7f0000000140)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.131124827s ago: executing program 8 (id=2289): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, 0x0, 0x0) 1.066625738s ago: executing program 6 (id=2290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 983.68735ms ago: executing program 2 (id=2292): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d6370313235312c757466382c6f76657272696465726f636b7065726d2c6e6f6a6f6c6965742c6e6f6a6f6c6965742c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303365382c6e6f726f636b2c626c6f636b3d3078303030303030303030303030303230302c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6d61703d61636f726e2c00aaf173231c8fa2125fe6f2a7691bf718642c029cb01a995f84dfc799c1a997db60e5eaf9103b75f05682a57c9bf5d42b69634b1ce70512ad02fa514664ff526420a42e66f59ae74f883b354af5e974a51cc3699b92bcef11ba1c6f747eef2f1e6929c0839509e2b5588d97e9eafab0aa57dcfa15eec0f15cbefddb09ede996f076f8320ffb2935d820e69df2ff1aaa022261f7ea565017b85eedd6426a51559c8b7227f27ca697034550e9184a0bc21df03bd64eb7f4573ecf2a47891375f522c24bed2e751c31e567d0eb8d1f8ede3f4169efad70fee6bec277e28f8da5b0ce03e705ede26c8f63def6e8052d7280e28d69d5d62f76696d465faf5f440c345d5a5720277587a958d795940e149f35bdb6f91d49fc2029fdf86731baa97bda944032df343da307b2285f777ae8edde19bb09e35550274dc0cf88ec034e45912e79522eb41e93e587ba425598208fef00eee7218bfc5d41c464c75939ea647634f57a991f5e1d082d357c6d433d"], 0x1, 0xa51, &(0x7f0000001240)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 983.21258ms ago: executing program 7 (id=2293): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$inet6(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090018000020", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000001"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 962.850952ms ago: executing program 8 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 802.974451ms ago: executing program 6 (id=2295): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x40002063, 0x0) 615.250454ms ago: executing program 7 (id=2296): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r3], 0x10e0}}, 0x0) 522.676483ms ago: executing program 8 (id=2297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 472.029355ms ago: executing program 6 (id=2298): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @initdev}}) 442.138953ms ago: executing program 2 (id=2299): setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/50, 0x32) 339.436435ms ago: executing program 7 (id=2300): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 262.564018ms ago: executing program 6 (id=2301): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 160.055478ms ago: executing program 2 (id=2302): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 0s ago: executing program 6 (id=2303): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) kernel console output (not intermixed with test programs): 4096 [ 1110.804459][T12423] EXT4-fs: inline encryption not supported [ 1110.810393][T12423] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 1111.178556][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1510'. [ 1111.600858][T12450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1516'. [ 1111.739172][T12457] netlink: 'syz.4.1519': attribute type 4 has an invalid length. [ 1111.790450][T12458] netlink: 'syz.4.1519': attribute type 4 has an invalid length. [ 1112.524199][ T8535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.757085][ T8535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.900730][ T8535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.043960][T12482] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1534'. [ 1113.107339][T12487] overlay: ./bus is not a directory [ 1113.165118][ T8535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.206119][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1113.206137][ T30] audit: type=1326 audit(1757467373.219:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1113.243945][ T30] audit: type=1326 audit(1757467373.239:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1113.268096][ T30] audit: type=1326 audit(1757467373.249:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1113.291648][ T30] audit: type=1326 audit(1757467373.249:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1113.364593][ T30] audit: type=1326 audit(1757467373.249:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1113.459117][ T30] audit: type=1326 audit(1757467373.339:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1113.551008][ T30] audit: type=1326 audit(1757467373.339:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1113.579517][ T30] audit: type=1326 audit(1757467373.339:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1113.673415][ T30] audit: type=1326 audit(1757467373.339:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1113.747028][ T30] audit: type=1326 audit(1757467373.339:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.6.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1114.114802][ T8535] bridge_slave_1: left allmulticast mode [ 1114.143503][ T8535] bridge_slave_1: left promiscuous mode [ 1114.197732][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.249372][ T8026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1114.267454][ T8026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.276874][ T8026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.287099][ T8026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.296116][ T8535] bridge_slave_0: left allmulticast mode [ 1114.301818][ T8535] bridge_slave_0: left promiscuous mode [ 1114.313657][ T8026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1114.326132][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.966782][T12548] loop5: detected capacity change from 0 to 512 [ 1115.047706][T12548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.101463][T12548] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.565162][ T7171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.760605][T12562] Driver unsupported XDP return value 0 on prog (id 325) dev N/A, expect packet loss! [ 1116.141061][ T8535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.163223][ T8535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.187891][ T8535] bond0 (unregistering): Released all slaves [ 1116.231104][ T8535] bond1 (unregistering): Released all slaves [ 1116.322166][T12533] tipc: Enabling of bearer rejected, failed to enable media [ 1116.353543][ T5876] Bluetooth: hci0: command tx timeout [ 1116.438108][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.447765][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.493541][ T8535] tipc: Left network mode [ 1116.744649][T12584] evm: overlay not supported [ 1117.101529][T12595] loop5: detected capacity change from 0 to 1024 [ 1117.140410][T12595] EXT4-fs: Ignoring removed bh option [ 1117.188958][T12595] EXT4-fs: inline encryption not supported [ 1117.220663][T12595] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1117.345802][T12595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1117.425366][T12595] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1569: lblock 2 mapped to illegal pblock 2 (length 1) [ 1117.473551][T12595] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1569: lblock 0 mapped to illegal pblock 48 (length 1) [ 1117.567355][T12595] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1569: Failed to acquire dquot type 0 [ 1117.640287][T12595] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1117.737687][T12595] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1569: mark_inode_dirty error [ 1117.790896][T12595] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1117.801470][T12595] EXT4-fs (loop5): 1 orphan inode deleted [ 1117.807322][ T8535] batadv0: left promiscuous mode [ 1117.816733][T12595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.853619][ T8535] team0: left promiscuous mode [ 1117.854441][ T12] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1117.858443][ T8535] team_slave_0: left promiscuous mode [ 1117.923594][ T8535] team_slave_1: left promiscuous mode [ 1117.973480][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 1118.050552][ T8535] hsr_slave_0: left promiscuous mode [ 1118.068751][T12595] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1569: lblock 0 mapped to illegal pblock 48 (length 1) [ 1118.113958][ T8535] hsr_slave_1: left promiscuous mode [ 1118.120219][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.187732][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.238098][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.262114][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.304750][ T7171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.412291][ T8535] veth1_macvtap: left promiscuous mode [ 1118.433744][ T5876] Bluetooth: hci0: command tx timeout [ 1118.463860][ T8535] veth0_macvtap: left promiscuous mode [ 1118.469684][ T8535] veth1_vlan: left promiscuous mode [ 1118.525349][ T8535] veth0_vlan: left promiscuous mode [ 1118.554905][T12629] loop5: detected capacity change from 0 to 512 [ 1118.677482][T12629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.756661][T12629] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.975176][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1118.975197][ T30] audit: type=1326 audit(1757467378.989:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.019337][ T30] audit: type=1326 audit(1757467378.989:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.077409][ T30] audit: type=1326 audit(1757467379.029:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.100077][ T30] audit: type=1326 audit(1757467379.029:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.140728][ T30] audit: type=1326 audit(1757467379.029:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.159667][T12638] loop5: detected capacity change from 512 to 0 [ 1119.165237][ C1] blk_print_req_error: 2 callbacks suppressed [ 1119.165255][ C1] I/O error, dev loop5, sector 120 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.185764][ C1] Buffer I/O error on dev loop5, logical block 30, lost sync page write [ 1119.194236][T12629] EXT4-fs error (device loop5): ext4_ext_grow_indepth:1367: inode #19: block 30: comm syz.5.1575: IO error syncing itable block [ 1119.231949][ T30] audit: type=1326 audit(1757467379.029:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.260617][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.270255][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.280196][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.289295][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.298554][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.312294][ T30] audit: type=1326 audit(1757467379.029:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.317227][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.344528][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.354064][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.355846][ T30] audit: type=1326 audit(1757467379.029:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.393455][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.410095][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.429205][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.432423][ T30] audit: type=1326 audit(1757467379.029:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.438823][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.438934][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.461513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.462785][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.474566][ T30] audit: type=1326 audit(1757467379.139:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.4.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d778eba9 code=0x7ffc0000 [ 1119.530450][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.549990][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.559597][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.569110][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.577555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.615029][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.634471][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.647489][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1119.657108][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.678769][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.705646][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.718842][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.727191][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.747563][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.778652][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.787580][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.796687][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.823588][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.832009][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.847125][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.860715][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1119.873729][T12629] EXT4-fs (loop5): I/O error while writing superblock [ 1119.880848][T12629] EXT4-fs error (device loop5): ext4_check_bdev_write_error:228: comm syz.5.1575: Error while async write back metadata [ 1119.942692][ C1] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 44) [ 1119.958543][ T12] Buffer I/O error on device loop5, logical block 44 [ 1119.965596][ T12] Buffer I/O error on device loop5, logical block 45 [ 1119.985115][ C1] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 22) [ 1120.000472][ C1] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 28) [ 1120.014210][ C1] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 24) [ 1120.044754][ T12] Buffer I/O error on device loop5, logical block 22 [ 1120.051574][ T12] Buffer I/O error on device loop5, logical block 23 [ 1120.065341][ T12] Buffer I/O error on device loop5, logical block 28 [ 1120.072152][ T12] Buffer I/O error on device loop5, logical block 29 [ 1120.086117][ T12] Buffer I/O error on device loop5, logical block 24 [ 1120.092846][ T12] Buffer I/O error on device loop5, logical block 25 [ 1120.206041][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.230185][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.252549][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.296974][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.318253][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.341992][ T7171] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1120.519621][ T5876] Bluetooth: hci0: command tx timeout [ 1120.596940][T12649] loop4: detected capacity change from 0 to 1764 [ 1120.636783][ T8535] team0 (unregistering): Port device team_slave_1 removed [ 1120.906882][ T8535] team0 (unregistering): Port device team_slave_0 removed [ 1122.049831][T12521] chnl_net:caif_netlink_parms(): no params data found [ 1122.593555][ T5876] Bluetooth: hci0: command tx timeout [ 1122.610677][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.631403][T12521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.640633][T12521] bridge_slave_0: entered allmulticast mode [ 1122.654146][T12521] bridge_slave_0: entered promiscuous mode [ 1122.698693][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.724270][ T8535] IPVS: stop unused estimator thread 0... [ 1122.753815][T12521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.762235][T12521] bridge_slave_1: entered allmulticast mode [ 1122.804885][T12521] bridge_slave_1: entered promiscuous mode [ 1123.075162][T12521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.146522][T12521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.463498][T12682] loop6: detected capacity change from 0 to 1024 [ 1123.516865][ T8535] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.578859][T12682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.692212][T12682] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1598: Allocating blocks 385-513 which overlap fs metadata [ 1123.829077][T12682] EXT4-fs (loop6): pa ffff888025f02828: logic 16, phys. 129, len 24 [ 1123.837609][T12682] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1123.867554][ T8026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1123.879317][ T8026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1123.888985][ T8026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1123.900741][ T8026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1123.912783][ T8026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1123.948490][T12701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1123.961405][T12701] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1123.970792][T12701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1123.979410][T12701] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1123.992043][T12701] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1124.008016][T12521] team0: Port device team_slave_0 added [ 1124.110938][ T8535] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.150034][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.176247][T12521] team0: Port device team_slave_1 added [ 1124.471471][ T8535] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.484915][T12714] program syz.6.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.557240][T12521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.573814][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.599752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.630399][T12521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.631143][T12719] netlink: 'syz.1.1606': attribute type 21 has an invalid length. [ 1124.644110][T12521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.658270][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.684464][T12719] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1606'. [ 1124.701139][T12521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.817563][ T8535] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.977070][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1124.977089][ T30] audit: type=1326 audit(1757467384.989:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.017620][ T30] audit: type=1326 audit(1757467385.019:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.040812][ T30] audit: type=1326 audit(1757467385.019:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.089715][ T30] audit: type=1326 audit(1757467385.019:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.112448][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.158085][ T30] audit: type=1326 audit(1757467385.019:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.180560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.202540][ T30] audit: type=1326 audit(1757467385.019:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.214514][T12521] hsr_slave_0: entered promiscuous mode [ 1125.227239][ T30] audit: type=1326 audit(1757467385.019:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.268018][T12521] hsr_slave_1: entered promiscuous mode [ 1125.278679][ T30] audit: type=1326 audit(1757467385.019:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.280261][T12521] debugfs: 'hsr0' already exists in 'hsr' [ 1125.310963][ T30] audit: type=1326 audit(1757467385.019:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.312799][T12521] Cannot create hsr debugfs directory [ 1125.342721][ T30] audit: type=1326 audit(1757467385.019:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1125.365175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.954509][ T8026] Bluetooth: hci1: command tx timeout [ 1126.033908][ T8026] Bluetooth: hci3: command tx timeout [ 1126.351199][T12763] loop6: detected capacity change from 0 to 512 [ 1126.366337][T12763] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1126.406383][T12763] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1126.415388][T12763] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1621: Block bitmap for bg 0 marked uninitialized [ 1126.429613][ T8535] bridge_slave_1: left allmulticast mode [ 1126.442610][T12763] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1126.461184][ T8535] bridge_slave_1: left promiscuous mode [ 1126.467934][T12763] EXT4-fs (loop6): 1 orphan inode deleted [ 1126.471502][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.484619][T12763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1126.520458][T12763] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1126.521468][ T8535] bridge_slave_0: left allmulticast mode [ 1126.546016][T12763] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1126.550752][ T8535] bridge_slave_0: left promiscuous mode [ 1126.589044][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.625291][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.779169][T12771] loop6: detected capacity change from 0 to 128 [ 1126.827849][T12771] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1126.871936][T12771] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.145291][T12775] netlink: 168 bytes leftover after parsing attributes in process `+}[@'. [ 1127.333038][ T9815] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1127.440522][T12777] loop6: detected capacity change from 0 to 512 [ 1127.500057][T12777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.513936][T12777] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.526461][ T8535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.551105][ T8535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.590574][ T8535] bond0 (unregistering): Released all slaves [ 1127.762774][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.831480][ T8535] tipc: Left network mode [ 1128.038475][ T8026] Bluetooth: hci1: command tx timeout [ 1128.115667][ T8026] Bluetooth: hci3: command tx timeout [ 1128.136629][T12696] chnl_net:caif_netlink_parms(): no params data found [ 1128.240719][T12698] chnl_net:caif_netlink_parms(): no params data found [ 1128.726905][ T8535] hsr_slave_0: left promiscuous mode [ 1128.756790][ T8535] hsr_slave_1: left promiscuous mode [ 1128.773712][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.781174][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.815160][T12797] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1128.815160][T12797] The task syz.6.1628 (12797) triggered the difference, watch for misbehavior. [ 1128.864584][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.872044][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.951274][ T8535] veth1_macvtap: left promiscuous mode [ 1128.967756][ T8535] veth0_macvtap: left promiscuous mode [ 1128.980377][ T8535] veth1_vlan: left promiscuous mode [ 1128.993723][ T8535] veth0_vlan: left promiscuous mode [ 1130.114117][ T8026] Bluetooth: hci1: command tx timeout [ 1130.209679][ T8026] Bluetooth: hci3: command tx timeout [ 1130.409735][T12827] hub 2-0:1.0: USB hub found [ 1130.432128][T12827] hub 2-0:1.0: 1 port detected [ 1130.676964][ T8535] team0 (unregistering): Port device team_slave_1 removed [ 1130.766845][ T8535] team0 (unregistering): Port device team_slave_0 removed [ 1130.850442][T12833] loop6: detected capacity change from 0 to 512 [ 1130.884359][T12833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.902229][T12833] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.955339][T12833] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1639: corrupted inode contents [ 1130.995619][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1639'. [ 1131.006231][T12833] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1639: mark_inode_dirty error [ 1131.009746][T12833] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1639: bg 0: block 328: padding at end of block bitmap is not set [ 1131.468746][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.945329][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.963080][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.978963][T12696] bridge_slave_0: entered allmulticast mode [ 1131.987456][T12696] bridge_slave_0: entered promiscuous mode [ 1132.000199][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.007491][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.014844][T12696] bridge_slave_1: entered allmulticast mode [ 1132.022949][T12696] bridge_slave_1: entered promiscuous mode [ 1132.061858][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 1132.105033][T12698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.112366][T12698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.132250][T12698] bridge_slave_0: entered allmulticast mode [ 1132.142915][T12698] bridge_slave_0: entered promiscuous mode [ 1132.194229][ T8026] Bluetooth: hci1: command tx timeout [ 1132.273652][ T8026] Bluetooth: hci3: command tx timeout [ 1132.290570][T12698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.330975][T12698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.359124][T12698] bridge_slave_1: entered allmulticast mode [ 1132.381925][T12698] bridge_slave_1: entered promiscuous mode [ 1132.402834][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.526460][T12521] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1132.546221][T12521] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1132.572934][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.616833][T12698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.627900][T12521] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1132.682465][T12862] netlink: 'syz.1.1647': attribute type 10 has an invalid length. [ 1132.729987][T12698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.881887][T12521] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1132.929151][T12862] team0: Port device dummy0 added [ 1132.956717][T12696] team0: Port device team_slave_0 added [ 1133.028059][T12698] team0: Port device team_slave_0 added [ 1133.075710][T12696] team0: Port device team_slave_1 added [ 1133.105164][T12698] team0: Port device team_slave_1 added [ 1133.610352][T12896] hub 9-0:1.0: USB hub found [ 1133.624993][T12896] hub 9-0:1.0: 1 port detected [ 1133.634061][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.641062][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.689887][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.713113][T12698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.735565][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.761637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.779261][T12698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.802555][T12698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.810900][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.857395][T12698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.896566][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.908477][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.941321][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.117941][T12696] hsr_slave_0: entered promiscuous mode [ 1134.134675][T12696] hsr_slave_1: entered promiscuous mode [ 1134.141249][T12696] debugfs: 'hsr0' already exists in 'hsr' [ 1134.149413][T12696] Cannot create hsr debugfs directory [ 1134.449018][T12698] hsr_slave_0: entered promiscuous mode [ 1134.476981][T12698] hsr_slave_1: entered promiscuous mode [ 1134.495902][T12698] debugfs: 'hsr0' already exists in 'hsr' [ 1134.511877][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1134.511900][ T30] audit: type=1326 audit(1757467394.509:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12909 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1134.543514][T12698] Cannot create hsr debugfs directory [ 1134.590833][ T30] audit: type=1326 audit(1757467394.519:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12909 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1134.613286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.649980][ T30] audit: type=1326 audit(1757467394.519:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12909 comm="syz.6.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1134.932336][T12919] loop6: detected capacity change from 0 to 512 [ 1134.950645][T12919] ext4: Unknown parameter 'nouser_xattr' [ 1135.388256][T12521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.499538][T12521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.657855][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.665138][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.708693][T12696] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1135.795513][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.802672][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.873440][T12696] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1135.911480][T12696] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1136.064950][T12696] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1136.282556][T12944] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.420312][T12944] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.502246][T12698] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1136.597116][T12944] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.641141][T12698] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1136.701632][T12698] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1136.791644][T12944] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.836608][T12698] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1137.071185][T12521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.276917][T12696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.375544][T10756] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.479366][T10756] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.540789][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.601612][T10756] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.630600][T10756] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.669186][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.676427][T10756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.773180][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.780619][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.890174][T12698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.134805][T12698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.296593][T13005] rdma_op ffff888051d071f0 conn xmit_rdma 0000000000000000 [ 1138.461686][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.468940][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.542338][T12696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.618694][ T5926] IPVS: starting estimator thread 0... [ 1138.660139][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.667593][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.743459][T13011] IPVS: using max 27 ests per chain, 64800 per kthread [ 1138.929804][T12521] veth0_vlan: entered promiscuous mode [ 1139.006289][T12521] veth1_vlan: entered promiscuous mode [ 1139.190198][T12521] veth0_macvtap: entered promiscuous mode [ 1139.253624][T12521] veth1_macvtap: entered promiscuous mode [ 1139.393084][T12521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.437605][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.511703][T12521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.598939][ T8535] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.707064][T10756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.776983][T10756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.808199][T10756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.032466][T12698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.221305][T13048] loop6: detected capacity change from 0 to 1024 [ 1140.252061][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.284172][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.369196][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.372638][T13048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.381272][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.548626][ T30] audit: type=1800 audit(1757467400.559:357): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1685" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1140.685940][T13048] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 1140.851499][T12696] veth0_vlan: entered promiscuous mode [ 1140.881528][T12696] veth1_vlan: entered promiscuous mode [ 1140.960067][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.447709][T12696] veth0_macvtap: entered promiscuous mode [ 1141.504649][T12696] veth1_macvtap: entered promiscuous mode [ 1141.660356][T12698] veth0_vlan: entered promiscuous mode [ 1141.708186][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.814099][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.832195][T12698] veth1_vlan: entered promiscuous mode [ 1141.839549][T13091] loop7: detected capacity change from 0 to 1024 [ 1141.871551][T13091] EXT4-fs: Ignoring removed orlov option [ 1141.979472][T13091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.999383][ T3463] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.087192][ T3463] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.155870][ T3463] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.179605][ T3463] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.778627][T12698] veth0_macvtap: entered promiscuous mode [ 1142.816971][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.837706][T13109] loop6: detected capacity change from 0 to 512 [ 1142.898856][T12698] veth1_macvtap: entered promiscuous mode [ 1142.951135][T13109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.974872][T13109] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.064873][T10756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.080677][T12698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.092502][T10756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.173201][T12698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.236490][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.266046][ T3463] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.269815][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.279420][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.320739][ T3463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.372307][ T3463] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.410319][ T3463] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.623631][T10756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.631503][T10756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.721326][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.736558][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.863572][ T30] audit: type=1326 audit(1757467403.869:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1143.926233][ T30] audit: type=1326 audit(1757467403.869:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1143.971373][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1710'. [ 1143.973963][ T30] audit: type=1326 audit(1757467403.869:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1143.986406][T13136] loop6: detected capacity change from 0 to 512 [ 1144.015253][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 1144.053375][ T30] audit: type=1326 audit(1757467403.869:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc76b8ebe3 code=0x7ffc0000 [ 1144.075700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.122807][ T30] audit: type=1326 audit(1757467403.869:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc76b8d65f code=0x7ffc0000 [ 1144.145146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.177898][T13136] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1144.191373][ T30] audit: type=1326 audit(1757467403.939:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efc76b8ec37 code=0x7ffc0000 [ 1144.208877][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 1144.213745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1144.298646][ T30] audit: type=1326 audit(1757467403.989:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc76b8d510 code=0x7ffc0000 [ 1144.335618][T13136] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1144.413803][ T30] audit: type=1326 audit(1757467403.989:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc76b8e7ab code=0x7ffc0000 [ 1144.498296][ T30] audit: type=1326 audit(1757467404.129:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13130 comm="syz.6.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efc76b8d80a code=0x7ffc0000 [ 1144.508215][T13136] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1144.635645][T13136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1144.749535][T13136] System zones: 0-2, 18-18, 34-35 [ 1144.766245][T13136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.829145][T13153] loop9: detected capacity change from 0 to 256 [ 1144.859771][T13151] loop8: detected capacity change from 0 to 2048 [ 1145.051828][T13151] Alternate GPT is invalid, using primary GPT. [ 1145.058835][T13151] loop8: p2 p3 p7 [ 1146.436586][T13097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1146.612083][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.396739][T13227] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 1147.441231][T13228] pim6reg1: entered promiscuous mode [ 1147.450204][T13228] pim6reg1: entered allmulticast mode [ 1147.524448][T13230] loop6: detected capacity change from 0 to 2048 [ 1147.801934][T13230] Alternate GPT is invalid, using primary GPT. [ 1147.809214][T13230] loop6: p2 p3 p7 [ 1148.192776][T13245] loop6: detected capacity change from 0 to 512 [ 1148.435278][T13245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.483578][T13245] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.511471][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1148.511494][ T30] audit: type=1800 audit(1757467408.519:389): pid=13245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1754" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1148.631706][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.747178][ T30] audit: type=1326 audit(1757467408.749:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1148.827980][T13258] 9pnet_fd: Insufficient options for proto=fd [ 1148.843409][ T30] audit: type=1326 audit(1757467408.749:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1148.943401][ T30] audit: type=1326 audit(1757467408.799:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.074534][ T30] audit: type=1326 audit(1757467408.799:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.096914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1149.202051][ T30] audit: type=1326 audit(1757467408.799:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.288043][ T30] audit: type=1326 audit(1757467408.809:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.310603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1149.403382][ T30] audit: type=1326 audit(1757467408.809:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.425764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1149.439595][T13270] syz_tun: entered allmulticast mode [ 1149.455448][T13267] syz_tun: left allmulticast mode [ 1149.542655][ T30] audit: type=1326 audit(1757467408.809:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.620399][ T30] audit: type=1326 audit(1757467408.829:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.8.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1149.642833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1151.422005][T13305] loop6: detected capacity change from 0 to 512 [ 1151.464457][T13305] EXT4-fs: Ignoring removed mblk_io_submit option [ 1151.489102][T13305] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1151.546739][T13310] loop8: detected capacity change from 0 to 256 [ 1151.573364][T13305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 1151.581453][T13305] System zones: 1-12 [ 1151.672164][T13305] EXT4-fs (loop6): 1 truncate cleaned up [ 1151.720018][T13305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.756256][T13310] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1151.780225][T13316] netlink: 'syz.9.1784': attribute type 1 has an invalid length. [ 1151.810035][T13310] FAT-fs (loop8): Filesystem has been set read-only [ 1152.447357][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.648835][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'. [ 1152.928655][T13349] syz.6.1796 uses obsolete (PF_INET,SOCK_PACKET) [ 1153.823876][T13370] loop6: detected capacity change from 0 to 1024 [ 1153.844760][T13370] EXT4-fs: Ignoring removed bh option [ 1153.850234][T13370] EXT4-fs: inline encryption not supported [ 1153.867368][T13370] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1153.896558][T13370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1153.941831][T13370] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1806: lblock 2 mapped to illegal pblock 2 (length 1) [ 1153.986948][T13370] __quota_error: 10 callbacks suppressed [ 1153.986970][T13370] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1154.024914][T13370] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1806: lblock 0 mapped to illegal pblock 48 (length 1) [ 1154.071102][T13370] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1154.103453][T13370] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.1806: Failed to acquire dquot type 0 [ 1154.116524][T13370] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1154.126950][T13370] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1806: mark_inode_dirty error [ 1154.150392][T13370] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1154.182177][T13370] EXT4-fs (loop6): 1 orphan inode deleted [ 1154.223450][ T6427] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1154.240980][T13370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.263503][ T6427] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1154.303864][T13140] Set syz1 is full, maxelem 65536 reached [ 1154.312587][ T6427] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:13: Failed to release dquot type 0 [ 1154.362806][T13370] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1806: lblock 0 mapped to illegal pblock 48 (length 1) [ 1154.398128][T13370] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 1154.495545][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.965931][T13385] loop7: detected capacity change from 0 to 1024 [ 1155.143096][T13392] loop6: detected capacity change from 0 to 128 [ 1155.171081][T13385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.187416][T13385] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.244995][T13397] loop9: detected capacity change from 0 to 1024 [ 1155.252462][T13397] EXT4-fs: Ignoring removed orlov option [ 1155.309028][T13397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.330796][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.330796][T13400] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1155.398065][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.398065][T13400] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1155.505839][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.505839][T13400] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1155.524271][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.524271][T13400] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1155.573216][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.573216][T13400] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1155.628218][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.628218][T13400] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1155.724596][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.724596][T13400] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1155.753652][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.753652][T13400] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1155.783187][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.783187][T13400] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1155.783310][T13399] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1812: bg 0: block 393: padding at end of block bitmap is not set [ 1155.812210][T13400] syz.6.1815: attempt to access beyond end of device [ 1155.812210][T13400] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1156.002916][T12696] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.021094][T13399] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 1156.073437][T13399] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1156.073437][T13399] [ 1156.309697][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.578414][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1823'. [ 1156.685332][T13415] loop6: detected capacity change from 0 to 512 [ 1156.785291][T13415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.801040][T13415] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.932317][T13417] netlink: 'syz.7.1825': attribute type 10 has an invalid length. [ 1156.935145][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.035228][T13427] loop9: detected capacity change from 0 to 1024 [ 1157.053371][T13427] EXT4-fs: Ignoring removed orlov option [ 1157.105974][T13427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.119750][T13424] loop8: detected capacity change from 0 to 8192 [ 1157.566633][T12696] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.914624][T13346] syz.1.1793: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1157.977259][T13346] CPU: 0 UID: 0 PID: 13346 Comm: syz.1.1793 Not tainted syzkaller #0 PREEMPT(full) [ 1157.977291][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1157.977303][T13346] Call Trace: [ 1157.977311][T13346] [ 1157.977320][T13346] dump_stack_lvl+0x189/0x250 [ 1157.977355][T13346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.977379][T13346] ? __pfx__printk+0x10/0x10 [ 1157.977409][T13346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1157.977432][T13346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1157.977455][T13346] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1157.977480][T13346] warn_alloc+0x214/0x310 [ 1157.977518][T13346] ? __pfx_warn_alloc+0x10/0x10 [ 1157.977558][T13346] ? __get_vm_area_node+0x28f/0x300 [ 1157.977583][T13346] ? hash_netport4_resize+0x235/0x1b60 [ 1157.977612][T13346] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1157.977637][T13346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.977686][T13346] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1157.977717][T13346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1157.977748][T13346] ? rcu_is_watching+0x15/0xb0 [ 1157.977778][T13346] ? hash_netport4_resize+0x235/0x1b60 [ 1157.977800][T13346] __kvmalloc_node_noprof+0x674/0x910 [ 1157.977828][T13346] ? hash_netport4_resize+0x235/0x1b60 [ 1157.977870][T13346] hash_netport4_resize+0x235/0x1b60 [ 1157.977892][T13346] ? hash_netport4_uadt+0xc97/0xf30 [ 1157.977921][T13346] ? __pfx_hash_netport4_add+0x10/0x10 [ 1157.977942][T13346] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 1157.977976][T13346] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1157.978020][T13346] call_ad+0x44e/0xb00 [ 1157.978058][T13346] ? __pfx_call_ad+0x10/0x10 [ 1157.978103][T13346] ? __nla_parse+0x40/0x60 [ 1157.978129][T13346] ip_set_ad+0x791/0x930 [ 1157.978168][T13346] ? __pfx_ip_set_ad+0x10/0x10 [ 1157.978243][T13346] nfnetlink_rcv_msg+0xb4a/0x1130 [ 1157.978273][T13346] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1157.978323][T13346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1157.978347][T13346] ? kmem_cache_free+0x19a/0x690 [ 1157.978433][T13346] netlink_rcv_skb+0x205/0x470 [ 1157.978464][T13346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1157.978492][T13346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1157.978537][T13346] ? bpf_lsm_capable+0x9/0x20 [ 1157.978561][T13346] ? security_capable+0x7e/0x2e0 [ 1157.978597][T13346] nfnetlink_rcv+0x26a/0x2520 [ 1157.978628][T13346] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1157.978649][T13346] ? kasan_save_track+0x3e/0x80 [ 1157.978672][T13346] ? __kasan_slab_alloc+0x6c/0x80 [ 1157.978696][T13346] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 1157.978729][T13346] ? __dev_queue_xmit+0x27b/0x3b50 [ 1157.978767][T13346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1157.978793][T13346] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1157.978842][T13346] ? ref_tracker_free+0x63a/0x7d0 [ 1157.978862][T13346] ? __asan_memcpy+0x40/0x70 [ 1157.978884][T13346] ? __pfx_ref_tracker_free+0x10/0x10 [ 1157.978900][T13346] ? __skb_clone+0x63/0x7a0 [ 1157.978934][T13346] ? __skb_clone+0x483/0x7a0 [ 1157.978965][T13346] ? skb_clone+0x246/0x3a0 [ 1157.978990][T13346] ? __netlink_deliver_tap+0x807/0x850 [ 1157.979016][T13346] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.979050][T13346] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.979084][T13346] netlink_unicast+0x82c/0x9e0 [ 1157.979118][T13346] ? __pfx_netlink_unicast+0x10/0x10 [ 1157.979145][T13346] ? netlink_sendmsg+0x642/0xb30 [ 1157.979161][T13346] ? skb_put+0x11b/0x210 [ 1157.979185][T13346] netlink_sendmsg+0x805/0xb30 [ 1157.979216][T13346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.979240][T13346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1157.979268][T13346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1157.979287][T13346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.979307][T13346] __sock_sendmsg+0x21c/0x270 [ 1157.979339][T13346] ____sys_sendmsg+0x505/0x830 [ 1157.979368][T13346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.979402][T13346] ? import_iovec+0x74/0xa0 [ 1157.979433][T13346] ___sys_sendmsg+0x21f/0x2a0 [ 1157.979458][T13346] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.979525][T13346] ? __fget_files+0x2a/0x420 [ 1157.979551][T13346] ? __fget_files+0x3a0/0x420 [ 1157.979618][T13346] __x64_sys_sendmsg+0x19b/0x260 [ 1157.979643][T13346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.979687][T13346] ? do_syscall_64+0xbe/0xfa0 [ 1157.979711][T13346] do_syscall_64+0xfa/0xfa0 [ 1157.979727][T13346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1157.979756][T13346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.979775][T13346] ? clear_bhb_loop+0x60/0xb0 [ 1157.979800][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.979819][T13346] RIP: 0033:0x7f671c58eba9 [ 1157.979846][T13346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.979863][T13346] RSP: 002b:00007f671d3d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.979885][T13346] RAX: ffffffffffffffda RBX: 00007f671c7d6180 RCX: 00007f671c58eba9 [ 1157.979898][T13346] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000c [ 1157.979911][T13346] RBP: 00007f671c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1157.979922][T13346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.979933][T13346] R13: 00007f671c7d6218 R14: 00007f671c7d6180 R15: 00007fffe62d5b58 [ 1157.979970][T13346] [ 1157.980007][T13346] Mem-Info: [ 1158.078763][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880691abc00: rx timeout, send abort [ 1158.081314][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880691a9c00: rx timeout, send abort [ 1158.087432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880691abc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1158.089706][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880691a9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1158.455956][T13457] loop9: detected capacity change from 0 to 1024 [ 1158.473218][T13346] active_anon:4411 inactive_anon:0 isolated_anon:0 [ 1158.473218][T13346] active_file:19647 inactive_file:40305 isolated_file:0 [ 1158.473218][T13346] unevictable:768 dirty:274 writeback:0 [ 1158.473218][T13346] slab_reclaimable:7269 slab_unreclaimable:101742 [ 1158.473218][T13346] mapped:29843 shmem:1834 pagetables:1157 [ 1158.473218][T13346] sec_pagetables:0 bounce:0 [ 1158.473218][T13346] kernel_misc_reclaimable:0 [ 1158.473218][T13346] free:1311566 free_pcp:16518 free_cma:0 [ 1158.518630][T13457] EXT4-fs: Ignoring removed orlov option [ 1158.528023][T13346] Node 0 active_anon:17644kB inactive_anon:0kB active_file:78588kB inactive_file:161016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119372kB dirty:1096kB writeback:0kB shmem:5800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11760kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1158.622644][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.663151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.678771][T13346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1158.708776][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.718095][T13346] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.745126][T13457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.748038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.828804][T13346] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1158.835302][T13346] Node 0 DMA32 free:1338440kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17396kB inactive_anon:0kB active_file:78588kB inactive_file:159692kB unevictable:1536kB writepending:1096kB zspages:0kB present:3129332kB managed:2557032kB mlocked:0kB bounce:0kB free_pcp:46788kB local_pcp:18468kB free_cma:0kB [ 1158.869434][T13346] lowmem_reserve[]: 0 0 1 1 1 [ 1158.876058][T13346] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1158.987078][T13346] lowmem_reserve[]: 0 0 0 0 0 [ 1158.995947][T13346] Node 1 Normal free:3892280kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10176kB free_cma:0kB [ 1159.050395][T12696] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.070469][ T30] audit: type=1326 audit(1757467419.059:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.8.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1159.106631][T13346] lowmem_reserve[]: 0 0 0 0 0 [ 1159.153399][ T30] audit: type=1326 audit(1757467419.059:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.8.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1159.176113][T13346] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1159.223309][T13346] Node 0 DMA32: 1146*4kB (UM) 1248*8kB (UME) 796*16kB (UM) 691*32kB (UME) 315*64kB (UME) 205*128kB (UME) 124*256kB (UME) 97*512kB (UME) 48*1024kB (UME) 9*2048kB (UM) 267*4096kB (UM) = 1338440kB [ 1159.269199][T13475] loop8: detected capacity change from 0 to 512 [ 1159.275976][ T30] audit: type=1326 audit(1757467419.069:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.8.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1159.312001][T13346] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1159.341126][ T30] audit: type=1326 audit(1757467419.069:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.8.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1159.369842][T13346] Node 1 Normal: 216*4kB (UE) 61*8kB (UME) 39*16kB (UME) 140*32kB (UME) 40*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3892280kB [ 1159.407780][T13346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.426052][ T30] audit: type=1326 audit(1757467419.069:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.8.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1159.455746][T13346] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1159.465559][T13346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.476104][T13346] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.485930][T13346] 61791 total pagecache pages [ 1159.490982][T13346] 0 pages in swap cache [ 1159.495303][T13346] Free swap = 124996kB [ 1159.499557][T13346] Total swap = 124996kB [ 1159.504054][T13346] 2097051 pages RAM [ 1159.508009][T13346] 0 pages HighMem/MovableOnly [ 1159.512848][T13346] 425831 pages reserved [ 1159.517378][T13346] 0 pages cma reserved [ 1159.534908][T13481] loop9: detected capacity change from 0 to 512 [ 1159.564218][T13475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.603447][T13481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.616774][T13481] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.635581][T13475] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.060519][ C1] blk_print_req_error: 1856 callbacks suppressed [ 1160.060542][ C1] I/O error, dev loop9, sector 188 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.061144][T13488] loop9: detected capacity change from 512 to 0 [ 1160.067021][ C1] buffer_io_error: 922 callbacks suppressed [ 1160.067038][ C1] Buffer I/O error on dev loop9, logical block 47, lost sync page write [ 1160.067246][T13481] EXT4-fs error (device loop9): ext4_ext_grow_indepth:1367: inode #19: block 47: comm syz.9.1852: IO error syncing itable block [ 1160.068345][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.120675][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.130176][ C1] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.142042][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.150902][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.167774][ C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.177407][ C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.186912][ C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.189844][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.204683][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.211491][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.227879][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.237487][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.246990][ C1] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.255537][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.278325][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.308671][ C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.318298][ C0] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.327800][ C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.336190][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.348287][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1857'. [ 1160.389387][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.399079][T13496] loop8: detected capacity change from 0 to 1024 [ 1160.411077][T13496] EXT4-fs: Ignoring removed bh option [ 1160.416610][T13496] EXT4-fs: inline encryption not supported [ 1160.424537][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1857'. [ 1160.433205][ C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1160.443052][ C1] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.452177][T13496] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1160.455524][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.469921][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.522722][ C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.531124][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.533534][T13496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1160.538378][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.561190][ C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.569620][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.580050][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.602599][ C0] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.611568][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.619289][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.650102][ C1] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 1160.661068][T13481] EXT4-fs (loop9): I/O error while writing superblock [ 1160.668643][T13481] EXT4-fs error (device loop9): ext4_check_bdev_write_error:228: comm syz.9.1852: Error while async write back metadata [ 1160.684704][T13496] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1855: lblock 2 mapped to illegal pblock 2 (length 1) [ 1160.702020][ C0] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 45) [ 1160.713432][ T6113] Buffer I/O error on device loop9, logical block 45 [ 1160.720676][ T6113] Buffer I/O error on device loop9, logical block 46 [ 1160.741781][ C1] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 49) [ 1160.759480][ T3463] Buffer I/O error on device loop9, logical block 49 [ 1160.766246][ T3463] Buffer I/O error on device loop9, logical block 50 [ 1160.768544][T13505] loop7: detected capacity change from 0 to 1024 [ 1160.773514][ C0] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 55) [ 1160.779551][T13496] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1160.799461][ T3463] Buffer I/O error on device loop9, logical block 55 [ 1160.806207][ T3463] Buffer I/O error on device loop9, logical block 56 [ 1160.809613][ C1] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 59) [ 1160.820552][T13496] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1855: lblock 0 mapped to illegal pblock 48 (length 1) [ 1160.838981][ T3463] Buffer I/O error on device loop9, logical block 59 [ 1160.845712][ T3463] Buffer I/O error on device loop9, logical block 60 [ 1160.883023][T13505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1160.900902][T13496] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1160.917443][T13505] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1860: Allocating blocks 385-513 which overlap fs metadata [ 1160.941942][T13496] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.1855: Failed to acquire dquot type 0 [ 1160.968587][T13496] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1160.976769][T13505] EXT4-fs (loop7): pa ffff88805aab9740: logic 16, phys. 129, len 24 [ 1160.987089][T13505] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1161.005380][T13496] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1855: mark_inode_dirty error [ 1161.009935][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.036535][T13496] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1161.048459][T13496] EXT4-fs (loop8): 1 orphan inode deleted [ 1161.091457][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.092456][T13496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.128004][T10756] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 1161.152773][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.167661][T10756] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1161.173762][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.211757][T10756] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:15: Failed to release dquot type 0 [ 1161.244995][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.302568][T12696] EXT4-fs warning (device loop9): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 1161.342170][T13496] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1855: lblock 0 mapped to illegal pblock 48 (length 1) [ 1161.403389][T13496] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1162.240214][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.269203][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.383925][T13524] 9pnet_fd: Insufficient options for proto=fd [ 1162.455471][T13528] loop7: detected capacity change from 0 to 2048 [ 1162.570926][T13528] Alternate GPT is invalid, using primary GPT. [ 1162.606722][T13528] loop7: p2 p3 p7 [ 1162.858557][T13541] loop7: detected capacity change from 0 to 512 [ 1162.915007][T13541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.929224][T13541] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.159105][T12521] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value [ 1163.219674][T12521] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 1163.264430][ T8535] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.361912][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.528872][ T8535] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.692778][ T8535] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.977758][ T8535] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.057542][T13559] veth0: entered promiscuous mode [ 1164.084904][T13558] veth0: left promiscuous mode [ 1164.688818][T13573] loop7: detected capacity change from 0 to 512 [ 1164.692706][ T8535] bridge_slave_1: left allmulticast mode [ 1164.726893][T13573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1164.730804][ T8535] bridge_slave_1: left promiscuous mode [ 1164.768603][T13573] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1164.781281][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.787808][T13573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1164.811349][T13573] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1164.828045][T13573] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1164.866152][ T8535] bridge_slave_0: left allmulticast mode [ 1164.873903][T13573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1164.894127][T12701] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1164.908888][T12701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1164.919834][T13573] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1889: dx entry: limit 65535 != root limit 120 [ 1164.924027][T12701] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1164.951282][T12701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1164.969024][T12701] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1164.979142][ T8535] bridge_slave_0: left promiscuous mode [ 1164.988451][T13573] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1889: Corrupt directory, running e2fsck is recommended [ 1165.002042][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.128823][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.205226][T13581] syz.6.1887 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1165.917645][ T30] audit: type=1326 audit(1757467425.929:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.8.1897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x0 [ 1166.230249][T13600] loop7: detected capacity change from 0 to 2048 [ 1166.295268][T13600] Alternate GPT is invalid, using primary GPT. [ 1166.320156][T13600] loop7: p2 p3 p7 [ 1166.738533][T13608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.927932][T13611] loop8: detected capacity change from 0 to 512 [ 1166.974392][ T8535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.010987][ T8535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.015833][T13611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.038966][ T8535] bond0 (unregistering): Released all slaves [ 1167.038971][T13611] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.077105][ T8026] Bluetooth: hci1: command tx timeout [ 1167.231023][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.603313][ T30] audit: type=1326 audit(1757467427.599:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.643208][ T30] audit: type=1326 audit(1757467427.599:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.674526][ T30] audit: type=1326 audit(1757467427.599:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.703855][ T30] audit: type=1326 audit(1757467427.599:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.737715][ T30] audit: type=1326 audit(1757467427.599:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.760638][ T30] audit: type=1326 audit(1757467427.609:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.783709][ T30] audit: type=1326 audit(1757467427.609:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.806479][ T30] audit: type=1326 audit(1757467427.609:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1167.870342][ T30] audit: type=1326 audit(1757467427.609:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.8.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7f2058eba9 code=0x7ffc0000 [ 1168.102346][ T8535] hsr_slave_0: left promiscuous mode [ 1168.128852][ T8535] hsr_slave_1: left promiscuous mode [ 1168.152427][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.172263][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.193006][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.212758][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.299494][ T8535] veth1_macvtap: left promiscuous mode [ 1168.324314][ T8535] veth0_macvtap: left promiscuous mode [ 1168.330055][T13640] loop7: detected capacity change from 0 to 512 [ 1168.342730][ T8535] veth1_vlan: left promiscuous mode [ 1168.353971][ T8535] veth0_vlan: left promiscuous mode [ 1168.387061][T13640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.454006][T13640] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.688396][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.782129][T13651] Set syz1 is full, maxelem 65536 reached [ 1169.154871][ T8026] Bluetooth: hci1: command tx timeout [ 1169.518828][ T8535] team0 (unregistering): Port device team_slave_1 removed [ 1169.608051][ T8535] team0 (unregistering): Port device team_slave_0 removed [ 1170.543376][T13652] lo speed is unknown, defaulting to 1000 [ 1170.589580][T13652] lo speed is unknown, defaulting to 1000 [ 1170.695264][T13652] lo speed is unknown, defaulting to 1000 [ 1170.712497][T13652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1170.736984][T13652] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1170.884880][T13652] lo speed is unknown, defaulting to 1000 [ 1170.920600][T13677] 9pnet_fd: Insufficient options for proto=fd [ 1170.981352][T13652] lo speed is unknown, defaulting to 1000 [ 1171.105153][T13652] lo speed is unknown, defaulting to 1000 [ 1171.232452][T13652] lo speed is unknown, defaulting to 1000 [ 1171.243417][ T8026] Bluetooth: hci1: command tx timeout [ 1171.251183][T13578] chnl_net:caif_netlink_parms(): no params data found [ 1171.275989][T13652] lo speed is unknown, defaulting to 1000 [ 1171.286916][T13652] lo speed is unknown, defaulting to 1000 [ 1171.342983][T13652] lo speed is unknown, defaulting to 1000 [ 1171.381124][T13652] lo speed is unknown, defaulting to 1000 [ 1171.530985][T13578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.549976][T13578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.557434][T13578] bridge_slave_0: entered allmulticast mode [ 1171.569239][T13578] bridge_slave_0: entered promiscuous mode [ 1171.580688][T13578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.588160][T13578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.595612][T13578] bridge_slave_1: entered allmulticast mode [ 1171.607142][T13578] bridge_slave_1: entered promiscuous mode [ 1171.757999][T13578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.816076][T13578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.850092][T13698] loop8: detected capacity change from 0 to 512 [ 1171.884207][T13702] 9pnet_fd: Insufficient options for proto=fd [ 1171.928748][T13698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.971727][T13698] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.049019][T13578] team0: Port device team_slave_0 added [ 1172.058790][T13578] team0: Port device team_slave_1 added [ 1172.152149][T13578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.163724][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.222813][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.230847][T13578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.246076][T13578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.253080][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.279237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.319638][T13578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.794330][T13718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1173.515490][ T8026] Bluetooth: hci1: command tx timeout [ 1173.781974][T13578] hsr_slave_0: entered promiscuous mode [ 1173.816254][T13578] hsr_slave_1: entered promiscuous mode [ 1173.875510][T13578] debugfs: 'hsr0' already exists in 'hsr' [ 1173.900758][T13578] Cannot create hsr debugfs directory [ 1174.449416][T13732] siw: device registration error -23 [ 1174.639463][T13731] lo speed is unknown, defaulting to 1000 [ 1174.753945][T13734] syzkaller1: entered promiscuous mode [ 1174.774945][T13734] syzkaller1: entered allmulticast mode [ 1176.061159][T13754] loop6: detected capacity change from 0 to 512 [ 1176.146426][T13578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1176.148979][T13754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.190308][T13578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1176.210761][T13754] ext4 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.227885][T13578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1176.253868][T13578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1176.482807][T13578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.492776][T13775] loop7: detected capacity change from 0 to 164 [ 1176.521546][T13775] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1176.560958][T13775] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1176.566812][T13578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.634494][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.641715][T10756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.688616][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.695925][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.750570][ T9815] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value [ 1176.810889][ T9815] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 1176.861980][T13782] loop7: detected capacity change from 0 to 512 [ 1176.878837][T13578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.911090][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1964'. [ 1177.035363][T13786] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 1177.038384][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.254018][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1963'. [ 1177.409694][T13802] loop7: detected capacity change from 0 to 2048 [ 1177.500423][T13802] Alternate GPT is invalid, using primary GPT. [ 1177.525832][T13578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.533747][T13802] loop7: p2 p3 p7 [ 1177.686440][T13578] veth0_vlan: entered promiscuous mode [ 1177.711664][T13578] veth1_vlan: entered promiscuous mode [ 1177.814978][T13578] veth0_macvtap: entered promiscuous mode [ 1177.829829][T13578] veth1_macvtap: entered promiscuous mode [ 1177.861553][T13578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.883078][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.891017][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.932236][T13821] netlink: 'syz.7.1978': attribute type 1 has an invalid length. [ 1177.940626][T13578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.000184][ T3463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.023060][ T3463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.041859][ T3463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.071176][ T3463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.111646][T13827] loop8: detected capacity change from 0 to 512 [ 1178.221556][T13827] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1981: casefold flag without casefold feature [ 1178.236415][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1982'. [ 1178.267811][T13827] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1981: couldn't read orphan inode 15 (err -117) [ 1178.290682][T13827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.342958][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.370069][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.455738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.490099][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.500138][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.656807][T13842] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1986'. [ 1178.727777][T13845] loop2: detected capacity change from 0 to 1024 [ 1178.748242][T13842] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1986'. [ 1178.750109][T13845] EXT4-fs: Ignoring removed bh option [ 1178.768292][T13845] EXT4-fs: inline encryption not supported [ 1178.780514][T13845] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1178.792567][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 1178.792588][ T30] audit: type=1326 audit(1757467438.799:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1178.836157][ T30] audit: type=1326 audit(1757467438.799:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1178.891048][T13845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1178.948352][T13845] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1880: lblock 2 mapped to illegal pblock 2 (length 1) [ 1178.986094][ T30] audit: type=1326 audit(1757467438.839:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.030291][T13845] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1179.048713][ T30] audit: type=1326 audit(1757467438.839:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.071449][T13845] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1880: lblock 0 mapped to illegal pblock 48 (length 1) [ 1179.097731][T13845] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1179.103976][ T30] audit: type=1326 audit(1757467438.839:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.135504][ T30] audit: type=1326 audit(1757467438.869:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.163473][T13845] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.1880: Failed to acquire dquot type 0 [ 1179.197992][T13845] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1179.218693][ T30] audit: type=1326 audit(1757467438.869:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.242648][ T30] audit: type=1326 audit(1757467438.869:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1179.268104][T13845] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1880: mark_inode_dirty error [ 1179.295252][T13845] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1179.308339][T13845] EXT4-fs (loop2): 1 orphan inode deleted [ 1179.317158][T13845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.347172][T13855] netlink: 'syz.1.1990': attribute type 1 has an invalid length. [ 1179.363690][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1179.384846][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 1179.534998][T13845] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1880: lblock 0 mapped to illegal pblock 48 (length 1) [ 1179.754777][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.780220][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 1179.806065][T13867] loop8: detected capacity change from 0 to 1024 [ 1179.823991][T13867] EXT4-fs: Ignoring removed orlov option [ 1179.877815][T13867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.941326][T13870] loop6: detected capacity change from 0 to 8192 [ 1180.272758][T13886] netlink: 'syz.6.2002': attribute type 1 has an invalid length. [ 1180.474802][T13894] loop6: detected capacity change from 0 to 1024 [ 1180.486193][T13894] EXT4-fs: Ignoring removed bh option [ 1180.499231][T13894] EXT4-fs: inline encryption not supported [ 1180.509536][T13894] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1180.551778][T13894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1180.575471][T13894] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2007: lblock 2 mapped to illegal pblock 2 (length 1) [ 1180.616432][T13894] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2007: lblock 0 mapped to illegal pblock 48 (length 1) [ 1180.638501][T13894] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.2007: Failed to acquire dquot type 0 [ 1180.665574][T13894] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1180.675997][T13894] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2007: mark_inode_dirty error [ 1180.696928][T13904] loop7: detected capacity change from 0 to 512 [ 1180.703519][T13894] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1180.718964][T13894] EXT4-fs (loop6): 1 orphan inode deleted [ 1180.731868][ T1337] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1180.732921][T13894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.796489][T13904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.818371][ T1337] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 0 [ 1180.845946][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.911165][T13904] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.963140][T13894] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2007: lblock 0 mapped to illegal pblock 48 (length 1) [ 1181.096533][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.134649][T13914] loop8: detected capacity change from 0 to 1024 [ 1181.138005][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.178512][T13914] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1181.312150][T13920] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 1181.334158][T13924] batadv1: entered promiscuous mode [ 1181.368100][T13914] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.522390][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.609483][T13924] ref_ctr_offset mismatch. inode: 0x3c offset: 0x0 ref_ctr_offset(old): 0x8000000 ref_ctr_offset(new): 0x4a000000 [ 1181.720077][T13938] loop6: detected capacity change from 0 to 1024 [ 1181.740366][T13942] loop7: detected capacity change from 0 to 164 [ 1181.744283][T13938] EXT4-fs: Ignoring removed orlov option [ 1181.769500][T13942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1181.807238][T13938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.829214][T13942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1181.979365][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2030'. [ 1182.062768][T13956] IPv6: Can't replace route, no match found [ 1182.300821][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 1182.532374][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.669822][T13972] loop2: detected capacity change from 0 to 1024 [ 1182.700405][T13972] EXT4-fs: inline encryption not supported [ 1182.750486][T13972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.778880][T13978] loop7: detected capacity change from 0 to 164 [ 1182.792913][T13978] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1182.826705][T13978] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1182.957339][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.148217][T13992] netlink: 'syz.7.2046': attribute type 1 has an invalid length. [ 1183.161823][T13995] netlink: 'syz.2.2045': attribute type 83 has an invalid length. [ 1183.394752][T14004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2052'. [ 1183.409809][T14004] ksmbd: Unknown IPC event: 4, ignore. [ 1183.417850][T14008] 9pnet_fd: Insufficient options for proto=fd [ 1183.490020][T14011] loop6: detected capacity change from 0 to 512 [ 1183.513779][T14011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.532542][T14011] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.532776][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2055'. [ 1183.632077][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.639338][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1183.671858][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1183.745495][T14019] loop6: detected capacity change from 0 to 164 [ 1183.760902][T14019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1183.779550][T14019] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1183.866093][T14025] loop6: detected capacity change from 0 to 512 [ 1183.876083][T14023] loop2: detected capacity change from 0 to 1024 [ 1183.879946][T14025] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1183.900962][T14025] EXT4-fs (loop6): 1 truncate cleaned up [ 1183.908219][T14025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.939479][T14023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.023199][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.134868][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.408591][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2066'. [ 1184.530969][T14047] loop7: detected capacity change from 0 to 512 [ 1184.648195][T14047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.668768][T14047] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.807821][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'. [ 1185.264563][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.400167][T14077] loop6: detected capacity change from 0 to 2048 [ 1185.611410][T14077] Alternate GPT is invalid, using primary GPT. [ 1185.644009][T14077] loop6: p2 p3 p7 [ 1185.738267][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1186.077157][T14092] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2087'. [ 1186.106154][T14092] batadv1: entered promiscuous mode [ 1186.111525][T14092] batadv1: entered allmulticast mode [ 1186.232056][T14100] loop6: detected capacity change from 0 to 512 [ 1186.327474][T14100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.343814][T14100] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.400185][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1186.400206][ T30] audit: type=1326 audit(1757467446.409:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.435310][ T30] audit: type=1326 audit(1757467446.449:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.457685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1186.466649][ T30] audit: type=1326 audit(1757467446.449:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.489397][ T30] audit: type=1326 audit(1757467446.449:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.616486][ T30] audit: type=1326 audit(1757467446.449:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.680047][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.691638][ T30] audit: type=1326 audit(1757467446.489:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.721175][ T30] audit: type=1326 audit(1757467446.489:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.813442][ T30] audit: type=1326 audit(1757467446.489:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.867716][ T30] audit: type=1326 audit(1757467446.489:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1186.919702][ T30] audit: type=1326 audit(1757467446.489:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f671c58eba9 code=0x7ffc0000 [ 1187.517005][T14133] loop7: detected capacity change from 0 to 512 [ 1187.552020][T14136] loop2: detected capacity change from 0 to 1024 [ 1187.573214][T14133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.590119][T14136] EXT4-fs: inline encryption not supported [ 1187.592720][T14133] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.624232][T14136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.709058][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.779563][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.119368][T14163] batadv1: entered promiscuous mode [ 1188.364674][T14171] veth0_to_team: entered promiscuous mode [ 1188.711327][T14177] loop6: detected capacity change from 0 to 1024 [ 1188.727196][T14177] EXT4-fs: inline encryption not supported [ 1188.815976][T14177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.603200][T14187] loop2: detected capacity change from 0 to 1024 [ 1189.640086][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.644667][T14187] EXT4-fs: Ignoring removed orlov option [ 1189.800793][T14187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.867540][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'. [ 1190.170335][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.237058][T14197] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1191.160827][T14222] loop2: detected capacity change from 0 to 1024 [ 1191.217921][T14222] EXT4-fs: inline encryption not supported [ 1191.267517][T14222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.350272][T14229] overlayfs: failed to resolve './bus': -2 [ 1191.461711][T13578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.719682][T14236] loop6: detected capacity change from 0 to 512 [ 1191.742273][T14236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1191.789993][T14236] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1191.806351][T14236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1191.847566][T14236] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 1191.857627][T14236] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1191.868646][T14236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1192.049901][T14244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1192.082187][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.160882][T14247] netlink: 'syz.7.2153': attribute type 1 has an invalid length. [ 1193.680794][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1193.680817][ T30] audit: type=1326 audit(1757467453.679:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.2.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c98eba9 code=0x7ffc0000 [ 1193.872261][ T30] audit: type=1326 audit(1757467453.679:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.2.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c98eba9 code=0x7ffc0000 [ 1194.045996][ T30] audit: type=1326 audit(1757467453.689:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.2.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f5c7c98eba9 code=0x7ffc0000 [ 1194.180819][ T30] audit: type=1326 audit(1757467453.689:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.2.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7c98eba9 code=0x7ffc0000 [ 1194.273614][T14278] netlink: 'syz.2.2165': attribute type 1 has an invalid length. [ 1194.752447][T14293] loop8: detected capacity change from 0 to 1024 [ 1194.767272][T14293] EXT4-fs: Ignoring removed bh option [ 1194.772860][T14293] EXT4-fs: inline encryption not supported [ 1194.793200][T14291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.836089][T14293] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1194.938534][T14293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1194.959549][T14291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.030351][T14293] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2173: lblock 2 mapped to illegal pblock 2 (length 1) [ 1195.101960][T14293] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1195.149863][T14293] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2173: lblock 0 mapped to illegal pblock 48 (length 1) [ 1195.180635][T14303] loop7: detected capacity change from 0 to 512 [ 1195.200139][T14303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1195.211752][T14293] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1195.232555][T14303] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1195.270787][T14293] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.2173: Failed to acquire dquot type 0 [ 1195.283526][T14303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1195.291725][T14303] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1195.320941][T14291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.342531][T14303] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1195.353846][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 1195.362784][T14293] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1195.390792][T14293] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2173: mark_inode_dirty error [ 1195.407827][T14303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1195.420964][T14293] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1195.434385][T14293] EXT4-fs (loop8): 1 orphan inode deleted [ 1195.442281][T14293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.475146][ T1337] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1195.494961][ T1337] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1195.503977][ T1337] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 0 [ 1195.602204][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.609020][T14291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.639311][T14293] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2173: lblock 0 mapped to illegal pblock 48 (length 1) [ 1195.672917][T14293] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 1195.817034][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2184'. [ 1195.831604][T12698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.878341][ T1337] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.947114][ T1337] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.017542][ T1337] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.044156][ T1337] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.520154][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1196.548798][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1196.561931][T14350] loop7: detected capacity change from 0 to 1024 [ 1196.584637][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1196.598650][T14350] EXT4-fs: Ignoring removed orlov option [ 1196.621599][T14346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2194'. [ 1196.758951][T14358] loop8: detected capacity change from 0 to 164 [ 1196.785381][T14358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1196.801794][T14350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.842605][T14358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1197.192912][T12521] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.274358][T14375] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 1197.650307][T14392] loop7: detected capacity change from 0 to 256 [ 1197.741616][T14392] FAT-fs (loop7): Directory bread(block 64) failed [ 1197.763667][T14392] FAT-fs (loop7): Directory bread(block 65) failed [ 1197.770355][T14392] FAT-fs (loop7): Directory bread(block 66) failed [ 1197.840286][T14392] FAT-fs (loop7): Directory bread(block 67) failed [ 1197.865403][T14392] FAT-fs (loop7): Directory bread(block 68) failed [ 1197.883453][T14392] FAT-fs (loop7): Directory bread(block 69) failed [ 1197.901876][T14392] FAT-fs (loop7): Directory bread(block 70) failed [ 1197.964901][T14392] FAT-fs (loop7): Directory bread(block 71) failed [ 1197.973542][T14392] FAT-fs (loop7): Directory bread(block 72) failed [ 1198.016588][T14392] FAT-fs (loop7): Directory bread(block 73) failed [ 1198.767469][T14432] loop7: detected capacity change from 0 to 164 [ 1198.782644][T14432] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1198.811666][T14432] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1199.157109][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.168272][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.516642][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.537830][T14439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.068312][ T1337] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.091611][ T1337] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.120467][ T1337] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.146504][ T1337] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.231813][T14474] loop7: detected capacity change from 0 to 164 [ 1200.261794][T14474] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1200.308126][T14474] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1200.774703][T14459] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1201.959872][ T30] audit: type=1326 audit(1757467461.959:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.050042][ T30] audit: type=1326 audit(1757467462.019:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.109802][ T30] audit: type=1326 audit(1757467462.019:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.180082][ T30] audit: type=1326 audit(1757467462.019:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.258403][T14540] loop7: detected capacity change from 0 to 1764 [ 1202.281701][ T30] audit: type=1326 audit(1757467462.019:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.325889][ T30] audit: type=1326 audit(1757467462.029:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.360426][ T30] audit: type=1326 audit(1757467462.029:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.388489][ T30] audit: type=1326 audit(1757467462.029:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.416718][ T30] audit: type=1326 audit(1757467462.029:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.470370][ T30] audit: type=1326 audit(1757467462.029:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.6.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc76b8eba9 code=0x7ffc0000 [ 1202.688981][T14525] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1203.388725][T14572] netlink: 'syz.6.2290': attribute type 1 has an invalid length. [ 1203.716685][T14579] loop2: detected capacity change from 0 to 1764 [ 1203.931968][T14583] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1204.059680][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.201222][T14591] loop7: detected capacity change from 0 to 512 [ 1204.259127][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.319857][T14591] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2300: bg 0: block 127: padding at end of block bitmap is not set [ 1204.380376][T14591] ------------[ cut here ]------------ [ 1204.387433][T14591] EA inode 11 i_nlink=2 [ 1204.394058][T12701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1204.398570][T14591] WARNING: fs/ext4/xattr.c:1053 at ext4_xattr_inode_update_ref+0x534/0x5d0, CPU#1: syz.7.2300/14591 [ 1204.416854][T14591] Modules linked in: [ 1204.421204][T14591] CPU: 1 UID: 0 PID: 14591 Comm: syz.7.2300 Not tainted syzkaller #0 PREEMPT(full) [ 1204.430861][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1204.441141][T14591] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1204.450947][T14591] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1204.452884][T14597] batadv1: entered promiscuous mode [ 1204.470886][T14591] RSP: 0018:ffffc9000422f2a0 EFLAGS: 00010246 [ 1204.470921][T14591] RAX: 798ad3831bbfcc00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1204.470938][T14591] RDX: ffffc9000bb89000 RSI: 0000000000009478 RDI: 0000000000009479 [ 1204.470954][T14591] RBP: ffffc9000422f390 R08: 0000000000000003 R09: 0000000000000004 [ 1204.470967][T14591] R10: dffffc0000000000 R11: fffffbfff1c3a66c R12: ffff888032901600 [ 1204.470981][T14591] R13: 1ffff110065202c0 R14: 00000000ffffffff R15: 000000000000000b [ 1204.470995][T14591] FS: 00007f192ba9b6c0(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 1204.471013][T14591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.471131][T14591] CR2: 000055558d5975c8 CR3: 000000002ec5c000 CR4: 00000000003526f0 [ 1204.471152][T14591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1204.471167][T14591] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1204.471181][T14591] Call Trace: [ 1204.471192][T14591] [ 1204.471208][T14591] ? ext4_xattr_inode_dec_ref_all+0x46e/0xda0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1204.471247][T14591] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1204.471282][T14591] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1204.471313][T14591] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1204.471350][T14591] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1204.471393][T14591] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1204.471427][T14591] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1204.471454][T14591] ? __ext4_journal_get_write_access+0x272/0x570 [ 1204.471489][T14591] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1204.471528][T14591] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1204.510137][T12701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1204.517228][T14591] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1204.517289][T14591] ext4_evict_inode+0xac9/0xee0 [ 1204.517332][T14591] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1204.517362][T14591] ? do_raw_spin_unlock+0x122/0x240 [ 1204.517393][T14591] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1204.517416][T14591] evict+0x501/0x9c0 [ 1204.517452][T14591] ? __pfx_evict+0x10/0x10 [ 1204.517473][T14591] ? do_raw_spin_unlock+0x122/0x240 [ 1204.517500][T14591] ? _raw_spin_unlock+0x28/0x50 [ 1204.517527][T14591] ? iput+0x6d8/0x9d0 [ 1204.517565][T14591] ext4_orphan_cleanup+0xc20/0x1460 [ 1204.517600][T14591] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1204.529057][T12701] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1204.534695][T14591] ? ext4_register_li_request+0x640/0x720 [ 1204.534731][T14591] ? errseq_check_and_advance+0x66/0x120 [ 1204.534764][T14591] ext4_fill_super+0x57df/0x6090 [ 1204.534827][T14591] ? __pfx_ext4_fill_super+0x10/0x10 [ 1204.534856][T14591] ? set_blocksize+0x21e/0x500 [ 1204.542963][T12701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1204.549582][T14591] ? sb_set_blocksize+0x104/0x180 [ 1204.549626][T14591] ? setup_bdev_super+0x4c1/0x5b0 [ 1204.558817][T12701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1204.565720][T14591] get_tree_bdev_flags+0x40b/0x4d0 [ 1204.773381][T14591] ? __pfx_ext4_fill_super+0x10/0x10 [ 1204.778726][T14591] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1204.785436][T14591] vfs_get_tree+0x8f/0x2b0 [ 1204.789916][T14591] do_new_mount+0x302/0xa10 [ 1204.795566][T14591] ? apparmor_capable+0x137/0x1b0 [ 1204.800653][T14591] ? __pfx_do_new_mount+0x10/0x10 [ 1204.805762][T14591] ? ns_capable+0x8a/0xf0 [ 1204.810150][T14591] ? kmem_cache_free+0x19a/0x690 [ 1204.815187][T14591] __se_sys_mount+0x313/0x410 [ 1204.819912][T14591] ? __pfx___se_sys_mount+0x10/0x10 [ 1204.825235][T14591] ? do_syscall_64+0xbe/0xfa0 [ 1204.829943][T14591] ? __x64_sys_mount+0x20/0xc0 [ 1204.835032][T14591] do_syscall_64+0xfa/0xfa0 [ 1204.839582][T14591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.844902][T14591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.851021][T14591] ? clear_bhb_loop+0x60/0xb0 [ 1204.855816][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.861752][T14591] RIP: 0033:0x7f192ab9034a [ 1204.866389][T14591] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.887241][T14591] RSP: 002b:00007f192ba9ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1204.896750][T14591] RAX: ffffffffffffffda RBX: 00007f192ba9aef0 RCX: 00007f192ab9034a [ 1204.904802][T14591] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f192ba9aeb0 [ 1204.912821][T14591] RBP: 0000200000000180 R08: 00007f192ba9aef0 R09: 0000000000800700 [ 1204.920906][T14591] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1204.928990][T14591] R13: 00007f192ba9aeb0 R14: 0000000000000473 R15: 0000200000000680 [ 1204.937066][T14591] [ 1204.940145][T14591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1204.947452][T14591] CPU: 1 UID: 0 PID: 14591 Comm: syz.7.2300 Not tainted syzkaller #0 PREEMPT(full) [ 1204.956849][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1204.966905][T14591] Call Trace: [ 1204.970186][T14591] [ 1204.973120][T14591] dump_stack_lvl+0x99/0x250 [ 1204.977727][T14591] ? __asan_memcpy+0x40/0x70 [ 1204.982326][T14591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1204.987529][T14591] ? __pfx__printk+0x10/0x10 [ 1204.992153][T14591] vpanic+0x237/0x6d0 [ 1204.996149][T14591] ? __pfx_vpanic+0x10/0x10 [ 1205.000659][T14591] ? is_bpf_text_address+0x292/0x2b0 [ 1205.005954][T14591] ? is_bpf_text_address+0x26/0x2b0 [ 1205.011166][T14591] panic+0xb9/0xc0 [ 1205.014905][T14591] ? __pfx_panic+0x10/0x10 [ 1205.019341][T14591] __warn+0x334/0x4c0 [ 1205.023331][T14591] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1205.029329][T14591] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1205.035401][T14591] report_bug+0x2be/0x4f0 [ 1205.039740][T14591] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1205.045727][T14591] ? ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1205.051738][T14591] ? ext4_xattr_inode_update_ref+0x536/0x5d0 [ 1205.057724][T14591] handle_bug+0x84/0x160 [ 1205.062061][T14591] exc_invalid_op+0x1a/0x50 [ 1205.066568][T14591] asm_exc_invalid_op+0x1a/0x20 [ 1205.071422][T14591] RIP: 0010:ext4_xattr_inode_update_ref+0x534/0x5d0 [ 1205.078019][T14591] Code: 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 86 00 00 00 41 8b 14 24 48 c7 c7 20 dd bf 8b 4c 89 fe e8 9d 63 fc fe 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df e9 bb fd ff ff e8 e4 b7 [ 1205.097718][T14591] RSP: 0018:ffffc9000422f2a0 EFLAGS: 00010246 [ 1205.103885][T14591] RAX: 798ad3831bbfcc00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1205.111889][T14591] RDX: ffffc9000bb89000 RSI: 0000000000009478 RDI: 0000000000009479 [ 1205.119970][T14591] RBP: ffffc9000422f390 R08: 0000000000000003 R09: 0000000000000004 [ 1205.128126][T14591] R10: dffffc0000000000 R11: fffffbfff1c3a66c R12: ffff888032901600 [ 1205.136107][T14591] R13: 1ffff110065202c0 R14: 00000000ffffffff R15: 000000000000000b [ 1205.144136][T14591] ? ext4_xattr_inode_dec_ref_all+0x46e/0xda0 [ 1205.150223][T14591] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1205.156561][T14591] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1205.162200][T14591] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1205.168279][T14591] ext4_xattr_inode_dec_ref_all+0x867/0xda0 [ 1205.174204][T14591] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1205.179951][T14591] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 1205.186381][T14591] ? __ext4_journal_get_write_access+0x272/0x570 [ 1205.192720][T14591] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1205.199423][T14591] ext4_xattr_delete_inode+0xa4c/0xc10 [ 1205.204910][T14591] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 1205.210912][T14591] ext4_evict_inode+0xac9/0xee0 [ 1205.215778][T14591] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1205.221159][T14591] ? do_raw_spin_unlock+0x122/0x240 [ 1205.226370][T14591] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1205.231754][T14591] evict+0x501/0x9c0 [ 1205.235669][T14591] ? __pfx_evict+0x10/0x10 [ 1205.240088][T14591] ? do_raw_spin_unlock+0x122/0x240 [ 1205.245301][T14591] ? _raw_spin_unlock+0x28/0x50 [ 1205.250159][T14591] ? iput+0x6d8/0x9d0 [ 1205.254182][T14591] ext4_orphan_cleanup+0xc20/0x1460 [ 1205.259414][T14591] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1205.265084][T14591] ? ext4_register_li_request+0x640/0x720 [ 1205.270856][T14591] ? errseq_check_and_advance+0x66/0x120 [ 1205.276504][T14591] ext4_fill_super+0x57df/0x6090 [ 1205.281485][T14591] ? __pfx_ext4_fill_super+0x10/0x10 [ 1205.286778][T14591] ? set_blocksize+0x21e/0x500 [ 1205.291576][T14591] ? sb_set_blocksize+0x104/0x180 [ 1205.296735][T14591] ? setup_bdev_super+0x4c1/0x5b0 [ 1205.301793][T14591] get_tree_bdev_flags+0x40b/0x4d0 [ 1205.306918][T14591] ? __pfx_ext4_fill_super+0x10/0x10 [ 1205.312224][T14591] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1205.317999][T14591] vfs_get_tree+0x8f/0x2b0 [ 1205.322452][T14591] do_new_mount+0x302/0xa10 [ 1205.326978][T14591] ? apparmor_capable+0x137/0x1b0 [ 1205.332018][T14591] ? __pfx_do_new_mount+0x10/0x10 [ 1205.337050][T14591] ? ns_capable+0x8a/0xf0 [ 1205.341397][T14591] ? kmem_cache_free+0x19a/0x690 [ 1205.346357][T14591] __se_sys_mount+0x313/0x410 [ 1205.351053][T14591] ? __pfx___se_sys_mount+0x10/0x10 [ 1205.356275][T14591] ? do_syscall_64+0xbe/0xfa0 [ 1205.360953][T14591] ? __x64_sys_mount+0x20/0xc0 [ 1205.365745][T14591] do_syscall_64+0xfa/0xfa0 [ 1205.370324][T14591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.375637][T14591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.381713][T14591] ? clear_bhb_loop+0x60/0xb0 [ 1205.386403][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.392304][T14591] RIP: 0033:0x7f192ab9034a [ 1205.396850][T14591] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.416467][T14591] RSP: 002b:00007f192ba9ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1205.425427][T14591] RAX: ffffffffffffffda RBX: 00007f192ba9aef0 RCX: 00007f192ab9034a [ 1205.433564][T14591] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f192ba9aeb0 [ 1205.441551][T14591] RBP: 0000200000000180 R08: 00007f192ba9aef0 R09: 0000000000800700 [ 1205.449624][T14591] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1205.457609][T14591] R13: 00007f192ba9aeb0 R14: 0000000000000473 R15: 0000200000000680 [ 1205.465602][T14591] [ 1205.468918][T14591] Kernel Offset: disabled [ 1205.473326][T14591] Rebooting in 86400 seconds..