last executing test programs: 2m48.898159196s ago: executing program 0 (id=701): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r1 = syz_open_dev$sg(0x0, 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2m48.820619666s ago: executing program 0 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608"], 0x110}}, 0x0) 2m48.751366096s ago: executing program 0 (id=703): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 2m48.474276435s ago: executing program 0 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086035b6885429d44547255a0dd600180f200140600208100000000000000000000000000bb3ef40884fe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x7, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) unshare(0x64000600) 2m46.844212651s ago: executing program 0 (id=708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000"], 0x3c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000600)={0x2, 0x0, 0xfffffffe, 0x1, 0xfffffffc}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000300)=0xa, 0x4) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x83) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x200) 2m40.852591664s ago: executing program 0 (id=724): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m25.211875281s ago: executing program 32 (id=724): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 20.237063446s ago: executing program 4 (id=1209): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00fb00020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xffffffffffffffff}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x78b, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x1}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 20.075536766s ago: executing program 5 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086035b6885429d44547255a0dd600180f200140600208100000000000000000000000000bb3ef40884fe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) unshare(0x64000600) 17.90296526s ago: executing program 4 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000011000300686173683a69702c6d61726b00"], 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000fffc0500010007"], 0x1c}}, 0x8000) 15.660781933s ago: executing program 5 (id=1218): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = dup2(r7, r7) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000240)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRES16, @ANYBLOB="2c636f6e746578743d73797374656d5f752c726f2c61756469742c7375626a5f726f6c651ca8ba91a3a08f88b8a003653455fed0f0b52cf1452b003f8e172d0d2cd5ed8d9ba16fba394f2bf8decb8c5a4913698ed516a64bde"], 0x5, 0x1c7, &(0x7f0000000500)="$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") 15.574814313s ago: executing program 4 (id=1219): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") rename(&(0x7f0000006840)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) io_setup(0x1, &(0x7f0000000740)=0x0) io_pgetevents(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0xe630]}, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/dev_mcast\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4000810) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000000007000000000000002e00df93286d9dc1282f013859f6ee4eac19f59e350eddd3449b436b8d50cfff2b3cde760ea9a86460eaa1f15ff0c0fa48667e20865cdd88b5634f1b810578f03a788da8c902dcc73e6d271fc775cd710000009d4d6e5b"], 0x0, 0x29, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r5, 0x5c, 0x0}, 0x10) syz_clone(0x640c7011, 0x0, 0x0, 0x0, 0x0, 0x0) 15.527471543s ago: executing program 3 (id=1221): ioperm(0x2, 0x1, 0x9) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 13.109782236s ago: executing program 3 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x80, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x80}}, 0x20040054) 12.944415746s ago: executing program 5 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) 12.145461744s ago: executing program 5 (id=1225): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00fb00020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xffffffffffffffff}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x78b, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x1}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 12.144850354s ago: executing program 2 (id=1226): sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x0, 0x408, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x400455c8, 0xf) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) unshare(0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @loopback, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303080026006000000002000020d3"]) ppoll(&(0x7f0000000040)=[{r5, 0x4087}], 0x1, 0x0, 0x0, 0x0) 11.979904823s ago: executing program 4 (id=1227): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x2484, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000001bc19c774f6f3b99a2a63751a9717b8af8ff00000000bfa100000000000007020000f8ffffffb7030000000000000000850000000100000095000000000000b6a001e8cf2bf2cec2092d28d98d78754916aa2392af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ac0)={r1, 0x0, 0xee, 0x1000, &(0x7f0000000740)="a21adc41fe4230469252a11c3a775d3178b69a016906c750e3b68991eeddd05228f042ec936ad7d52e2b876093df59d4703e92b1cbaff199b621fd588b8e6c0cf7cf3fc6e7760a467154a26b4cb32bbda09038aeb392d54930b72c0849fd35339041973aae0a16892168e2141fe2b1919f94a92a928c6be0f6c5dc3e8c8ca88b28693231204b8d177b894774aa386fd759244366dedeecca19da420052ea8283cddbe50e25bea901c3a0e9399fdd17d7c03796ae5a30ffdd796b8f56a7e4ab1b7bc04405e856b1851112c28a94a2489a606bbd787f98df7bf6d03a5f9d02760134852023fd862aba5f52af4da19c", &(0x7f0000001a40)=""/4096, 0x80000001, 0x0, 0xde, 0x0, &(0x7f0000000880)="808c0f263885bd930aaaaa23794a11b96400683e21a6b8bbef4d6af7b86c42475467a9dd73fd5f05a06b01143dd81b8dd0ed95924a4f49d722c35bddc73af70e1102518bab80a13a09945fbd05a781e9806d04450888db08640dbf7aab39c3696f938445d4d55aae69431013d4ce34e40d6fb0f67f27597db0410bac28846c6e0c192bd835d4f4878c479d1d4025853bdaf372ca0631cc648f87211b07ccb1bf44831f439f2ef1c079dc135e3884c1979db2f0cd5524d90c6bb67edaa15e5f876a5996497085e1c014a18a0b26a91aadd5cba38afe4313740be9b247f52f", &(0x7f0000002a40), 0x3}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000004740)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x380000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004780), 0x0, 0x24050005) 7.566988001s ago: executing program 3 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086035b6885429d44547255a0dd600180f200140600208100000000000000000000000000bb3ef40884fe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) unshare(0x64000600) 7.24148537s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000011000300686173683a69702c6d61726b00"], 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000fffc0500010007"], 0x1c}}, 0x8000) 7.21549705s ago: executing program 2 (id=1230): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) 6.394437108s ago: executing program 3 (id=1231): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000008000000060000000011"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x90}}, 0x0) 6.303059067s ago: executing program 1 (id=1232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) 6.302208717s ago: executing program 2 (id=1233): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = dup2(r7, r7) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000240)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,fsmagic=0x00000000000000fb,pcr=00000000000000000021,uid>', @ANYRES16, @ANYBLOB="2c636f6e746578743d73797374656d5f752c726f2c61756469742c7375626a5f726f6c651ca8ba91a3a08f88b8a003653455fed0f0b52cf1452b003f8e172d0d2cd5ed8d9ba16fba394f2bf8decb8c5a4913698ed516a64bde"], 0x5, 0x1c7, &(0x7f0000000500)="$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") 6.203793097s ago: executing program 5 (id=1234): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)) 6.158357707s ago: executing program 1 (id=1235): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 5.924832447s ago: executing program 1 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r6, 0x111, 0x5, 0x0, 0x20001f00) socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x100}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 5.790160656s ago: executing program 4 (id=1237): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 3.825709801s ago: executing program 2 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x80, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x80}}, 0x20040054) 3.73766045s ago: executing program 3 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r6, 0x111, 0x5, 0x0, 0x20001f00) socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x100}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 3.69320203s ago: executing program 5 (id=1240): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x12626000) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.62981236s ago: executing program 4 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r7, 0x111, 0x5, 0x0, 0x20001f00) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 3.62919804s ago: executing program 2 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086035b6885429d44547255a0dd600180f200140600208100000000000000000000000000bb3ef40884fe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) unshare(0x64000600) 383.138281ms ago: executing program 2 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000011000300686173683a69702c6d61726b00"], 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000fffc0500010007"], 0x1c}}, 0x8000) 245.343051ms ago: executing program 1 (id=1244): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) 236.345031ms ago: executing program 3 (id=1245): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00fb00020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xffffffffffffffff}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x78b, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x1}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 0s ago: executing program 1 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) kernel console output (not intermixed with test programs): 546580][ T4652] syz.3.108: attempt to access beyond end of device [ 96.546580][ T4652] loop3: rw=2049, sector=145, nr_sectors = 744 limit=128 [ 96.712895][ T4652] syz.3.108: attempt to access beyond end of device [ 96.712895][ T4652] loop3: rw=524288, sector=369, nr_sectors = 320 limit=128 [ 96.753836][ T4652] syz.3.108: attempt to access beyond end of device [ 96.753836][ T4652] loop3: rw=524288, sector=697, nr_sectors = 192 limit=128 [ 96.799718][ T4649] syz.3.108: attempt to access beyond end of device [ 96.799718][ T4649] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 97.697645][ T4656] device wireguard0 entered promiscuous mode [ 97.728123][ T2964] kworker/u4:5: attempt to access beyond end of device [ 97.728123][ T2964] loop3: rw=1, sector=689, nr_sectors = 8 limit=128 [ 97.922847][ T4665] sd 0:0:1:0: device reset [ 98.266580][ T4674] loop0: detected capacity change from 0 to 512 [ 98.304842][ T4674] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.313325][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 98.371037][ T4674] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.117: inode #1: comm syz.0.117: iget: illegal inode # [ 98.506245][ T4679] loop4: detected capacity change from 0 to 256 [ 98.619022][ T4674] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.117: error while reading EA inode 1 err=-117 [ 99.060509][ T4674] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.117: inode #1: comm syz.0.117: iget: illegal inode # [ 99.129383][ T4674] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.117: error while reading EA inode 1 err=-117 [ 99.171521][ T4674] EXT4-fs (loop0): 1 orphan inode deleted [ 99.177323][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.228333][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 99.496743][ T26] audit: type=1326 audit(1738734450.938:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 99.575286][ T26] audit: type=1326 audit(1738734450.998:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 99.631490][ T4688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'. [ 100.347904][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 100.378305][ T26] audit: type=1326 audit(1738734450.998:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 100.425072][ T4700] loop1: detected capacity change from 0 to 128 [ 100.463934][ T26] audit: type=1326 audit(1738734450.998:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 100.693306][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 100.787483][ T4700] syz.1.124: attempt to access beyond end of device [ 100.787483][ T4700] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 101.328979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.337371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.345700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 101.354037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 101.362368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 101.370687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 101.378993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 101.387314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 101.395755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 101.404180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 101.712562][ T4709] device wireguard0 entered promiscuous mode [ 101.890741][ T4660] kworker/u4:16: attempt to access beyond end of device [ 101.890741][ T4660] loop1: rw=1, sector=689, nr_sectors = 8 limit=128 [ 102.105645][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 102.856924][ T4728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'. [ 103.460783][ T4740] loop4: detected capacity change from 0 to 256 [ 104.314636][ T4742] loop2: detected capacity change from 0 to 512 [ 104.355341][ T4742] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.380294][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 104.380309][ T26] audit: type=1326 audit(1738734455.828:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.3.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x0 [ 104.469073][ T4742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.140: inode #1: comm syz.2.140: iget: illegal inode # [ 104.555212][ T4742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.140: error while reading EA inode 1 err=-117 [ 104.634040][ T4742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.140: inode #1: comm syz.2.140: iget: illegal inode # [ 104.687845][ T4742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.140: error while reading EA inode 1 err=-117 [ 104.711059][ T4742] EXT4-fs (loop2): 1 orphan inode deleted [ 104.727243][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.829583][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 104.986484][ T26] audit: type=1326 audit(1738734456.428:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.010682][ T26] audit: type=1326 audit(1738734456.428:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.036563][ T26] audit: type=1326 audit(1738734456.458:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.059861][ T26] audit: type=1326 audit(1738734456.458:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.116373][ T26] audit: type=1326 audit(1738734456.458:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.232830][ T26] audit: type=1326 audit(1738734456.458:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.321578][ T26] audit: type=1326 audit(1738734456.458:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.375098][ T4768] sd 0:0:1:0: device reset [ 105.384032][ T26] audit: type=1326 audit(1738734456.458:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.437417][ T4771] loop4: detected capacity change from 0 to 2048 [ 105.468261][ T26] audit: type=1326 audit(1738734456.478:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4755 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 105.570370][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.780942][ T4779] loop3: detected capacity change from 0 to 256 [ 105.894124][ T4778] netlink: 240 bytes leftover after parsing attributes in process `syz.4.150'. [ 106.379009][ T4781] sd 0:0:1:0: device reset [ 106.560934][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 106.701816][ T4789] loop1: detected capacity change from 0 to 512 [ 106.712496][ T4793] syz.4.158[4793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.712610][ T4793] syz.4.158[4793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.739146][ T4789] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.783638][ T4793] loop4: detected capacity change from 0 to 512 [ 106.820685][ T4793] EXT4-fs: Ignoring removed i_version option [ 106.842492][ T4793] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.847980][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.155: inode #1: comm syz.1.155: iget: illegal inode # [ 106.856055][ T4793] ext4: Unknown parameter 'seclabel' [ 106.901231][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.155: error while reading EA inode 1 err=-117 [ 106.918423][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.155: inode #1: comm syz.1.155: iget: illegal inode # [ 106.969649][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.155: error while reading EA inode 1 err=-117 [ 106.995829][ T4800] loop4: detected capacity change from 0 to 128 [ 107.013681][ T4789] EXT4-fs (loop1): 1 orphan inode deleted [ 107.031838][ T4789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.187933][ T4800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 107.823255][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 107.950733][ T4433] kworker/u4:8: attempt to access beyond end of device [ 107.950733][ T4433] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 108.956039][ T4812] device wireguard0 entered promiscuous mode [ 109.064021][ T4825] loop0: detected capacity change from 0 to 256 [ 109.793685][ T4823] loop4: detected capacity change from 0 to 2048 [ 110.049391][ T4823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.664447][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 110.925637][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'. [ 111.053275][ T4852] loop4: detected capacity change from 0 to 512 [ 111.066816][ T4852] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.089755][ T4852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.173: inode #1: comm syz.4.173: iget: illegal inode # [ 111.109278][ T4852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.173: error while reading EA inode 1 err=-117 [ 111.169537][ T4852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.173: inode #1: comm syz.4.173: iget: illegal inode # [ 111.200540][ T4852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.173: error while reading EA inode 1 err=-117 [ 111.215069][ T4852] EXT4-fs (loop4): 1 orphan inode deleted [ 111.226605][ T4852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.014411][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 112.092601][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 112.092617][ T26] audit: type=1326 audit(1738734463.538:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x0 [ 112.472942][ T4866] loop3: detected capacity change from 0 to 256 [ 113.901915][ T26] audit: type=1326 audit(1738734465.348:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.1.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x0 [ 116.174310][ T4914] loop3: detected capacity change from 0 to 512 [ 117.070003][ T4914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.090152][ T4911] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 117.312352][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 117.470263][ T4904] loop4: detected capacity change from 0 to 256 [ 118.448083][ T4929] tmpfs: Bad value for 'mpol' [ 118.566851][ T26] audit: type=1326 audit(1738734470.008:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4931 comm="syz.1.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x0 [ 118.807853][ T4937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.204'. [ 120.024555][ T4945] sd 0:0:1:0: device reset [ 120.618259][ T4962] loop1: detected capacity change from 0 to 512 [ 121.450606][ T4966] Zero length message leads to an empty skb [ 121.600502][ T4962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.655145][ T4958] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 121.919086][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 122.313827][ T26] audit: type=1326 audit(1738734473.758:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.412277][ T4988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'. [ 122.433703][ T26] audit: type=1326 audit(1738734473.758:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.497661][ T26] audit: type=1326 audit(1738734473.788:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.523398][ T26] audit: type=1326 audit(1738734473.788:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.570240][ T26] audit: type=1326 audit(1738734473.788:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.629951][ T26] audit: type=1326 audit(1738734473.798:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.749892][ T26] audit: type=1326 audit(1738734473.798:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 122.969930][ T26] audit: type=1326 audit(1738734473.798:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4984 comm="syz.3.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 123.285446][ T5009] loop0: detected capacity change from 0 to 512 [ 124.128177][ C1] sched: RT throttling activated [ 124.220454][ T5009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.478684][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 125.694609][ T26] audit: type=1326 audit(1738734477.138:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 125.766054][ T26] audit: type=1326 audit(1738734477.208:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 125.815890][ T5034] loop3: detected capacity change from 0 to 512 [ 125.845090][ T26] audit: type=1326 audit(1738734477.238:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 125.928686][ T26] audit: type=1326 audit(1738734477.238:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 125.973251][ T5041] loop4: detected capacity change from 0 to 512 [ 126.009829][ T5044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 126.020081][ T5034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.060971][ T26] audit: type=1326 audit(1738734477.238:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 126.095528][ T5034] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.143158][ T26] audit: type=1326 audit(1738734477.248:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 126.216973][ T26] audit: type=1326 audit(1738734477.248:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 126.255072][ T26] audit: type=1326 audit(1738734477.248:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 126.293091][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 126.317783][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.327658][ T5041] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.344324][ T5041] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz.4.240: path /48/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=106, inode=0, rec_len=0, size=2048 fake=0 [ 126.373878][ T5050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 127.130701][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 127.515857][ T5069] loop2: detected capacity change from 0 to 128 [ 127.583315][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.601486][ T5071] capability: warning: `syz.4.250' uses deprecated v2 capabilities in a way that may be insecure [ 127.642536][ T5069] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.439200][ T26] audit: type=1326 audit(1738734479.888:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 128.539668][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 128.593375][ T26] audit: type=1326 audit(1738734479.948:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 128.773847][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'. [ 128.796875][ T5083] loop2: detected capacity change from 0 to 512 [ 128.834235][ T5087] loop3: detected capacity change from 0 to 2048 [ 128.906086][ T5087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.910884][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'. [ 128.945993][ T5083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.306143][ T5083] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.639907][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 130.777586][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 130.777602][ T26] audit: type=1800 audit(1738734482.218:135): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.255" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 130.917913][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 130.944467][ T5116] device syzkaller0 entered promiscuous mode [ 132.042122][ T5131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.267'. [ 132.279948][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.270'. [ 132.709004][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.715755][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319888][ T5143] loop3: detected capacity change from 0 to 512 [ 134.016790][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.251985][ T5143] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.938601][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 136.853620][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.281'. [ 137.902767][ T5193] loop4: detected capacity change from 0 to 512 [ 138.688457][ T5193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.707826][ T5193] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.892589][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 139.374870][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.294'. [ 139.427863][ T5214] device syzkaller0 entered promiscuous mode [ 141.565331][ T5248] loop2: detected capacity change from 0 to 512 [ 141.627410][ T5248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.638085][ T5248] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.701813][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 143.943871][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 145.193455][ T5276] device wireguard0 entered promiscuous mode [ 145.497548][ T5283] loop0: detected capacity change from 0 to 512 [ 146.516528][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.694015][ T5283] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.351922][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 147.394298][ T26] audit: type=1326 audit(1738734498.838:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 147.451896][ T5303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 147.498250][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 147.538490][ T26] audit: type=1326 audit(1738734498.838:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 147.655110][ T26] audit: type=1326 audit(1738734498.838:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 147.727437][ T26] audit: type=1326 audit(1738734498.838:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 147.828318][ T26] audit: type=1326 audit(1738734498.838:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 147.932198][ T26] audit: type=1326 audit(1738734498.838:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 148.033824][ T26] audit: type=1326 audit(1738734498.898:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 148.116510][ T26] audit: type=1326 audit(1738734498.898:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 148.155903][ T26] audit: type=1326 audit(1738734498.898:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 148.252038][ T26] audit: type=1326 audit(1738734498.898:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 150.741614][ T5330] loop4: detected capacity change from 0 to 512 [ 150.792672][ T5324] device wireguard0 entered promiscuous mode [ 150.793243][ T5332] mmap: syz.3.327 (5332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.092555][ T5330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.106744][ T5330] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.937678][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 152.418034][ T5359] loop0: detected capacity change from 0 to 512 [ 152.446149][ T5359] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.622327][ T5359] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.335: inode #1: comm syz.0.335: iget: illegal inode # [ 152.666663][ T5359] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.335: error while reading EA inode 1 err=-117 [ 152.732442][ T5359] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.335: inode #1: comm syz.0.335: iget: illegal inode # [ 152.833213][ T5369] loop3: detected capacity change from 0 to 512 [ 152.910166][ T5359] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.335: error while reading EA inode 1 err=-117 [ 152.919376][ T5373] loop4: detected capacity change from 0 to 512 [ 152.939008][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.948486][ T5369] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.808503][ T5359] EXT4-fs (loop0): 1 orphan inode deleted [ 153.815660][ T5359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.853581][ T5369] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 153.864435][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.912131][ T5373] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.919981][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 153.964561][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 153.964577][ T26] audit: type=1326 audit(1738734505.408:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.191111][ T26] audit: type=1326 audit(1738734505.448:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.233940][ T26] audit: type=1326 audit(1738734505.448:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.236565][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 154.256844][ T26] audit: type=1326 audit(1738734505.448:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.287998][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 154.289680][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 154.296955][ T26] audit: type=1326 audit(1738734505.448:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.325206][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 154.372527][ T26] audit: type=1326 audit(1738734505.448:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.566443][ T26] audit: type=1326 audit(1738734505.588:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.722128][ T26] audit: type=1326 audit(1738734505.588:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.845094][ T26] audit: type=1326 audit(1738734505.588:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 154.871173][ T26] audit: type=1326 audit(1738734505.588:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 155.773999][ T5403] device wireguard0 entered promiscuous mode [ 157.300028][ T5413] loop3: detected capacity change from 0 to 512 [ 157.373983][ T5413] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.476344][ T5416] sd 0:0:1:0: device reset [ 157.526657][ T5413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.354: inode #1: comm syz.3.354: iget: illegal inode # [ 157.673464][ T5413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.354: error while reading EA inode 1 err=-117 [ 157.745500][ T5426] loop2: detected capacity change from 0 to 512 [ 157.771853][ T5413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.354: inode #1: comm syz.3.354: iget: illegal inode # [ 157.827928][ T5431] syz.1.360 uses obsolete (PF_INET,SOCK_PACKET) [ 157.835076][ T5413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.354: error while reading EA inode 1 err=-117 [ 158.004665][ T5413] EXT4-fs (loop3): 1 orphan inode deleted [ 158.039077][ T5436] netlink: 56 bytes leftover after parsing attributes in process `syz.1.360'. [ 158.195062][ T5413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.254009][ T5426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.580665][ T5426] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.729464][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 158.736904][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 159.150793][ T5447] loop3: detected capacity change from 0 to 1024 [ 159.180034][ T5449] device ip6gre1 entered promiscuous mode [ 161.397653][ T5449] loop1: detected capacity change from 0 to 164 [ 161.420070][ T5447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.487727][ T5462] loop2: detected capacity change from 0 to 164 [ 161.518069][ T5466] sd 0:0:1:0: device reset [ 161.920551][ T33] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 161.987263][ T5473] loop1: detected capacity change from 0 to 512 [ 162.044357][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 162.101720][ T5473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.152431][ T5473] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.174198][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.174198][ T33] [ 162.185019][ T33] EXT4-fs (loop3): Total free blocks count 0 [ 162.191226][ T33] EXT4-fs (loop3): Free/Dirty block details [ 162.197429][ T33] EXT4-fs (loop3): free_blocks=68451041280 [ 162.203376][ T33] EXT4-fs (loop3): dirty_blocks=2912 [ 162.208919][ T33] EXT4-fs (loop3): Block reservation details [ 162.215464][ T33] EXT4-fs (loop3): i_reserved_data_blocks=182 [ 162.254929][ T5480] loop2: detected capacity change from 0 to 2048 [ 162.264263][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 856 with error 28 [ 162.359161][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 162.390834][ T5480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 162.436958][ T5484] loop3: detected capacity change from 0 to 512 [ 162.444377][ T5484] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.492142][ T5484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.374: inode #1: comm syz.3.374: iget: illegal inode # [ 162.522372][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 162.522390][ T26] audit: type=1804 audit(1738734513.968:174): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.376" name="/newroot/76/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 162.620042][ T26] audit: type=1804 audit(1738734513.998:175): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.376" name="/newroot/76/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 162.720028][ T5489] EXT4-fs (loop2): shut down requested (0) [ 162.732198][ T5484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.374: error while reading EA inode 1 err=-117 [ 162.764482][ T5484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.374: inode #1: comm syz.3.374: iget: illegal inode # [ 162.788815][ T5484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.374: error while reading EA inode 1 err=-117 [ 162.842881][ T5484] EXT4-fs (loop3): 1 orphan inode deleted [ 162.871376][ T5484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.977132][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 163.071777][ T5499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 163.227008][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 164.275090][ T5510] sd 0:0:1:0: device reset [ 164.588125][ T5521] loop2: detected capacity change from 0 to 512 [ 164.773327][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.798564][ T5521] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.998357][ T4250] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.065576][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 165.104603][ T5535] loop1: detected capacity change from 0 to 512 [ 165.249992][ T4250] usb 5-1: device descriptor read/64, error -71 [ 165.292633][ T5535] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.798919][ T5535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.392: inode #1: comm syz.1.392: iget: illegal inode # [ 165.883546][ T5535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.392: error while reading EA inode 1 err=-117 [ 165.935193][ T5535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.392: inode #1: comm syz.1.392: iget: illegal inode # [ 166.041551][ T5535] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.392: error while reading EA inode 1 err=-117 [ 166.087667][ T5535] EXT4-fs (loop1): 1 orphan inode deleted [ 166.095665][ T5535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.118442][ T4250] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.267612][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 166.294008][ T4250] usb 5-1: device descriptor read/64, error -71 [ 166.419125][ T4250] usb usb5-port1: attempt power cycle [ 166.421243][ T26] audit: type=1326 audit(1738734517.868:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.108270][ T26] audit: type=1326 audit(1738734517.868:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.154951][ T5557] sd 0:0:1:0: device reset [ 167.253957][ T26] audit: type=1326 audit(1738734517.868:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.404084][ T26] audit: type=1326 audit(1738734517.868:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.525751][ T26] audit: type=1326 audit(1738734517.868:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.526701][ T5565] loop1: detected capacity change from 0 to 512 [ 167.702439][ T26] audit: type=1326 audit(1738734517.868:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.800811][ T26] audit: type=1326 audit(1738734517.868:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 167.823703][ T26] audit: type=1326 audit(1738734517.868:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe226b8cde9 code=0x7ffc0000 [ 168.037722][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 168.056262][ T5565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.070982][ T5582] loop0: detected capacity change from 0 to 512 [ 168.074713][ T5565] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.078956][ T5582] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.115430][ T5582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.408: inode #1: comm syz.0.408: iget: illegal inode # [ 168.292241][ T5582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.408: error while reading EA inode 1 err=-117 [ 168.740868][ T5582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.408: inode #1: comm syz.0.408: iget: illegal inode # [ 168.834557][ T5582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.408: error while reading EA inode 1 err=-117 [ 168.903737][ T5582] EXT4-fs (loop0): 1 orphan inode deleted [ 168.959639][ T26] audit: type=1326 audit(1738734520.408:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 168.998246][ T26] audit: type=1326 audit(1738734520.428:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 169.028063][ T5582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.061162][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 169.101862][ T26] audit: type=1326 audit(1738734520.428:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 169.125075][ T26] audit: type=1326 audit(1738734520.428:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 171.322536][ T26] audit: type=1326 audit(1738734520.428:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 171.363485][ T5598] sd 0:0:1:0: device reset [ 171.396347][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 171.464972][ T5603] netlink: 'syz.3.416': attribute type 11 has an invalid length. [ 172.864180][ T5617] loop0: detected capacity change from 0 to 512 [ 172.892141][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 174.514642][ T5628] loop4: detected capacity change from 0 to 256 [ 174.876379][ T5617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.946599][ T5617] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.157706][ T5625] device wireguard0 entered promiscuous mode [ 175.244411][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 175.320021][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 178.458037][ T5654] serio: Serial port ptm0 [ 179.305115][ T5672] loop4: detected capacity change from 0 to 512 [ 179.433307][ T5676] loop0: detected capacity change from 0 to 128 [ 179.449673][ T5672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.489426][ T5672] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.728510][ T5683] loop2: detected capacity change from 0 to 256 [ 181.284544][ T5676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.297608][ T5676] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.379704][ T5684] device wireguard0 entered promiscuous mode [ 181.398758][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 181.595506][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 182.110385][ T5704] device wireguard0 entered promiscuous mode [ 183.385478][ T5721] loop0: detected capacity change from 0 to 512 [ 183.562477][ T5721] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.756192][ T5728] loop4: detected capacity change from 0 to 512 [ 184.010743][ T5721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.449: inode #1: comm syz.0.449: iget: illegal inode # [ 184.025626][ T5721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.449: error while reading EA inode 1 err=-117 [ 184.036338][ T5728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.039351][ T5721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.449: inode #1: comm syz.0.449: iget: illegal inode # [ 184.057238][ T5728] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.061880][ T5721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.449: error while reading EA inode 1 err=-117 [ 184.112156][ T5721] EXT4-fs (loop0): 1 orphan inode deleted [ 184.118763][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.190597][ T5740] loop1: detected capacity change from 0 to 256 [ 184.965437][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 185.019487][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 187.003314][ T5771] loop3: detected capacity change from 0 to 256 [ 187.350547][ T5777] loop4: detected capacity change from 0 to 512 [ 187.531139][ T5777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.564826][ T5782] loop2: detected capacity change from 0 to 512 [ 187.566197][ T5777] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.582603][ T5782] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.703965][ T5782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.469: inode #1: comm syz.2.469: iget: illegal inode # [ 187.815814][ T5782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.469: error while reading EA inode 1 err=-117 [ 187.889563][ T5782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.469: inode #1: comm syz.2.469: iget: illegal inode # [ 187.952270][ T5782] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.469: error while reading EA inode 1 err=-117 [ 187.975029][ T5782] EXT4-fs (loop2): 1 orphan inode deleted [ 187.981012][ T5782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.985416][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 188.864281][ T5798] device wireguard0 entered promiscuous mode [ 188.867712][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 188.896101][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 189.278581][ T5811] loop0: detected capacity change from 0 to 256 [ 189.398312][ T26] audit: type=1326 audit(1738734540.838:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 189.913438][ T26] audit: type=1326 audit(1738734540.838:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 189.967732][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 189.993822][ T26] audit: type=1326 audit(1738734540.928:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.015627][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 190.022076][ T26] audit: type=1326 audit(1738734540.968:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.056682][ T26] audit: type=1326 audit(1738734540.978:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.118396][ T26] audit: type=1326 audit(1738734540.998:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.165786][ T26] audit: type=1326 audit(1738734541.388:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.237119][ T26] audit: type=1326 audit(1738734541.388:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.265837][ T26] audit: type=1326 audit(1738734541.388:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.296386][ T26] audit: type=1326 audit(1738734541.388:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 190.868472][ T5835] device wireguard0 entered promiscuous mode [ 191.516827][ T5834] loop4: detected capacity change from 0 to 512 [ 191.614094][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.638856][ T5834] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.766636][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 192.980681][ T5860] nfs4: Unknown parameter 'context' [ 193.134180][ T5862] loop1: detected capacity change from 0 to 256 [ 193.783161][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 193.917094][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 193.994980][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 194.125513][ T5883] loop3: detected capacity change from 0 to 512 [ 194.230696][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.242177][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.496167][ T5883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.577995][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 194.578033][ T26] audit: type=1326 audit(1738734545.998:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 194.650642][ T5883] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.057930][ T26] audit: type=1326 audit(1738734546.068:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 195.365723][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 196.210397][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 196.240060][ T5902] device wireguard0 entered promiscuous mode [ 196.289129][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 196.295304][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 196.301812][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 196.301835][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 197.443950][ T5913] loop0: detected capacity change from 0 to 256 [ 197.947449][ T5930] loop2: detected capacity change from 0 to 512 [ 198.021820][ T5932] device syzkaller0 entered promiscuous mode [ 198.521612][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.718578][ T5930] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.936467][ T5942] Invalid ELF header magic: != ELF [ 198.956321][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 198.966026][ T5942] loop3: detected capacity change from 0 to 512 [ 199.010731][ T5942] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.519: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 199.060113][ T5942] EXT4-fs error (device loop3): ext4_quota_enable:6989: comm syz.3.519: Bad quota inode: 3, type: 0 [ 199.129215][ T5942] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 199.179751][ T5942] EXT4-fs (loop3): mount failed [ 199.660191][ T5942] loop3: detected capacity change from 0 to 512 [ 199.838628][ T5942] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.984024][ T5942] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.172988][ T5942] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 200.205127][ T5942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 200.230480][ T5942] System zones: 0-2, 18-18, 34-34 [ 200.265603][ T5942] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 200.302018][ T5942] EXT4-fs (loop3): 1 truncate cleaned up [ 200.315264][ T5942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.772598][ T5959] loop2: detected capacity change from 0 to 256 [ 202.727027][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 203.012161][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 203.034874][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 203.055044][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 203.248667][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.3.530'. [ 206.439768][ T6003] device syzkaller0 entered promiscuous mode [ 207.070613][ T6021] netlink: 108 bytes leftover after parsing attributes in process `syz.4.544'. [ 208.781639][ T6053] loop1: detected capacity change from 0 to 512 [ 208.819633][ T6053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.555: bg 0: block 35: padding at end of block bitmap is not set [ 208.852997][ T6053] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 208.862800][ T6053] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.555: invalid indirect mapped block 4294967295 (level 1) [ 208.877183][ T6053] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.555: invalid indirect mapped block 4294967295 (level 2) [ 208.905382][ T6053] EXT4-fs (loop1): 1 truncate cleaned up [ 208.919834][ T6053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.388537][ T6058] netlink: 76 bytes leftover after parsing attributes in process `syz.0.557'. [ 210.464770][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 210.484946][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 211.725232][ T6077] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 212.628357][ T26] audit: type=1326 audit(1738734564.058:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa34983da7 code=0x7ffc0000 [ 212.738762][ T26] audit: type=1326 audit(1738734564.058:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa34928fb9 code=0x7ffc0000 [ 212.787059][ T26] audit: type=1326 audit(1738734564.058:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa34983da7 code=0x7ffc0000 [ 212.908673][ T26] audit: type=1326 audit(1738734564.058:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa34928fb9 code=0x7ffc0000 [ 213.027640][ T26] audit: type=1326 audit(1738734564.098:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa34983da7 code=0x7ffc0000 [ 213.034184][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 213.051022][ T26] audit: type=1326 audit(1738734564.098:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa34928fb9 code=0x7ffc0000 [ 213.132478][ T26] audit: type=1326 audit(1738734564.098:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa34983da7 code=0x7ffc0000 [ 213.374171][ T6104] device wireguard0 entered promiscuous mode [ 213.830804][ T26] audit: type=1326 audit(1738734564.098:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa34928fb9 code=0x7ffc0000 [ 213.968378][ T26] audit: type=1326 audit(1738734564.098:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa34983da7 code=0x7ffc0000 [ 214.050476][ T26] audit: type=1326 audit(1738734564.098:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa34928fb9 code=0x7ffc0000 [ 215.167321][ T6113] device wireguard0 entered promiscuous mode [ 215.986227][ T6123] device syzkaller0 entered promiscuous mode [ 218.713194][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 223.404248][ T6174] netlink: 76 bytes leftover after parsing attributes in process `syz.3.593'. [ 229.381211][ T6207] device wireguard0 entered promiscuous mode [ 231.257497][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.264640][ T4264] Bluetooth: hci5: command 0x1003 tx timeout [ 232.603251][ T6254] loop1: detected capacity change from 0 to 512 [ 233.633497][ T6254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.653950][ T6253] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 233.673289][ T6265] netlink: 76 bytes leftover after parsing attributes in process `syz.0.619'. [ 233.750439][ T6265] netlink: 76 bytes leftover after parsing attributes in process `syz.0.619'. [ 234.007055][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 234.190606][ T6265] netlink: 76 bytes leftover after parsing attributes in process `syz.0.619'. [ 234.531393][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 237.645173][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 237.645218][ T4262] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.118484][ T6308] device wireguard0 entered promiscuous mode [ 239.468358][ T6329] loop3: detected capacity change from 0 to 512 [ 239.555451][ T6329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.586319][ T6313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 241.789056][ T6341] loop2: detected capacity change from 0 to 256 [ 244.400018][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 248.412748][ T6394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.654'. [ 249.286755][ T6404] loop3: detected capacity change from 0 to 512 [ 249.423652][ T6404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.549348][ T6402] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 251.379032][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 252.355030][ T6428] 9pnet_fd: Insufficient options for proto=fd [ 252.553392][ T6437] loop3: detected capacity change from 0 to 512 [ 252.711028][ T6437] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.864314][ T6445] device wireguard0 entered promiscuous mode [ 252.879568][ T6437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.666: inode #1: comm syz.3.666: iget: illegal inode # [ 252.900154][ T6437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.666: error while reading EA inode 1 err=-117 [ 253.109778][ T6437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.666: inode #1: comm syz.3.666: iget: illegal inode # [ 253.147037][ T6437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.666: error while reading EA inode 1 err=-117 [ 253.189681][ T6437] EXT4-fs (loop3): 1 orphan inode deleted [ 253.195995][ T6437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.873502][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 254.985275][ T4264] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 254.992896][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 256.628646][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.637604][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.366302][ T6478] loop4: detected capacity change from 0 to 512 [ 259.006874][ T6478] EXT4-fs: error -4 creating inode table initialization thread [ 259.053605][ T6478] EXT4-fs (loop4): mount failed [ 259.840420][ T6507] device wireguard0 entered promiscuous mode [ 260.626690][ T6513] loop2: detected capacity change from 0 to 512 [ 260.893747][ T6513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.912164][ T6513] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.850335][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 262.957987][ T6534] device syzkaller0 entered promiscuous mode [ 266.951642][ T6568] loop0: detected capacity change from 0 to 512 [ 266.981875][ T6568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.991081][ T6568] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.044459][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 267.191530][ T6575] netlink: 56 bytes leftover after parsing attributes in process `syz.0.702'. [ 272.046018][ T6601] loop3: detected capacity change from 0 to 512 [ 272.129376][ T6600] device bond1 entered promiscuous mode [ 272.135232][ T6600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.162215][ T6601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 272.246860][ T6601] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.295816][ T6607] loop0: detected capacity change from 0 to 512 [ 272.355079][ T6607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 272.382572][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 272.457970][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 272.457985][ T26] audit: type=1326 audit(1738734623.898:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.492427][ T26] audit: type=1326 audit(1738734623.898:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.528894][ T26] audit: type=1326 audit(1738734623.908:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.579955][ T26] audit: type=1326 audit(1738734623.908:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.631699][ T26] audit: type=1326 audit(1738734623.908:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.690747][ T26] audit: type=1326 audit(1738734623.908:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.725312][ T6600] bond1 (unregistering): Released all slaves [ 272.731737][ T26] audit: type=1326 audit(1738734623.968:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.766095][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 272.790341][ T26] audit: type=1326 audit(1738734623.968:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.841635][ T26] audit: type=1326 audit(1738734623.968:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.881750][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 272.886911][ T26] audit: type=1326 audit(1738734623.968:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f59c118cde9 code=0x7ffc0000 [ 272.914712][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 274.415161][ T6624] device syzkaller0 entered promiscuous mode [ 276.344370][ T6653] loop4: detected capacity change from 0 to 512 [ 276.422118][ T6653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.440633][ T6653] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.575936][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 279.280087][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 279.846769][ T6676] loop2: detected capacity change from 0 to 512 [ 279.858885][ T6677] device wireguard0 entered promiscuous mode [ 279.891944][ T6676] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.950211][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.732: inode #1: comm syz.2.732: iget: illegal inode # [ 280.038014][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.732: error while reading EA inode 1 err=-117 [ 280.091598][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.732: inode #1: comm syz.2.732: iget: illegal inode # [ 280.144716][ T6676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.732: error while reading EA inode 1 err=-117 [ 280.192499][ T6676] EXT4-fs (loop2): 1 orphan inode deleted [ 280.207224][ T6676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.407443][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 281.818181][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 281.818202][ T26] audit: type=1326 audit(1738734633.228:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 281.899521][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 281.918312][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 281.948496][ T26] audit: type=1326 audit(1738734633.228:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 281.994393][ T6698] loop1: detected capacity change from 0 to 512 [ 282.038724][ T26] audit: type=1326 audit(1738734633.228:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.122558][ T26] audit: type=1326 audit(1738734633.228:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.138069][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.158386][ T6698] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.272548][ T26] audit: type=1326 audit(1738734633.338:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.346434][ T26] audit: type=1326 audit(1738734633.338:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.390269][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 282.420635][ T26] audit: type=1326 audit(1738734633.338:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.516365][ T26] audit: type=1326 audit(1738734633.338:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.589370][ T26] audit: type=1326 audit(1738734633.338:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.658222][ T26] audit: type=1326 audit(1738734633.338:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8784b8cde9 code=0x7ffc0000 [ 282.816342][ T6708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.742'. [ 282.862413][ T6706] device syzkaller0 entered promiscuous mode [ 283.265175][ T6717] loop3: detected capacity change from 0 to 512 [ 283.284789][ T6717] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.310576][ T6717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.745: inode #1: comm syz.3.745: iget: illegal inode # [ 283.323990][ T6717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.745: error while reading EA inode 1 err=-117 [ 283.344578][ T6717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.745: inode #1: comm syz.3.745: iget: illegal inode # [ 283.373570][ T6717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.745: error while reading EA inode 1 err=-117 [ 283.404463][ T6717] EXT4-fs (loop3): 1 orphan inode deleted [ 283.428234][ T6717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.487088][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 286.513565][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 286.923277][ T6740] loop4: detected capacity change from 0 to 512 [ 286.937147][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 286.937165][ T26] audit: type=1326 audit(1738734638.378:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.163383][ T26] audit: type=1326 audit(1738734638.378:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.220891][ T26] audit: type=1326 audit(1738734638.378:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.268842][ T26] audit: type=1326 audit(1738734638.378:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.445578][ T26] audit: type=1326 audit(1738734638.378:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.627709][ T26] audit: type=1326 audit(1738734638.388:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.684477][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'. [ 287.695529][ T26] audit: type=1326 audit(1738734638.448:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.761215][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.776354][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 287.786127][ T6740] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.842984][ T26] audit: type=1326 audit(1738734638.448:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.932236][ T26] audit: type=1326 audit(1738734638.458:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 287.964788][ T26] audit: type=1326 audit(1738734638.758:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 288.055474][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 288.124175][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.753'. [ 288.495000][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.758'. [ 288.607215][ T6766] device wireguard0 entered promiscuous mode [ 288.821212][ T6769] device syzkaller0 entered promiscuous mode [ 291.332497][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.351948][ T4266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.374246][ T4266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.404047][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.412523][ T4266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.424911][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.494512][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 293.563136][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 293.844657][ T6793] loop1: detected capacity change from 0 to 512 [ 293.927914][ T6793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.978449][ T6793] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.024970][ T6800] netlink: 56 bytes leftover after parsing attributes in process `syz.2.767'. [ 294.121519][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 294.151377][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 294.431256][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.481285][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.505237][ T6781] device bridge_slave_0 entered promiscuous mode [ 294.656885][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.757135][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.766456][ T6781] device bridge_slave_1 entered promiscuous mode [ 294.876202][ T6829] loop4: detected capacity change from 0 to 256 [ 294.898364][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'. [ 294.959454][ T6823] loop3: detected capacity change from 0 to 512 [ 295.085101][ T6823] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.446244][ T6823] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.773: inode #1: comm syz.3.773: iget: illegal inode # [ 295.518694][ T6823] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.773: error while reading EA inode 1 err=-117 [ 295.578385][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 295.595168][ T6823] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.773: inode #1: comm syz.3.773: iget: illegal inode # [ 295.668345][ T6823] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.773: error while reading EA inode 1 err=-117 [ 295.689949][ T6823] EXT4-fs (loop3): 1 orphan inode deleted [ 295.756065][ T6823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 295.778664][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.841424][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.971886][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 295.989692][ T6781] team0: Port device team_slave_0 added [ 296.024165][ T6781] team0: Port device team_slave_1 added [ 296.221867][ T6835] device syzkaller0 entered promiscuous mode [ 296.256097][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.273974][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.350753][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.391928][ T6850] loop3: detected capacity change from 0 to 512 [ 296.438308][ T6850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.447562][ T6850] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.493408][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 297.287380][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 297.287398][ T26] audit: type=1326 audit(1738734648.728:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.348245][ T26] audit: type=1326 audit(1738734648.728:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.390275][ T26] audit: type=1326 audit(1738734648.728:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.412749][ T26] audit: type=1326 audit(1738734648.728:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.444669][ T26] audit: type=1326 audit(1738734648.728:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.467164][ T26] audit: type=1326 audit(1738734648.728:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.499933][ T26] audit: type=1326 audit(1738734648.728:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.531353][ T26] audit: type=1326 audit(1738734648.728:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.577133][ T26] audit: type=1326 audit(1738734648.728:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.638407][ T26] audit: type=1326 audit(1738734648.728:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 297.669859][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 299.738458][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 299.894982][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 299.937102][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.954862][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.035681][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.107325][ T6781] device hsr_slave_0 entered promiscuous mode [ 300.132566][ T6781] device hsr_slave_1 entered promiscuous mode [ 300.148762][ T6781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.157572][ T6781] Cannot create hsr debugfs directory [ 300.239893][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'. [ 300.273819][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 300.299630][ T6870] loop4: detected capacity change from 0 to 512 [ 300.306991][ T6870] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.427404][ T6874] loop1: detected capacity change from 0 to 256 [ 300.718643][ T6873] 9pnet_fd: Insufficient options for proto=fd [ 300.968675][ T6870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.786: inode #1: comm syz.4.786: iget: illegal inode # [ 301.043127][ T6870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.786: error while reading EA inode 1 err=-117 [ 301.091640][ T6870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.786: inode #1: comm syz.4.786: iget: illegal inode # [ 301.170121][ T6870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.786: error while reading EA inode 1 err=-117 [ 301.215364][ T6870] EXT4-fs (loop4): 1 orphan inode deleted [ 301.228446][ T6870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.447929][ T6882] loop3: detected capacity change from 0 to 512 [ 301.506545][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 302.430496][ T6882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 302.463998][ T6882] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.681589][ T6894] loop4: detected capacity change from 0 to 512 [ 302.903731][ T6894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 303.271630][ T6781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.381430][ T6781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.390326][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 303.397265][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 303.456159][ T6781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.521146][ T6781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.614279][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 303.738014][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.796'. [ 303.778047][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 303.906973][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.975714][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.058815][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.136228][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.178989][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.187967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.214817][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.222036][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.343367][ T6922] loop3: detected capacity change from 0 to 256 [ 304.684693][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.917071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.148269][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.155449][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.188451][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.232663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.242375][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.262983][ T6929] device wireguard0 entered promiscuous mode [ 305.591089][ T6934] device wireguard0 entered promiscuous mode [ 306.008368][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.069766][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.109379][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.137383][ T6781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.172383][ T6781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.552920][ T6941] loop3: detected capacity change from 0 to 512 [ 306.583045][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.592739][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.602380][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.614003][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.628790][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.638001][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.649395][ T6941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.658817][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.666572][ T6941] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.026742][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 307.123472][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 307.466823][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.479635][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.691256][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.849614][ T6978] loop1: detected capacity change from 0 to 256 [ 309.138541][ T6993] loop4: detected capacity change from 0 to 512 [ 309.209791][ T6993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.275002][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 309.285075][ T6993] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.679745][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.699526][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.741954][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.756770][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.776118][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.785947][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.810685][ T6781] device veth0_vlan entered promiscuous mode [ 309.870468][ T6781] device veth1_vlan entered promiscuous mode [ 309.951696][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.972816][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.007147][ T6781] device veth0_macvtap entered promiscuous mode [ 310.014924][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 310.025986][ T6781] device veth1_macvtap entered promiscuous mode [ 310.097954][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.134872][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.185134][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.230733][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.242177][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.254383][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.264382][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.274886][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.285402][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.296209][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.377211][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.448155][ T7019] loop3: detected capacity change from 0 to 256 [ 310.979130][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.027069][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.064002][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.074783][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.084729][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.096044][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.106876][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.117393][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.127427][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.148138][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.195612][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.235164][ T6781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.280665][ T6781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.289663][ T6781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.298456][ T6781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.310773][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.319768][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.385339][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.405690][ T7025] 9pnet_fd: Insufficient options for proto=fd [ 311.461129][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.515416][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.577745][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.760454][ T7027] device wireguard0 entered promiscuous mode [ 312.232952][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.261033][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.335797][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.581169][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.833'. [ 313.313387][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.348444][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.439827][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.574048][ T7052] loop1: detected capacity change from 0 to 512 [ 313.666286][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 313.708604][ T7052] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.877186][ T7060] 9pnet_fd: Insufficient options for proto=fd [ 314.470320][ T7074] device wireguard0 entered promiscuous mode [ 314.563220][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 317.093633][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117916][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.285571][ T7098] device wireguard0 entered promiscuous mode [ 317.667019][ T7097] 9pnet_fd: Insufficient options for proto=fd [ 318.160360][ T7109] loop4: detected capacity change from 0 to 512 [ 318.192407][ T7109] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.308914][ T7109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.855: inode #1: comm syz.4.855: iget: illegal inode # [ 318.338649][ T7109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.855: error while reading EA inode 1 err=-117 [ 318.387575][ T7109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.855: inode #1: comm syz.4.855: iget: illegal inode # [ 318.468914][ T7109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.855: error while reading EA inode 1 err=-117 [ 318.513387][ T7109] EXT4-fs (loop4): 1 orphan inode deleted [ 318.529521][ T7109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 318.669625][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 319.807340][ T7128] device wireguard0 entered promiscuous mode [ 320.175346][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 321.684323][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 321.706352][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 322.335088][ T7171] device wireguard0 entered promiscuous mode [ 322.948577][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 323.620518][ T7190] loop2: detected capacity change from 0 to 256 [ 327.316525][ T7223] 9pnet_fd: Insufficient options for proto=fd [ 327.415798][ T7229] loop4: detected capacity change from 0 to 512 [ 327.465982][ T7229] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.598502][ T7222] device wireguard0 entered promiscuous mode [ 327.615981][ T7229] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.894: inode #1: comm syz.4.894: iget: illegal inode # [ 327.708830][ T7229] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.894: error while reading EA inode 1 err=-117 [ 327.751546][ T7229] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.894: inode #1: comm syz.4.894: iget: illegal inode # [ 327.810446][ T7229] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.894: error while reading EA inode 1 err=-117 [ 327.844075][ T7229] EXT4-fs (loop4): 1 orphan inode deleted [ 327.878373][ T7229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 328.046155][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 330.462307][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 331.355134][ T7268] loop1: detected capacity change from 0 to 512 [ 331.399252][ T7268] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.406105][ T7270] 9pnet_fd: Insufficient options for proto=fd [ 331.422757][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'. [ 331.450430][ T7268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.908: inode #1: comm syz.1.908: iget: illegal inode # [ 331.468686][ T7268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.908: error while reading EA inode 1 err=-117 [ 331.536489][ T7268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.908: inode #1: comm syz.1.908: iget: illegal inode # [ 331.577869][ T7268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.908: error while reading EA inode 1 err=-117 [ 331.637514][ T7268] EXT4-fs (loop1): 1 orphan inode deleted [ 331.668624][ T7268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.811914][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 332.937551][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 333.332637][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.921'. [ 333.404090][ T7310] 9pnet_fd: Insufficient options for proto=fd [ 333.569626][ T4433] Bluetooth: Error in BCSP hdr checksum [ 333.863079][ T7321] loop4: detected capacity change from 0 to 512 [ 333.884203][ T7321] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.948574][ T7321] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.927: inode #1: comm syz.4.927: iget: illegal inode # [ 333.988732][ T7321] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.927: error while reading EA inode 1 err=-117 [ 334.011914][ T7321] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.927: inode #1: comm syz.4.927: iget: illegal inode # [ 334.035890][ T7321] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.927: error while reading EA inode 1 err=-117 [ 334.052057][ T7321] EXT4-fs (loop4): 1 orphan inode deleted [ 334.058029][ T7321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 334.246573][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 334.336339][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.935'. [ 334.407781][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'. [ 334.456005][ T7341] 9pnet_fd: Insufficient options for proto=fd [ 334.998726][ T7353] loop3: detected capacity change from 0 to 512 [ 335.016096][ T7353] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.036846][ T7353] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.941: inode #1: comm syz.3.941: iget: illegal inode # [ 335.056897][ T7353] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.941: error while reading EA inode 1 err=-117 [ 335.078958][ T7353] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.941: inode #1: comm syz.3.941: iget: illegal inode # [ 335.095224][ T7353] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.941: error while reading EA inode 1 err=-117 [ 335.115336][ T7353] EXT4-fs (loop3): 1 orphan inode deleted [ 335.121850][ T7353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.179432][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 335.179450][ T26] audit: type=1326 audit(1738734686.628:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.297770][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 335.308188][ T26] audit: type=1326 audit(1738734686.628:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.328347][ T4264] Bluetooth: hci6: command 0x1003 tx timeout [ 335.338330][ T26] audit: type=1326 audit(1738734686.658:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.339702][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 335.370790][ T26] audit: type=1326 audit(1738734686.658:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.471721][ T26] audit: type=1326 audit(1738734686.658:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.630583][ T26] audit: type=1326 audit(1738734686.658:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.683427][ T7364] loop3: detected capacity change from 0 to 512 [ 335.714154][ T26] audit: type=1326 audit(1738734686.658:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.716608][ T7364] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.747321][ T7367] 9pnet_fd: Insufficient options for proto=fd [ 335.787380][ T26] audit: type=1326 audit(1738734686.658:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.845052][ T7364] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.944: inode #1: comm syz.3.944: iget: illegal inode # [ 335.899499][ T7364] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.944: error while reading EA inode 1 err=-117 [ 335.928655][ T26] audit: type=1326 audit(1738734686.658:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 335.988072][ T7364] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.944: inode #1: comm syz.3.944: iget: illegal inode # [ 336.018733][ T7364] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.944: error while reading EA inode 1 err=-117 [ 336.064143][ T26] audit: type=1326 audit(1738734686.658:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 336.169225][ T7364] EXT4-fs (loop3): 1 orphan inode deleted [ 336.177343][ T7364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 336.732268][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 337.265349][ T7387] loop4: detected capacity change from 0 to 512 [ 337.363769][ T7387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 337.396701][ T7387] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.447469][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'. [ 337.674723][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 337.808530][ T4432] Bluetooth: Error in BCSP hdr checksum [ 337.961753][ T7403] 9pnet_fd: Insufficient options for proto=fd [ 338.078741][ T7407] loop1: detected capacity change from 0 to 512 [ 338.085805][ T7407] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.267366][ T7407] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.964: inode #1: comm syz.1.964: iget: illegal inode # [ 338.477824][ T7407] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.964: error while reading EA inode 1 err=-117 [ 338.789154][ T7407] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.964: inode #1: comm syz.1.964: iget: illegal inode # [ 338.858573][ T7407] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.964: error while reading EA inode 1 err=-117 [ 338.927060][ T7407] EXT4-fs (loop1): 1 orphan inode deleted [ 338.933245][ T7407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 338.998183][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 339.103374][ T7420] process 'syz.1.969' launched './file0' with NULL argv: empty string added [ 339.252688][ T7426] loop2: detected capacity change from 0 to 128 [ 339.441710][ T7431] syz.2.972: attempt to access beyond end of device [ 339.441710][ T7431] loop2: rw=2049, sector=145, nr_sectors = 544 limit=128 [ 339.567548][ T7431] syz.2.972: attempt to access beyond end of device [ 339.567548][ T7431] loop2: rw=524288, sector=145, nr_sectors = 120 limit=128 [ 339.582724][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 339.817381][ T7439] loop4: detected capacity change from 0 to 256 [ 340.378723][ T7431] syz.2.972: attempt to access beyond end of device [ 340.378723][ T7431] loop2: rw=524288, sector=273, nr_sectors = 416 limit=128 [ 340.691538][ T7445] loop1: detected capacity change from 0 to 512 [ 340.715196][ T7445] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.759897][ T7445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.979: inode #1: comm syz.1.979: iget: illegal inode # [ 340.805411][ T7445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.979: error while reading EA inode 1 err=-117 [ 340.826189][ T7445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.979: inode #1: comm syz.1.979: iget: illegal inode # [ 340.849355][ T7445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.979: error while reading EA inode 1 err=-117 [ 340.882819][ T7445] EXT4-fs (loop1): 1 orphan inode deleted [ 340.888817][ T7445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 341.067925][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 341.076288][ T7458] loop3: detected capacity change from 0 to 2048 [ 341.390208][ T7458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 342.233493][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 342.233510][ T26] audit: type=1800 audit(1738734693.678:338): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.985" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 342.550874][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 342.901605][ T7483] loop1: detected capacity change from 0 to 256 [ 344.048671][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 344.733415][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 346.240091][ T7537] device wireguard0 entered promiscuous mode [ 347.449537][ T4469] Bluetooth: Error in BCSP hdr checksum [ 347.534026][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 347.710706][ T6981] Bluetooth: Error in BCSP hdr checksum [ 349.158216][ T26] audit: type=1326 audit(1738734700.598:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 349.245352][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1031'. [ 349.254564][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 349.307874][ T26] audit: type=1326 audit(1738734700.598:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 349.449030][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'. [ 349.526439][ T26] audit: type=1326 audit(1738734700.598:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.134004][ T26] audit: type=1326 audit(1738734700.598:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.196766][ T26] audit: type=1326 audit(1738734700.638:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.256656][ T26] audit: type=1326 audit(1738734700.638:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.337563][ T26] audit: type=1326 audit(1738734700.688:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.394991][ T26] audit: type=1326 audit(1738734700.688:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.507477][ T26] audit: type=1326 audit(1738734700.688:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.578307][ T26] audit: type=1326 audit(1738734700.688:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.5.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 350.680325][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1039'. [ 351.509978][ T4471] Bluetooth: Error in BCSP hdr checksum [ 351.781661][ T7634] loop2: detected capacity change from 0 to 512 [ 351.915206][ T7631] ALSA: seq fatal error: cannot create timer (-16) [ 351.986703][ T7634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 352.423103][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1051'. [ 352.505011][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 352.640088][ T7645] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 352.697595][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 353.268305][ T4264] Bluetooth: hci6: command 0x1003 tx timeout [ 353.290697][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 353.579979][ T7670] loop4: detected capacity change from 0 to 512 [ 353.727733][ T7670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.353878][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 354.374290][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1067'. [ 354.548409][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 355.121261][ T7698] loop3: detected capacity change from 0 to 1764 [ 355.372186][ T4469] Bluetooth: Error in BCSP hdr checksum [ 355.595857][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1081'. [ 355.630007][ T46] Bluetooth: Error in BCSP hdr checksum [ 355.758395][ T7714] loop1: detected capacity change from 0 to 512 [ 356.037270][ T7714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.523654][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 356.814096][ T7728] loop2: detected capacity change from 0 to 512 [ 356.845691][ T7728] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1088: casefold flag without casefold feature [ 356.868820][ T7728] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1088: couldn't read orphan inode 15 (err -117) [ 356.898797][ T7728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.975533][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 356.975549][ T26] audit: type=1326 audit(1738734708.418:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.047276][ T26] audit: type=1326 audit(1738734708.418:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.119996][ T26] audit: type=1326 audit(1738734708.418:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.168564][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 357.238158][ T26] audit: type=1326 audit(1738734708.418:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.282834][ T26] audit: type=1326 audit(1738734708.428:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.324779][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 357.498302][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1096'. [ 357.573308][ T26] audit: type=1326 audit(1738734708.428:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.654974][ T26] audit: type=1326 audit(1738734708.478:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 357.835856][ T26] audit: type=1326 audit(1738734708.478:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 358.088483][ T26] audit: type=1326 audit(1738734708.478:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3498cde9 code=0x7ffc0000 [ 358.397198][ T7755] loop2: detected capacity change from 0 to 512 [ 359.149656][ T7755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.394425][ T7759] device syzkaller0 entered promiscuous mode [ 359.463994][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 359.638382][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'. [ 362.412278][ T7777] loop4: detected capacity change from 0 to 512 [ 362.434208][ T7777] journal_path: Lookup failure for './bus' [ 362.461504][ T7777] EXT4-fs: error: could not find journal device path [ 362.973805][ T7737] Set syz1 is full, maxelem 65536 reached [ 363.213037][ T56] Bluetooth: Error in BCSP hdr checksum [ 364.960521][ T7782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1108'. [ 365.010277][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 365.500562][ T7794] Â: renamed from pim6reg1 [ 366.292328][ T7795] loop5: detected capacity change from 0 to 512 [ 366.402486][ T7795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 366.673073][ T6781] EXT4-fs (loop5): unmounting filesystem. [ 369.000818][ T7817] device wireguard0 entered promiscuous mode [ 370.240971][ T26] audit: type=1326 audit(1738734721.578:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.322591][ T26] audit: type=1326 audit(1738734721.688:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.343462][ T7839] usb usb1: usbfs: process 7839 (syz.5.1128) did not claim interface 0 before use [ 370.346593][ T26] audit: type=1326 audit(1738734721.718:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.377988][ T26] audit: type=1326 audit(1738734721.718:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.401020][ T26] audit: type=1326 audit(1738734721.718:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.423409][ T26] audit: type=1326 audit(1738734721.718:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.455937][ T26] audit: type=1326 audit(1738734721.718:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.522639][ T26] audit: type=1326 audit(1738734721.718:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.568201][ T26] audit: type=1326 audit(1738734721.738:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.603382][ T7848] loop7: detected capacity change from 0 to 16384 [ 370.613482][ T26] audit: type=1326 audit(1738734721.738:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.5.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 370.685618][ T7850] loop1: detected capacity change from 0 to 512 [ 370.747428][ T7850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 370.764910][ T7850] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.705898][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 375.008806][ T46] Bluetooth: Error in BCSP hdr checksum [ 377.615644][ T7880] loop1: detected capacity change from 0 to 256 [ 377.640585][ T4266] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 377.737458][ T7872] device syzkaller0 entered promiscuous mode [ 379.514110][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.579691][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.491674][ T7906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1145'. [ 383.582104][ T7910] loop1: detected capacity change from 0 to 512 [ 383.646632][ T7910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 383.701671][ T7910] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.276932][ T7933] loop2: detected capacity change from 0 to 256 [ 390.288884][ T4266] Bluetooth: hci6: command 0x1003 tx timeout [ 390.308376][ T4264] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 390.452502][ T7935] device wireguard0 entered promiscuous mode [ 390.485723][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 393.229574][ T7963] device syzkaller0 entered promiscuous mode [ 393.306316][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1159'. [ 393.406277][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 394.305886][ T7976] loop5: detected capacity change from 0 to 512 [ 394.482157][ T7976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 394.529000][ T7976] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.806006][ T7982] loop4: detected capacity change from 0 to 256 [ 400.173381][ T6781] EXT4-fs (loop5): unmounting filesystem. [ 402.392238][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1173'. [ 402.502988][ T8023] 9pnet_fd: Insufficient options for proto=fd [ 402.809194][ T8032] loop4: detected capacity change from 0 to 128 [ 402.986938][ T8033] loop2: detected capacity change from 0 to 256 [ 404.450809][ T8037] loop5: detected capacity change from 0 to 512 [ 404.553311][ T8032] syz.4.1178: attempt to access beyond end of device [ 404.553311][ T8032] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 404.655324][ T8037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 404.726554][ T8037] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.869956][ T8044] syz.4.1178: attempt to access beyond end of device [ 404.869956][ T8044] loop4: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 408.108775][ T8066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1188'. [ 408.344536][ T6781] EXT4-fs (loop5): unmounting filesystem. [ 408.738216][ T8074] device wireguard0 entered promiscuous mode [ 409.466860][ T8077] loop1: detected capacity change from 0 to 256 [ 412.540934][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 412.611112][ T8108] loop4: detected capacity change from 0 to 512 [ 413.100071][ T8108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.151499][ T8108] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.982754][ T8128] loop2: detected capacity change from 0 to 256 [ 415.727985][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 417.861555][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 420.122354][ T8157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1215'. [ 420.204326][ T8160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1214'. [ 420.521299][ T8165] loop4: detected capacity change from 0 to 512 [ 420.616005][ T8170] loop1: detected capacity change from 0 to 512 [ 420.856989][ T8174] loop5: detected capacity change from 0 to 256 [ 422.748344][ T8170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 422.760899][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 422.787736][ T8170] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.808243][ T8165] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.676011][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 424.005242][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 428.445209][ T8197] device wireguard0 entered promiscuous mode [ 429.480734][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 429.774338][ T26] kauditd_printk_skb: 144 callbacks suppressed [ 429.774353][ T26] audit: type=1326 audit(1738734781.218:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 429.865182][ T26] audit: type=1326 audit(1738734781.218:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 429.904046][ T26] audit: type=1326 audit(1738734781.218:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48e98cde9 code=0x7ffc0000 [ 429.911187][ T8220] loop5: detected capacity change from 0 to 512 [ 430.114973][ T8220] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 430.175139][ T8220] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.301515][ T8229] loop2: detected capacity change from 0 to 256 [ 432.281275][ T6781] EXT4-fs (loop5): unmounting filesystem. [ 435.288543][ T26] audit: type=1326 audit(1738734786.728:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.418666][ T26] audit: type=1326 audit(1738734786.728:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.508297][ T7048] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 435.548168][ T26] audit: type=1326 audit(1738734786.808:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.717402][ T7048] usb 5-1: device descriptor read/64, error -71 [ 435.749502][ T26] audit: type=1326 audit(1738734786.808:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.774902][ T26] audit: type=1326 audit(1738734786.808:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.789185][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 435.799482][ T26] audit: type=1326 audit(1738734786.808:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.840124][ T26] audit: type=1326 audit(1738734786.808:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.885308][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 435.901485][ T26] audit: type=1326 audit(1738734786.808:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.968384][ T26] audit: type=1326 audit(1738734786.808:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 435.991257][ T7048] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 436.048228][ T28] INFO: task syz-executor:4261 blocked for more than 144 seconds. [ 436.056362][ T28] Not tainted 6.1.128-syzkaller #0 [ 436.069207][ T26] audit: type=1326 audit(1738734786.808:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaef78cde9 code=0x7ffc0000 [ 436.092497][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.102237][ T28] task:syz-executor state:D stack:20832 pid:4261 ppid:1 flags:0x00004004 [ 436.111684][ T28] Call Trace: [ 436.115004][ T28] [ 436.117961][ T28] __schedule+0x143f/0x4570 [ 436.139381][ T28] ? release_firmware_map_entry+0x186/0x186 [ 436.152157][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 436.331710][ T28] ? release_firmware_map_entry+0x186/0x186 [ 436.482292][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 436.654316][ T28] schedule+0xbf/0x180 [ 436.830425][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 436.943113][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 436.947864][ T7048] usb 5-1: device descriptor read/64, error -71 [ 436.958400][ T28] ? down_write_killable_nested+0x90/0x90 [ 436.964192][ T28] ? read_lock_is_recursive+0x10/0x10 [ 436.969703][ T28] ? rwsem_write_trylock+0x166/0x210 [ 436.975038][ T28] ? clear_nonspinnable+0x60/0x60 [ 436.981530][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 436.986785][ T28] ? task_work_run+0x1fc/0x300 [ 436.991658][ T28] deactivate_super+0xa9/0xe0 [ 436.996392][ T28] cleanup_mnt+0x490/0x520 [ 437.000960][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 437.006208][ T28] task_work_run+0x246/0x300 [ 437.011375][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 437.016457][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 437.022000][ T28] exit_to_user_mode_loop+0xde/0x100 [ 437.027337][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 437.032982][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 437.038608][ T28] do_syscall_64+0x47/0xb0 [ 437.043058][ T28] ? clear_bhb_loop+0x45/0xa0 [ 437.047767][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.054603][ T28] RIP: 0033:0x7fe226b8e117 [ 437.059353][ T28] RSP: 002b:00007ffe7b4f5268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 437.067809][ T28] RAX: 0000000000000000 RBX: 00007fe226c0e08c RCX: 00007fe226b8e117 [ 437.076074][ T7048] usb usb5-port1: attempt power cycle [ 437.081669][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b4f5320 [ 437.089746][ T28] RBP: 00007ffe7b4f5320 R08: 0000000000000000 R09: 0000000000000000 [ 437.097750][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7b4f63b0 [ 437.105991][ T28] R13: 00007fe226c0e08c R14: 00000000000428a5 R15: 00007ffe7b4f63f0 [ 437.114317][ T28] [ 437.191076][ T8261] device wireguard0 entered promiscuous mode [ 437.198485][ T28] [ 437.198485][ T28] Showing all locks held in the system: [ 437.206467][ T28] 1 lock held by rcu_tasks_kthre/12: [ 437.217105][ T28] #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 437.227765][ T28] 1 lock held by rcu_tasks_trace/13: [ 437.233110][ T28] #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 437.244255][ T28] 1 lock held by khungtaskd/28: [ 437.249327][ T28] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 437.260718][ T28] 2 locks held by getty/4009: [ 437.265441][ T28] #0: ffff88814da0b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 437.288073][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 437.298747][ T28] 1 lock held by syz-executor/4261: [ 437.303981][ T28] #0: ffff88807fc940e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 437.318419][ T28] 4 locks held by kworker/u4:14/4523: [ 437.323840][ T28] #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.358299][ T28] #1: ffffc9000511fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.371778][ T28] #2: ffffffff8e4ffad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20 [ 437.401472][ T28] #3: ffffffff8e50bfa8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe0/0x3b0 [ 437.428231][ T28] 2 locks held by kworker/1:8/5706: [ 437.433533][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.458072][ T28] #1: ffffc900032c7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.471206][ T28] 3 locks held by ext4lazyinit/6608: [ 437.476544][ T28] 1 lock held by syz-executor/6781: [ 437.482492][ T28] 6 locks held by kworker/1:10/7048: [ 437.487819][ T28] #0: ffff888141e82938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.499239][ T28] #1: ffffc9000379fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 437.512263][ T28] #2: ffff888146b6a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 437.521682][ T28] #3: ffff888146b6d4f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x31e5/0x5730 [ 437.532051][ T28] #4: ffff888146b34d68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x3213/0x5730 [ 437.543432][ T28] #5: ffffffff8de5b230 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f4/0x1f00 [ 437.554350][ T28] 2 locks held by syz.3.1245/8261: [ 437.560113][ T28] #0: ffffffff8e50bfa8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 437.571220][ T28] #1: ffffffff8d3306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 437.592072][ T28] [ 437.596341][ T28] ============================================= [ 437.596341][ T28] [ 437.620692][ T28] NMI backtrace for cpu 1 [ 437.625088][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0 [ 437.633010][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 437.643100][ T28] Call Trace: [ 437.646408][ T28] [ 437.649363][ T28] dump_stack_lvl+0x1e3/0x2cb [ 437.654086][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 437.659594][ T28] ? panic+0x764/0x764 [ 437.663711][ T28] ? vprintk_emit+0x622/0x740 [ 437.668445][ T28] ? printk_sprint+0x490/0x490 [ 437.673250][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 437.678391][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 437.683369][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 437.689555][ T28] ? _printk+0xd1/0x111 [ 437.693736][ T28] ? panic+0x764/0x764 [ 437.697839][ T28] ? __wake_up_klogd+0xcc/0x100 [ 437.702714][ T28] ? panic+0x764/0x764 [ 437.706808][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 437.712897][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 437.718976][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 437.724984][ T28] watchdog+0xf88/0xfd0 [ 437.729155][ T28] ? watchdog+0x1f8/0xfd0 [ 437.733502][ T28] kthread+0x28d/0x320 [ 437.737576][ T28] ? hungtask_pm_notify+0x50/0x50 [ 437.742611][ T28] ? kthread_blkcg+0xd0/0xd0 [ 437.747204][ T28] ret_from_fork+0x1f/0x30 [ 437.751642][ T28] [ 437.755635][ T28] Sending NMI from CPU 1 to CPUs 0: [ 437.761147][ C0] NMI backtrace for cpu 0 [ 437.761175][ C0] CPU: 0 PID: 6608 Comm: ext4lazyinit Not tainted 6.1.128-syzkaller #0 [ 437.761193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 437.761203][ C0] RIP: 0010:__lock_acquire+0xf7f/0x1f80 [ 437.761233][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 60 02 25 91 be 08 00 00 00 e8 89 79 77 00 48 0f a3 1d c1 4a ba 0f <0f> 83 bb 01 00 00 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 81 bd 90 48 [ 437.761248][ C0] RSP: 0018:ffffc9000dc1f6a0 EFLAGS: 00000057 [ 437.761263][ C0] RAX: 0000000000000001 RBX: 00000000000004f8 RCX: ffffffff816ab797 [ 437.761275][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff912502f8 [ 437.761286][ C0] RBP: d0640d21da66df10 R08: dffffc0000000000 R09: fffffbfff224a060 [ 437.761299][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802b674658 [ 437.761310][ C0] R13: ffff88802b673b80 R14: 0000000000000000 R15: 1ffff110056ce8da [ 437.761323][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 437.761337][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.761349][ C0] CR2: 00007fcaef978ab8 CR3: 000000005d4dd000 CR4: 00000000003506f0 [ 437.761364][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.761373][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 437.761384][ C0] Call Trace: [ 437.761389][ C0] [ 437.761395][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 437.761413][ C0] ? read_lock_is_recursive+0x10/0x10 [ 437.761439][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 437.761464][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 437.761480][ C0] ? nmi_handle+0x12e/0x440 [ 437.761505][ C0] ? nmi_handle+0x25/0x440 [ 437.761531][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 437.761554][ C0] ? default_do_nmi+0x62/0x150 [ 437.761572][ C0] ? exc_nmi+0xa8/0x100 [ 437.761589][ C0] ? end_repeat_nmi+0x16/0x31 [ 437.761608][ C0] ? __lock_acquire+0xf77/0x1f80 [ 437.761633][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 437.761657][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 437.761682][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 437.761706][ C0] [ 437.761711][ C0] [ 437.761723][ C0] lock_acquire+0x1f8/0x5a0 [ 437.761747][ C0] ? __filemap_get_folio+0x150/0xe80 [ 437.761766][ C0] ? read_lock_is_recursive+0x10/0x10 [ 437.761791][ C0] ? __lock_acquire+0x125b/0x1f80 [ 437.761822][ C0] __filemap_get_folio+0x171/0xe80 [ 437.761838][ C0] ? __filemap_get_folio+0x150/0xe80 [ 437.761856][ C0] ? __filemap_get_folio+0x150/0xe80 [ 437.761871][ C0] ? page_cache_prev_miss+0x500/0x500 [ 437.761890][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.761916][ C0] ? print_irqtrace_events+0x210/0x210 [ 437.761943][ C0] pagecache_get_page+0x28/0x250 [ 437.761969][ C0] __find_get_block+0x3d8/0x1120 [ 437.761989][ C0] ? write_boundary_block+0xb0/0xb0 [ 437.762009][ C0] ? PageUptodate+0xd2/0x290 [ 437.762029][ C0] __getblk_gfp+0x146/0xa20 [ 437.762050][ C0] ext4_read_block_bitmap_nowait+0x1ff/0x980 [ 437.762075][ C0] ext4_mb_prefetch+0x46d/0x640 [ 437.762103][ C0] ? mb_set_bits+0x110/0x110 [ 437.762129][ C0] ? rcu_read_lock_bh_held+0x110/0x110 [ 437.762152][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 437.762183][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 437.762205][ C0] ext4_lazyinit_thread+0x54d/0x1ad0 [ 437.762238][ C0] ? kthread+0x28d/0x320 [ 437.762253][ C0] ? ext4_journalled_writepage_callback+0x200/0x200 [ 437.762282][ C0] ? __kthread_parkme+0x168/0x1c0 [ 437.762310][ C0] kthread+0x28d/0x320 [ 437.762323][ C0] ? ext4_journalled_writepage_callback+0x200/0x200 [ 437.762350][ C0] ? kthread_blkcg+0xd0/0xd0 [ 437.762366][ C0] ret_from_fork+0x1f/0x30 [ 437.762394][ C0] [ 438.166064][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 438.172983][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0 [ 438.180910][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 438.190990][ T28] Call Trace: [ 438.194306][ T28] [ 438.197254][ T28] dump_stack_lvl+0x1e3/0x2cb [ 438.202133][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 438.207610][ T28] ? panic+0x764/0x764 [ 438.211701][ T28] ? llist_add_batch+0x160/0x1d0 [ 438.216670][ T28] ? vscnprintf+0x59/0x80 [ 438.221026][ T28] panic+0x318/0x764 [ 438.224943][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 438.231146][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 438.237066][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 438.243237][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 438.249415][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 438.255591][ T28] watchdog+0xfc7/0xfd0 [ 438.259778][ T28] ? watchdog+0x1f8/0xfd0 [ 438.264143][ T28] kthread+0x28d/0x320 [ 438.268227][ T28] ? hungtask_pm_notify+0x50/0x50 [ 438.273274][ T28] ? kthread_blkcg+0xd0/0xd0 [ 438.277882][ T28] ret_from_fork+0x1f/0x30 [ 438.282341][ T28] [ 438.285676][ T28] Kernel Offset: disabled [ 438.290006][ T28] Rebooting in 86400 seconds..