last executing test programs:
1m17.692695089s ago: executing program 3 (id=5500):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', <r3=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80004700)
1m17.266461846s ago: executing program 3 (id=5506):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000580)=""/109, 0x6d}], 0x1, 0xa, 0xfffffff9)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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")
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r9}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009000100"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
1m15.806510498s ago: executing program 3 (id=5516):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x22020600)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
1m14.938074072s ago: executing program 3 (id=5524):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000580)=""/109, 0x6d}], 0x1, 0xa, 0xfffffff9)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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")
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r9}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009000100"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
1m14.186710443s ago: executing program 0 (id=5528):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
1m13.890148227s ago: executing program 0 (id=5529):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3c5}], 0x2}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
1m13.630144861s ago: executing program 0 (id=5531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
1m13.431007514s ago: executing program 3 (id=5533):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@random="339ed397e389", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x14, 0x4, 0x0, 0x0, 0x58, 0x0, 0xe000, 0xbc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xf9, 0x3, 0xf, [{@local, 0x9}, {@broadcast, 0xe84}]}, @ssrr={0x89, 0xf, 0x9e, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x91, [@private=0xa010102, @rand_addr=0x64010101, @local, @remote]}, @ra={0x94, 0x4}]}}, {0xa000, 0x86da, 0x8}}}}}}, 0x6e)
1m13.322502146s ago: executing program 0 (id=5534):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
1m13.103687149s ago: executing program 0 (id=5537):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
1m13.001796141s ago: executing program 0 (id=5540):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x1, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000180)}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r3, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x130, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r9 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r9)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
fdatasync(r8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r8, 0x5)
1m12.977374871s ago: executing program 3 (id=5541):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000580)=""/109, 0x6d}], 0x1, 0xa, 0xfffffff9)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x44)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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")
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r9}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009000100"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
57.93849607s ago: executing program 32 (id=5540):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x1, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000180)}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r3, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x130, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r9 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r9)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
fdatasync(r8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r8, 0x5)
57.890739131s ago: executing program 33 (id=5541):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000580)=""/109, 0x6d}], 0x1, 0xa, 0xfffffff9)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x44)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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")
r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r9}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009000100"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
20.410977289s ago: executing program 2 (id=5888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
20.312672671s ago: executing program 2 (id=5889):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
readv(r0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
18.942850572s ago: executing program 2 (id=5893):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x4000)
18.880086783s ago: executing program 2 (id=5895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000007000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
18.816341954s ago: executing program 2 (id=5897):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814c", 0x9b}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
18.749934485s ago: executing program 2 (id=5899):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)
17.359603746s ago: executing program 1 (id=5907):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
16.404344541s ago: executing program 1 (id=5908):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa8}}, 0x4000)
16.361274921s ago: executing program 1 (id=5909):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r1, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0)
16.308348762s ago: executing program 1 (id=5910):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
getgid()
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
removexattr(0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x178}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
15.428486835s ago: executing program 1 (id=5911):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0xf452ff85b85f9f6f, &(0x7f00006f6000/0x2000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
15.384850756s ago: executing program 1 (id=5912):
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x8}, {0xfff1, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
socket$kcm(0x10, 0x5, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="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", 0x111}], 0x1, 0x0, 0x0, 0x2663}, 0x20000041)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0xfffd, 0x0, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'geneve0\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
close(r3)
3.502514046s ago: executing program 34 (id=5899):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)
0s ago: executing program 35 (id=5912):
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x8}, {0xfff1, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
socket$kcm(0x10, 0x5, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="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", 0x111}], 0x1, 0x0, 0x0, 0x2663}, 0x20000041)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0xfffd, 0x0, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'geneve0\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
close(r3)
kernel console output (not intermixed with test programs):
3 comm="syz.0.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 484.905158][ T28] audit: type=1326 audit(1750144251.223:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.0.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 484.950818][ T28] audit: type=1326 audit(1750144251.223:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17103 comm="syz.0.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 485.069365][T17123] hub 2-0:1.0: USB hub found
[ 485.076410][T17123] hub 2-0:1.0: 1 port detected
[ 486.122231][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4289'.
[ 486.259558][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 488.193725][T17232] hub 2-0:1.0: USB hub found
[ 488.209622][T17232] hub 2-0:1.0: 1 port detected
[ 489.947414][T17297] futex_wake_op: syz.1.4338 tries to shift op by -1; fix this program
[ 490.712047][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4351'.
[ 491.697415][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4361'.
[ 491.762177][T17365] futex_wake_op: syz.0.4365 tries to shift op by -1; fix this program
[ 491.926063][ T28] kauditd_printk_skb: 110 callbacks suppressed
[ 491.926077][ T28] audit: type=1326 audit(1750144258.473:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 491.994225][ T28] audit: type=1326 audit(1750144258.473:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.044086][ T28] audit: type=1326 audit(1750144258.473:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.081452][ T28] audit: type=1326 audit(1750144258.473:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.134247][ T28] audit: type=1326 audit(1750144258.473:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.184165][ T28] audit: type=1326 audit(1750144258.473:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.234092][ T28] audit: type=1326 audit(1750144258.533:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.288539][ T28] audit: type=1326 audit(1750144258.533:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.344065][ T28] audit: type=1326 audit(1750144258.633:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 492.393746][ T28] audit: type=1326 audit(1750144258.633:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 493.291037][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4374'.
[ 493.709379][T17409] loop1: detected capacity change from 0 to 2048
[ 493.752914][T17409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 494.406413][T17442] futex_wake_op: syz.2.4387 tries to shift op by -1; fix this program
[ 496.944783][ T28] kauditd_printk_skb: 38 callbacks suppressed
[ 496.944797][ T28] audit: type=1326 audit(1750144263.493:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.0.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 497.005968][ T28] audit: type=1326 audit(1750144263.493:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17464 comm="syz.0.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 497.481329][ T28] audit: type=1326 audit(1750144263.573:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17474 comm="syz.0.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f351318e929 code=0x7ffc0000
[ 497.850926][T17489] futex_wake_op: syz.0.4398 tries to shift op by -1; fix this program
[ 498.065376][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 499.058712][ T28] audit: type=1326 audit(1750144265.603:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.105248][ T28] audit: type=1326 audit(1750144265.633:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.133149][ T28] audit: type=1326 audit(1750144265.633:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.166323][ T28] audit: type=1326 audit(1750144265.633:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.199575][ T28] audit: type=1326 audit(1750144265.633:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.273416][ T28] audit: type=1326 audit(1750144265.633:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 499.360028][ T28] audit: type=1326 audit(1750144265.633:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.1.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6168d8e929 code=0x7ffc0000
[ 500.003800][T17526] loop3: detected capacity change from 0 to 1024
[ 500.062644][T17526] EXT4-fs: Ignoring removed nobh option
[ 500.104449][T17526] EXT4-fs: Ignoring removed bh option
[ 500.143540][T17526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 500.211703][T17526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 500.395608][T17541] futex_wake_op: syz.1.4413 tries to shift op by -1; fix this program
[ 501.081157][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 501.639208][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 501.646995][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 501.927024][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4420'.
[ 502.705747][T17575] loop3: detected capacity change from 0 to 1024
[ 502.835223][T17575] EXT4-fs: Ignoring removed nobh option
[ 502.863419][T17575] EXT4-fs: Ignoring removed bh option
[ 502.883535][T17575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 502.949347][T17581] futex_wake_op: syz.0.4423 tries to shift op by -1; fix this program
[ 502.989482][T17575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 503.027909][ T28] kauditd_printk_skb: 19 callbacks suppressed
[ 503.027924][ T28] audit: type=1800 audit(1750144269.573:6198): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4422" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 503.327072][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 503.689048][T17615] loop3: detected capacity change from 0 to 2048
[ 503.765677][T17615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 505.258143][ T28] audit: type=1326 audit(1750144271.803:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17636 comm="syz.0.4437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351318e929 code=0x0
[ 505.611257][T17646] loop1: detected capacity change from 0 to 256
[ 505.629680][T17646] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 506.752987][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 506.826048][T17661] futex_wake_op: syz.2.4445 tries to shift op by -1; fix this program
[ 507.981426][T17689] loop1: detected capacity change from 0 to 2048
[ 508.031709][T17689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 508.777063][T17708] loop3: detected capacity change from 0 to 256
[ 508.872645][T17708] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 510.496247][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 511.115053][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'.
[ 511.244670][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'.
[ 511.300545][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'.
[ 511.423619][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'.
[ 513.146194][T17791] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in;
[ 513.146194][T17791] program syz.2.4483 not setting count and/or reply_len properly
[ 513.475540][T17801] loop3: detected capacity change from 0 to 2048
[ 513.526316][T17801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 513.628830][ T28] audit: type=1326 audit(1750144280.173:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17807 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.676029][ T28] audit: type=1326 audit(1750144280.193:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17807 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.709094][T17801] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 513.726143][ T28] audit: type=1326 audit(1750144280.203:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17807 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.765395][T17801] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 386 with error 28
[ 513.798409][T17801] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 513.798409][T17801]
[ 513.803750][ T28] audit: type=1326 audit(1750144280.203:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17807 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.814106][T17801] EXT4-fs (loop3): Total free blocks count 0
[ 513.845428][ T28] audit: type=1326 audit(1750144280.203:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17807 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.873730][T17801] EXT4-fs (loop3): Free/Dirty block details
[ 513.880744][T17801] EXT4-fs (loop3): free_blocks=2415919104
[ 513.886829][T17801] EXT4-fs (loop3): dirty_blocks=400
[ 513.902072][T17801] EXT4-fs (loop3): Block reservation details
[ 513.911509][T17801] EXT4-fs (loop3): i_reserved_data_blocks=25
[ 513.917760][ T28] audit: type=1326 audit(1750144280.463:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17810 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 513.972545][ T28] audit: type=1326 audit(1750144280.463:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17810 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 514.000229][ T28] audit: type=1326 audit(1750144280.463:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17810 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 514.025379][ T28] audit: type=1326 audit(1750144280.463:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17810 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 514.051184][ T28] audit: type=1326 audit(1750144280.473:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17810 comm="syz.2.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 514.089138][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 514.243434][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 514.324267][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 514.419470][T17826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 514.456103][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 514.478213][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'.
[ 515.226568][T17849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 515.255633][T17849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 515.268292][T17849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 515.294474][T17849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 515.316030][T17849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 515.323645][T17849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 515.356814][ T5766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 515.391703][ T5766] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 515.399808][ T5766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 515.408155][ T5766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 515.416071][ T5766] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 515.423501][ T5766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 516.181510][T17846] chnl_net:caif_netlink_parms(): no params data found
[ 516.222593][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 516.246473][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4504'.
[ 516.343405][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 516.466648][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 516.518178][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 516.558135][T17846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 516.565469][T17846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 516.567660][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'.
[ 516.582304][T17846] bridge_slave_0: entered allmulticast mode
[ 516.598585][T17846] bridge_slave_0: entered promiscuous mode
[ 516.638511][T17846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 516.659057][T17846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 516.684467][T17846] bridge_slave_1: entered allmulticast mode
[ 516.691569][T17846] bridge_slave_1: entered promiscuous mode
[ 516.771080][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 516.796801][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 516.948333][T17846] team0: Port device team_slave_0 added
[ 516.976558][T17846] team0: Port device team_slave_1 added
[ 517.122135][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 517.139212][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 517.174704][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 517.202080][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 517.219441][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 517.267539][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 517.345551][T17846] hsr_slave_0: entered promiscuous mode
[ 517.355514][T17846] hsr_slave_1: entered promiscuous mode
[ 517.374515][T17846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 517.386260][T17846] Cannot create hsr debugfs directory
[ 517.474716][ T5766] Bluetooth: hci4: command tx timeout
[ 517.879740][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'.
[ 517.998146][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4516'.
[ 518.456214][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'.
[ 518.567479][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'.
[ 518.738224][ T28] kauditd_printk_skb: 22 callbacks suppressed
[ 518.738238][ T28] audit: type=1326 audit(1750144285.283:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 518.825481][ T28] audit: type=1326 audit(1750144285.293:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f80a81c11e5 code=0x7ffc0000
[ 518.868532][ T28] audit: type=1326 audit(1750144285.313:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 518.918048][T17846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 518.936643][T17846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 518.952070][ T28] audit: type=1326 audit(1750144285.333:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 518.982886][ T28] audit: type=1326 audit(1750144285.343:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.019426][ T28] audit: type=1326 audit(1750144285.343:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.063599][ T28] audit: type=1326 audit(1750144285.343:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.114487][ T28] audit: type=1326 audit(1750144285.343:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.156056][T17846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 519.179715][T17846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 519.182745][ T28] audit: type=1326 audit(1750144285.343:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.284298][ T28] audit: type=1326 audit(1750144285.363:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17924 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a818e929 code=0x7ffc0000
[ 519.466311][ T1130] hsr_slave_1: left promiscuous mode
[ 519.479835][ T1130] bridge_slave_1: left allmulticast mode
[ 519.490703][ T1130] bridge_slave_1: left promiscuous mode
[ 519.504304][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 519.544846][ T1130] bridge_slave_0: left allmulticast mode
[ 519.550555][ T1130] bridge_slave_0: left promiscuous mode
[ 519.556486][ T5766] Bluetooth: hci4: command tx timeout
[ 519.562226][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 519.577681][ T1130] dummy0: left allmulticast mode
[ 519.582772][ T1130] dummy0: left promiscuous mode
[ 519.588098][ T1130] team0: left allmulticast mode
[ 519.593064][ T1130] team_slave_0: left allmulticast mode
[ 519.601127][ T1130] team_slave_1: left allmulticast mode
[ 519.606808][ T1130] team0: left promiscuous mode
[ 519.611731][ T1130] team_slave_0: left promiscuous mode
[ 519.618017][ T1130] team_slave_1: left promiscuous mode
[ 519.716964][ T1130] pimreg (unregistering): left allmulticast mode
[ 520.341627][ T1130] team0 (unregistering): Port device team_slave_1 removed
[ 520.416440][ T1130] team0 (unregistering): Port device team_slave_0 removed
[ 520.472650][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 520.518900][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 521.142883][ T1130] bond0 (unregistering): Released all slaves
[ 521.466117][T17846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 521.546571][T17846] 8021q: adding VLAN 0 to HW filter on device team0
[ 521.611109][T17972] __nla_validate_parse: 3 callbacks suppressed
[ 521.611126][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4524'.
[ 521.636938][ T5766] Bluetooth: hci4: command tx timeout
[ 521.647812][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 521.655014][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 521.689002][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 521.696254][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 521.822850][T17846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 521.839881][T17846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 522.246835][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 522.384099][T17846] veth0_vlan: entered promiscuous mode
[ 522.422197][T17846] veth1_vlan: entered promiscuous mode
[ 522.473553][T17846] veth0_macvtap: entered promiscuous mode
[ 522.529521][T17846] veth1_macvtap: entered promiscuous mode
[ 522.588440][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 522.618720][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 522.646748][T17846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 522.665245][T17846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 522.685889][T17846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 522.705027][T17846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 522.832280][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4533'.
[ 522.949641][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 522.979588][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 523.032974][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 523.048503][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 523.305277][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4536'.
[ 523.353645][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4536'.
[ 523.565765][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'.
[ 523.639355][T18029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4536'.
[ 523.697714][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4536'.
[ 523.718544][ T5766] Bluetooth: hci4: command tx timeout
[ 523.942072][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'.
[ 523.990887][T18040] dummy0: entered promiscuous mode
[ 524.003153][T18040] macvtap6: entered promiscuous mode
[ 524.020133][T18040] macvtap6: entered allmulticast mode
[ 524.027248][T18040] dummy0: entered allmulticast mode
[ 524.046664][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'.
[ 524.058430][ T28] kauditd_printk_skb: 8 callbacks suppressed
[ 524.058443][ T28] audit: type=1326 audit(1750144290.603:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.097702][T18046] dummy0: left allmulticast mode
[ 524.114433][ T28] audit: type=1326 audit(1750144290.603:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.114983][T18046] dummy0: left promiscuous mode
[ 524.149625][ T28] audit: type=1326 audit(1750144290.603:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.209044][ T28] audit: type=1326 audit(1750144290.603:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.264494][ T28] audit: type=1326 audit(1750144290.633:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.310572][ T28] audit: type=1326 audit(1750144290.653:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.354810][ T28] audit: type=1326 audit(1750144290.723:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.414717][ T28] audit: type=1326 audit(1750144290.723:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 524.465021][ T28] audit: type=1326 audit(1750144290.723:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bae1c11e5 code=0x7ffc0000
[ 524.534425][ T28] audit: type=1326 audit(1750144290.753:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.2.4541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bae12ab19 code=0x7ffc0000
[ 526.354631][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4556'.
[ 527.829006][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'.
[ 529.180749][T18147] syzkaller1: entered promiscuous mode
[ 529.186882][T18147] syzkaller1: entered allmulticast mode
[ 529.222660][T18152] futex_wake_op: syz.3.4579 tries to shift op by -1; fix this program
[ 531.280855][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[ 531.364658][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[ 531.460640][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[ 531.482239][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4591'.
[ 531.531724][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'.
[ 531.537724][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4593'.
[ 531.644974][T18198] futex_wake_op: syz.2.4594 tries to shift op by -1; fix this program
[ 531.861399][T18205] loop1: detected capacity change from 0 to 1024
[ 531.887350][T18205] EXT4-fs: Ignoring removed nobh option
[ 531.913512][T18205] EXT4-fs: Ignoring removed bh option
[ 531.941949][T18205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 532.268380][T18205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 532.319560][ T28] kauditd_printk_skb: 24 callbacks suppressed
[ 532.319574][ T28] audit: type=1800 audit(1750144298.863:6284): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4595" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 532.722082][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 532.973280][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 533.075511][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 533.114966][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067028800: rx timeout, send abort
[ 533.291433][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 533.339812][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 533.363663][T18237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4603'.
[ 533.375444][T18242] loop3: detected capacity change from 0 to 2048
[ 533.434444][T18242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 533.624947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888067028800: abort rx timeout. Force session deactivation
[ 533.660207][T18247] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 533.678449][T18247] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 418 with error 28
[ 533.704771][T18247] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 533.704771][T18247]
[ 533.716866][T18247] EXT4-fs (loop3): Total free blocks count 0
[ 533.723032][T18247] EXT4-fs (loop3): Free/Dirty block details
[ 533.731152][T18247] EXT4-fs (loop3): free_blocks=2415919104
[ 533.745913][T18247] EXT4-fs (loop3): dirty_blocks=432
[ 533.751270][T18247] EXT4-fs (loop3): Block reservation details
[ 533.760635][T18247] EXT4-fs (loop3): i_reserved_data_blocks=27
[ 533.884405][ T78] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[ 534.374850][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'.
[ 534.465301][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'.
[ 534.558796][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'.
[ 534.656827][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4614'.
[ 534.681297][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'.
[ 534.793451][T18283] loop3: detected capacity change from 0 to 2048
[ 534.842266][T18283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 535.147357][T18291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 535.194160][T18291] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 180 with max blocks 208 with error 28
[ 535.224334][T18291] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 535.224334][T18291]
[ 535.254064][T18291] EXT4-fs (loop3): Total free blocks count 0
[ 535.260123][T18291] EXT4-fs (loop3): Free/Dirty block details
[ 535.274298][T18291] EXT4-fs (loop3): free_blocks=2415919104
[ 535.280096][T18291] EXT4-fs (loop3): dirty_blocks=400
[ 535.294053][T18291] EXT4-fs (loop3): Block reservation details
[ 535.318503][T18291] EXT4-fs (loop3): i_reserved_data_blocks=25
[ 535.419395][ T3485] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[ 535.988828][T18321] loop3: detected capacity change from 0 to 1024
[ 536.018003][T18321] EXT4-fs: Ignoring removed nobh option
[ 536.047684][T18321] EXT4-fs: Ignoring removed bh option
[ 536.077132][T18321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 536.129071][T18321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 536.179810][ T28] audit: type=1800 audit(1750144302.723:6285): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4628" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 536.755535][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 537.618664][T18388] loop3: detected capacity change from 0 to 1024
[ 537.648093][T18388] EXT4-fs: Ignoring removed nobh option
[ 537.663367][T18388] EXT4-fs: Ignoring removed bh option
[ 537.720424][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d1a1000: rx timeout, send abort
[ 537.757159][T18388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 537.845772][T18388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 537.860978][ T28] audit: type=1326 audit(1750144304.403:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 537.933910][ T28] audit: type=1326 audit(1750144304.433:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.007599][ T28] audit: type=1326 audit(1750144304.433:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.073419][ T28] audit: type=1326 audit(1750144304.433:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.104914][ T28] audit: type=1326 audit(1750144304.433:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.136379][ T28] audit: type=1326 audit(1750144304.433:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.224196][ T28] audit: type=1326 audit(1750144304.433:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.228754][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d1a1000: abort rx timeout. Force session deactivation
[ 538.296144][ T28] audit: type=1326 audit(1750144304.433:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.2.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bae18e929 code=0x7ffc0000
[ 538.380721][ T28] audit: type=1800 audit(1750144304.473:6294): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4652" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 538.423134][T18422] loop1: detected capacity change from 0 to 512
[ 538.449200][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 538.528377][T18422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 538.588388][T18422] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 538.593846][T18432] __nla_validate_parse: 16 callbacks suppressed
[ 538.593862][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'.
[ 538.751729][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'.
[ 538.762427][ T28] audit: type=1326 audit(1750144305.293:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 538.794950][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 538.869812][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'.
[ 538.954221][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4665'.
[ 538.972608][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'.
[ 539.587899][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'.
[ 539.599844][T18474] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4678'.
[ 539.636644][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'.
[ 539.822370][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'.
[ 539.874994][T18478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4679'.
[ 540.234330][T18494] syzkaller1: entered promiscuous mode
[ 540.239871][T18494] syzkaller1: entered allmulticast mode
[ 540.818922][T18521] futex_wake_op: syz.1.4693 tries to shift op by -1; fix this program
[ 541.196099][T18526] loop3: detected capacity change from 0 to 1024
[ 541.209110][T18526] EXT4-fs: Ignoring removed nobh option
[ 541.224383][T18526] EXT4-fs: Ignoring removed bh option
[ 541.233625][T18526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 541.287479][T18526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 542.007502][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 542.193323][T18574] loop3: detected capacity change from 0 to 2048
[ 542.300895][T18574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 542.572442][T18584] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 542.605435][T18584] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28
[ 542.639597][T18584] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 542.639597][T18584]
[ 542.671394][T18584] EXT4-fs (loop3): Total free blocks count 0
[ 542.701324][T18584] EXT4-fs (loop3): Free/Dirty block details
[ 542.718848][T18584] EXT4-fs (loop3): free_blocks=2415919104
[ 542.744469][T18584] EXT4-fs (loop3): dirty_blocks=256
[ 542.772197][T18584] EXT4-fs (loop3): Block reservation details
[ 542.789211][T18584] EXT4-fs (loop3): i_reserved_data_blocks=16
[ 542.920031][ T78] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[ 543.376744][T18597] loop1: detected capacity change from 0 to 1024
[ 543.414590][T18597] EXT4-fs: Ignoring removed nobh option
[ 543.420222][T18597] EXT4-fs: Ignoring removed bh option
[ 543.454113][T18597] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 543.502306][T18597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 543.539572][ T28] kauditd_printk_skb: 9 callbacks suppressed
[ 543.539585][ T28] audit: type=1800 audit(1750144310.083:6305): pid=18597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4714" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 543.598022][T18619] __nla_validate_parse: 13 callbacks suppressed
[ 543.598039][T18619] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4719'.
[ 544.106759][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 545.029788][T18660] loop1: detected capacity change from 0 to 1024
[ 545.030681][T18660] EXT4-fs: Ignoring removed nobh option
[ 545.030701][T18660] EXT4-fs: Ignoring removed bh option
[ 545.034613][T18660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 545.063488][T18660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 545.084098][ T28] audit: type=1800 audit(1750144311.623:6306): pid=18660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4736" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 545.107487][T18667] loop3: detected capacity change from 0 to 2048
[ 545.151224][T18667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 545.305271][T18677] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 545.305574][T18677] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 242 with error 28
[ 545.305601][T18677] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 545.305601][T18677]
[ 545.305615][T18677] EXT4-fs (loop3): Total free blocks count 0
[ 545.305629][T18677] EXT4-fs (loop3): Free/Dirty block details
[ 545.305644][T18677] EXT4-fs (loop3): free_blocks=2415919104
[ 545.305659][T18677] EXT4-fs (loop3): dirty_blocks=256
[ 545.305672][T18677] EXT4-fs (loop3): Block reservation details
[ 545.305684][T18677] EXT4-fs (loop3): i_reserved_data_blocks=16
[ 545.636250][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 545.837647][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 547.087549][T18717] vlan2: entered allmulticast mode
[ 547.463954][T18727] Driver unsupported XDP return value 0 on prog (id 2094) dev N/A, expect packet loss!
[ 547.708249][T18735] futex_wake_op: syz.1.4760 tries to shift op by -1; fix this program
[ 548.187409][T18742] loop1: detected capacity change from 0 to 2048
[ 548.293831][T18742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 548.344216][T18742] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 549.431003][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 549.756464][T18785] futex_wake_op: syz.2.4781 tries to shift op by -1; fix this program
[ 549.983314][T18795] futex_wake_op: syz.1.4784 tries to shift op by -1; fix this program
[ 551.496099][T18826] futex_wake_op: syz.0.4795 tries to shift op by -1; fix this program
[ 552.999371][T18866] futex_wake_op: syz.3.4809 tries to shift op by -1; fix this program
[ 553.415588][T18874] loop3: detected capacity change from 0 to 2048
[ 553.502725][T18874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 553.526596][T18874] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 553.557710][T18882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[ 554.696782][T11999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 555.277720][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'.
[ 555.516857][T18872] syz.0.4811: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 555.554911][T18872] CPU: 1 PID: 18872 Comm: syz.0.4811 Not tainted 6.6.93-syzkaller #0
[ 555.563051][T18872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 555.573291][T18872] Call Trace:
[ 555.576599][T18872] <TASK>
[ 555.579556][T18872] dump_stack_lvl+0x16c/0x230
[ 555.584298][T18872] ? show_regs_print_info+0x20/0x20
[ 555.589535][T18872] ? load_image+0x3b0/0x3b0
[ 555.594114][T18872] ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 555.600566][T18872] ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 555.607109][T18872] warn_alloc+0x210/0x300
[ 555.611654][T18872] ? zone_watermark_ok_safe+0x230/0x230
[ 555.617772][T18872] ? _raw_spin_unlock+0x28/0x40
[ 555.623113][T18872] __vmalloc_node_range+0x662/0x1320
[ 555.628520][T18872] ? free_vm_area+0x50/0x50
[ 555.633062][T18872] ? _raw_spin_unlock+0x28/0x40
[ 555.637951][T18872] ? __kasan_kmalloc+0x8f/0xa0
[ 555.642753][T18872] __vmalloc_node_range+0x568/0x1320
[ 555.648141][T18872] ? hash_netiface_create+0x361/0xff0
[ 555.653550][T18872] ? __asan_memset+0x22/0x40
[ 555.658185][T18872] ? free_vm_area+0x50/0x50
[ 555.662697][T18872] ? kvmalloc_node+0x70/0x180
[ 555.667395][T18872] ? rcu_is_watching+0x15/0xb0
[ 555.672165][T18872] ? kvmalloc_node+0x70/0x180
[ 555.676845][T18872] ? trace_kmalloc+0x1f/0xa0
[ 555.681436][T18872] kvmalloc_node+0x13f/0x180
[ 555.686028][T18872] ? hash_netiface_create+0x361/0xff0
[ 555.691407][T18872] hash_netiface_create+0x361/0xff0
[ 555.696602][T18872] ? __lock_acquire+0x7c80/0x7c80
[ 555.701623][T18872] ? __nla_parse+0x40/0x50
[ 555.706033][T18872] ? hash_netport6_gc+0x570/0x570
[ 555.711055][T18872] ip_set_create+0xa87/0x18e0
[ 555.715744][T18872] ? ip_set_create+0x4b2/0x18e0
[ 555.720614][T18872] ? ip_set_protocol+0x5d0/0x5d0
[ 555.725643][T18872] ? trace_contention_end+0x39/0xe0
[ 555.730865][T18872] nfnetlink_rcv_msg+0xb49/0x1130
[ 555.735890][T18872] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 555.741959][T18872] ? nfnetlink_rcv_msg+0x20e/0x1130
[ 555.747176][T18872] ? nfnetlink_unbind+0x160/0x160
[ 555.752215][T18872] ? __dev_queue_xmit+0x1a64/0x35a0
[ 555.757408][T18872] ? __netlink_deliver_tap+0x5ab/0x830
[ 555.762864][T18872] ? netlink_deliver_tap+0x19c/0x1b0
[ 555.768144][T18872] ? netlink_unicast+0x72b/0x8c0
[ 555.773075][T18872] ? netlink_sendmsg+0x8c1/0xbe0
[ 555.778016][T18872] ? ____sys_sendmsg+0x5bf/0x950
[ 555.782950][T18872] ? ___sys_sendmsg+0x220/0x290
[ 555.787803][T18872] ? __se_sys_sendmsg+0x1a5/0x270
[ 555.792841][T18872] ? do_syscall_64+0x55/0xb0
[ 555.797478][T18872] netlink_rcv_skb+0x216/0x480
[ 555.802259][T18872] ? nfnetlink_unbind+0x160/0x160
[ 555.807295][T18872] ? netlink_ack+0x1110/0x1110
[ 555.812151][T18872] ? apparmor_capable+0x137/0x1a0
[ 555.817174][T18872] ? bpf_lsm_capable+0x9/0x10
[ 555.821859][T18872] ? security_capable+0x89/0xb0
[ 555.826745][T18872] nfnetlink_rcv+0x274/0x2180
[ 555.831436][T18872] ? __local_bh_enable_ip+0x12e/0x1c0
[ 555.836805][T18872] ? lockdep_hardirqs_on+0x98/0x150
[ 555.842000][T18872] ? __local_bh_enable_ip+0x12e/0x1c0
[ 555.847370][T18872] ? _local_bh_enable+0xa0/0xa0
[ 555.852221][T18872] ? __dev_queue_xmit+0x245/0x35a0
[ 555.857472][T18872] ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 555.863229][T18872] ? __dev_queue_xmit+0x245/0x35a0
[ 555.868390][T18872] ? ref_tracker_free+0x634/0x7d0
[ 555.873436][T18872] ? __copy_skb_header+0xa7/0x550
[ 555.878483][T18872] ? refcount_inc+0x70/0x70
[ 555.883015][T18872] ? __skb_clone+0x63/0x790
[ 555.887796][T18872] ? __skb_clone+0x480/0x790
[ 555.892402][T18872] ? __netlink_deliver_tap+0x7e8/0x830
[ 555.897881][T18872] ? netlink_deliver_tap+0x2e/0x1b0
[ 555.903105][T18872] ? __lock_acquire+0x7c80/0x7c80
[ 555.908138][T18872] ? netlink_deliver_tap+0x2e/0x1b0
[ 555.913343][T18872] netlink_unicast+0x750/0x8c0
[ 555.918117][T18872] netlink_sendmsg+0x8c1/0xbe0
[ 555.922886][T18872] ? netlink_getsockopt+0x580/0x580
[ 555.928175][T18872] ? aa_sock_msg_perm+0x94/0x150
[ 555.933111][T18872] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 555.938410][T18872] ? security_socket_sendmsg+0x80/0xa0
[ 555.943882][T18872] ? netlink_getsockopt+0x580/0x580
[ 555.949092][T18872] ____sys_sendmsg+0x5bf/0x950
[ 555.953863][T18872] ? __asan_memset+0x22/0x40
[ 555.958457][T18872] ? __sys_sendmsg_sock+0x30/0x30
[ 555.963470][T18872] ? __import_iovec+0x5f2/0x860
[ 555.968324][T18872] ? import_iovec+0x73/0xa0
[ 555.972820][T18872] ___sys_sendmsg+0x220/0x290
[ 555.977492][T18872] ? __sys_sendmsg+0x270/0x270
[ 555.982285][T18872] __se_sys_sendmsg+0x1a5/0x270
[ 555.987133][T18872] ? __x64_sys_sendmsg+0x80/0x80
[ 555.992080][T18872] ? lockdep_hardirqs_on+0x98/0x150
[ 555.997278][T18872] do_syscall_64+0x55/0xb0
[ 556.001698][T18872] ? clear_bhb_loop+0x40/0x90
[ 556.006388][T18872] ? clear_bhb_loop+0x40/0x90
[ 556.011166][T18872] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 556.017084][T18872] RIP: 0033:0x7f47ce18e929
[ 556.021519][T18872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 556.041128][T18872] RSP: 002b:00007f47cf090038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 556.049542][T18872] RAX: ffffffffffffffda RBX: 00007f47ce3b5fa0 RCX: 00007f47ce18e929
[ 556.057525][T18872] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000008
[ 556.065506][T18872] RBP: 00007f47ce210b39 R08: 0000000000000000 R09: 0000000000000000
[ 556.073477][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 556.081460][T18872] R13: 0000000000000000 R14: 00007f47ce3b5fa0 R15: 00007ffdfd04a978
[ 556.089465][T18872] </TASK>
[ 556.092613][ C1] vkms_vblank_simulate: vblank timer overrun
[ 556.102130][T18872] Mem-Info:
[ 556.106700][T18872] active_anon:10741 inactive_anon:0 isolated_anon:0
[ 556.106700][T18872] active_file:1252 inactive_file:40051 isolated_file:0
[ 556.106700][T18872] unevictable:768 dirty:179 writeback:0
[ 556.106700][T18872] slab_reclaimable:10484 slab_unreclaimable:133756
[ 556.106700][T18872] mapped:34862 shmem:5853 pagetables:944
[ 556.106700][T18872] sec_pagetables:0 bounce:0
[ 556.106700][T18872] kernel_misc_reclaimable:0
[ 556.106700][T18872] free:1276176 free_pcp:8264 free_cma:0
[ 556.158016][T18872] Node 0 active_anon:40244kB inactive_anon:0kB active_file:5008kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139468kB dirty:720kB writeback:0kB shmem:19176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:3796kB sec_pagetables:0kB all_unreclaimable? no
[ 556.208743][T18872] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 556.239459][T18872] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 556.305689][T18872] lowmem_reserve[]: 0 2525 2526 2526 2526
[ 556.320199][T18872] Node 0 DMA32 free:1180636kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:40000kB inactive_anon:0kB active_file:5008kB inactive_file:158692kB unevictable:1536kB writepending:720kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:27116kB local_pcp:8576kB free_cma:0kB
[ 556.389461][T18872] lowmem_reserve[]: 0 0 1 1 1
[ 556.404130][T18872] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 556.467459][T18872] lowmem_reserve[]: 0 0 0 0 0
[ 556.479137][T18872] Node 1 Normal free:3908436kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9216kB local_pcp:7552kB free_cma:0kB
[ 556.506035][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4836'.
[ 556.537370][T18872] lowmem_reserve[]: 0 0 0 0 0
[ 556.543254][T18872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 556.572444][T18872] Node 0 DMA32: 9*4kB (E) 33*8kB (UME) 23*16kB (UE) 57*32kB (UME) 79*64kB (ME) 51*128kB (UME) 18*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 4*2048kB (UME) 280*4096kB (UM) = 1177340kB
[ 556.612777][T18872] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 556.628032][T18872] Node 1 Normal: 237*4kB (UME) 60*8kB (UME) 56*16kB (UME) 204*32kB (UME) 59*64kB (UE) 12*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3908436kB
[ 556.676366][T18872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 556.688338][T18872] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 556.698820][T18872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 556.710415][T18872] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 556.720778][T18872] 46466 total pagecache pages
[ 556.739320][T18872] 0 pages in swap cache
[ 556.772154][T18872] Free swap = 124472kB
[ 556.835049][T18872] Total swap = 124996kB
[ 556.839268][T18872] 2097051 pages RAM
[ 556.843089][T18872] 0 pages HighMem/MovableOnly
[ 556.854499][T18872] 416120 pages reserved
[ 556.858712][T18872] 0 pages cma reserved
[ 560.815922][T17849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 560.831565][T17849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 560.842218][T17849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 560.858883][T17849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 560.868132][T17849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 560.894821][T17849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 561.000852][ T28] audit: type=1326 audit(1750144327.543:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19024 comm="syz.2.4875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bae18e929 code=0x0
[ 561.223689][T19038] futex_wake_op: syz.1.4880 tries to shift op by -1; fix this program
[ 561.429701][T19018] chnl_net:caif_netlink_parms(): no params data found
[ 561.441051][T19038] loop1: detected capacity change from 0 to 2048
[ 561.461477][T19038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 561.473922][T19038] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 561.592445][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 561.820594][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 561.917181][T19018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 561.933505][T19018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 561.951341][T19018] bridge_slave_0: entered allmulticast mode
[ 561.962304][T19018] bridge_slave_0: entered promiscuous mode
[ 562.001003][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 562.031452][T19018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 562.039439][T19018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 562.048982][T19018] bridge_slave_1: entered allmulticast mode
[ 562.060104][T19018] bridge_slave_1: entered promiscuous mode
[ 562.138045][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 562.220887][T19018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 562.250328][T19074] loop1: detected capacity change from 0 to 2048
[ 562.278110][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 562.316614][T19018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 562.337391][T19074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 562.476285][T19018] team0: Port device team_slave_0 added
[ 562.513590][T19018] team0: Port device team_slave_1 added
[ 562.537820][T19079] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 562.584322][T19079] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 90 with max blocks 104 with error 28
[ 562.611313][T19018] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 562.623832][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 562.630736][T19079] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 562.630736][T19079]
[ 562.655179][T19018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 562.683633][ T28] audit: type=1326 audit(1750144329.223:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.0.4892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47ce18e929 code=0x0
[ 562.713309][T19018] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 562.727698][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 562.728637][T19079] EXT4-fs (loop1): Total free blocks count 0
[ 562.757031][T19018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 562.781740][T19079] EXT4-fs (loop1): Free/Dirty block details
[ 562.799458][T19079] EXT4-fs (loop1): free_blocks=2415919104
[ 562.812372][T19079] EXT4-fs (loop1): dirty_blocks=208
[ 562.828131][T19079] EXT4-fs (loop1): Block reservation details
[ 562.846119][T19079] EXT4-fs (loop1): i_reserved_data_blocks=13
[ 562.889059][T19018] hsr_slave_0: entered promiscuous mode
[ 562.897351][T19018] hsr_slave_1: entered promiscuous mode
[ 562.905425][T19018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 562.914364][T17849] Bluetooth: hci0: command tx timeout
[ 562.923502][T19018] Cannot create hsr debugfs directory
[ 562.965905][ T48] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[ 563.079806][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 563.173273][T19087] xt_recent: hitcount (16385) is larger than allowed maximum (255)
[ 563.596193][T19098] tipc: Started in network mode
[ 563.602518][T19098] tipc: Node identity ac14140f, cluster identity 4711
[ 563.617765][T19098] tipc: New replicast peer: 255.255.255.255
[ 563.648674][T19098] tipc: Enabled bearer <udp:syz2>, priority 10
[ 564.102605][T19123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4901'.
[ 564.373820][T19018] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 564.435967][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4904'.
[ 564.455640][T19018] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 564.474617][T19018] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 564.511100][T19018] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 564.616405][ T58] hsr_slave_1: left promiscuous mode
[ 564.632112][ T58] bridge_slave_1: left allmulticast mode
[ 564.643440][ T58] bridge_slave_1: left promiscuous mode
[ 564.657494][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 564.724165][ T28] audit: type=1326 audit(1750144331.243:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19137 comm="syz.2.4905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bae18e929 code=0x0
[ 564.771209][ T786] tipc: Node number set to 2886997007
[ 564.798490][ T58] bridge_slave_0: left allmulticast mode
[ 564.818691][ T58] bridge_slave_0: left promiscuous mode
[ 564.996674][T17849] Bluetooth: hci0: command tx timeout
[ 565.182307][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 565.622390][ T58] team0: left allmulticast mode
[ 565.633935][ T58] team_slave_0: left allmulticast mode
[ 565.639651][ T58] team_slave_1: left allmulticast mode
[ 565.646633][ T58] team0: left promiscuous mode
[ 565.651925][ T58] team_slave_0: left promiscuous mode
[ 565.657892][ T58] team_slave_1: left promiscuous mode
[ 565.683653][ T58] veth1_macvtap: left allmulticast mode
[ 565.706070][ T58] veth1_macvtap: left promiscuous mode
[ 565.712181][ T58] veth0_macvtap: left promiscuous mode
[ 565.724447][ T58] veth1_vlan: left promiscuous mode
[ 565.730062][ T58] veth0_vlan: left promiscuous mode
[ 566.513805][ T58] team0 (unregistering): Port device team_slave_1 removed
[ 566.566185][ T58] team0 (unregistering): Port device team_slave_0 removed
[ 566.615803][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 566.662748][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 567.084596][ T5766] Bluetooth: hci0: command tx timeout
[ 567.295419][ T58] bond0 (unregistering): Released all slaves
[ 568.168357][T19018] 8021q: adding VLAN 0 to HW filter on device bond0
[ 568.269051][T19018] 8021q: adding VLAN 0 to HW filter on device team0
[ 568.346835][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 568.355576][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 568.397055][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 568.404275][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 568.839550][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4925'.
[ 568.959684][T19018] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 569.082984][T19018] veth0_vlan: entered promiscuous mode
[ 569.125570][T19018] veth1_vlan: entered promiscuous mode
[ 569.154837][ T5766] Bluetooth: hci0: command tx timeout
[ 569.505285][T19018] veth0_macvtap: entered promiscuous mode
[ 569.825579][T19018] veth1_macvtap: entered promiscuous mode
[ 569.991736][T19018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 570.023028][T19018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 570.044669][T19018] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 570.245106][T19018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 570.270746][T19018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 570.298679][T19018] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 570.357232][T19018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 570.374531][T19018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 570.392521][T19018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 570.401718][T19018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 570.559574][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 570.573386][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 570.617840][T19231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4933'.
[ 570.631321][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 570.647682][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 570.813501][T19235] futex_wake_op: syz.3.4869 tries to shift op by -1; fix this program
[ 571.902269][T19242] xt_recent: hitcount (16385) is larger than allowed maximum (255)
[ 572.349859][T19258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4941'.
[ 573.115966][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4952'.
[ 573.833817][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'.
[ 574.366718][ T28] audit: type=1326 audit(1750144340.893:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz.2.4966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bae18e929 code=0x0
[ 574.879583][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'.
[ 574.919186][T17849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 574.932468][T17849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 574.941384][T17849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 574.951289][T17849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 574.959919][T17849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 574.967565][T17849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 575.483107][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 575.516855][T19334] chnl_net:caif_netlink_parms(): no params data found
[ 575.650245][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 575.688953][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4979'.
[ 575.841172][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 575.901861][T19334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 575.909641][T19334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 575.919877][ T28] audit: type=1326 audit(1750144342.463:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19369 comm="syz.3.4981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4be8f8e929 code=0x0
[ 575.921872][T19334] bridge_slave_0: entered allmulticast mode
[ 575.953308][T19334] bridge_slave_0: entered promiscuous mode
[ 575.986011][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 576.019616][T19334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 576.027922][T19334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 576.036129][T19334] bridge_slave_1: entered allmulticast mode
[ 576.043802][T19334] bridge_slave_1: entered promiscuous mode
[ 576.105316][T19334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 576.126102][T19334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 576.191217][T19334] team0: Port device team_slave_0 added
[ 576.202393][T19334] team0: Port device team_slave_1 added
[ 576.311173][T19334] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 576.325669][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 576.353100][T19334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 576.387554][T19334] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 576.394774][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 576.421939][T19334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 576.554772][T19334] hsr_slave_0: entered promiscuous mode
[ 576.577220][T19334] hsr_slave_1: entered promiscuous mode
[ 576.599757][T19334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 576.616385][T19334] Cannot create hsr debugfs directory
[ 576.631953][ T48] tipc: Disabling bearer <udp:syz2>
[ 576.655128][ T48] tipc: Left network mode
[ 576.817539][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'.
[ 577.005966][T17849] Bluetooth: hci1: command tx timeout
[ 578.688419][ T28] audit: type=1326 audit(1750144345.233:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.2.4994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bae18e929 code=0x0
[ 578.718348][T19334] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 578.742879][T19334] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 578.797239][T19334] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 578.811173][T19334] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 578.888442][ T48] hsr_slave_0: left promiscuous mode
[ 578.902068][ T48] hsr_slave_1: left promiscuous mode
[ 578.918061][ T48] bridge_slave_1: left allmulticast mode
[ 578.929414][ T48] bridge_slave_1: left promiscuous mode
[ 578.944228][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 578.956433][ T48] bridge_slave_0: left allmulticast mode
[ 578.962270][ T48] bridge_slave_0: left promiscuous mode
[ 578.975142][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 579.009912][ T48] team0: left allmulticast mode
[ 579.014933][ T48] team_slave_0: left allmulticast mode
[ 579.020427][ T48] team_slave_1: left allmulticast mode
[ 579.027911][ T48] team0: left promiscuous mode
[ 579.044685][ T48] team_slave_0: left promiscuous mode
[ 579.050196][ T48] team_slave_1: left promiscuous mode
[ 579.065102][ T48] veth1_macvtap: left promiscuous mode
[ 579.070703][ T48] veth0_macvtap: left promiscuous mode
[ 579.080150][T17849] Bluetooth: hci1: command tx timeout
[ 579.086934][ T48] veth1_vlan: left promiscuous mode
[ 579.092859][ T48] veth0_vlan: left promiscuous mode
[ 581.143854][ T48] team0 (unregistering): Port device team_slave_1 removed
[ 581.164758][T17849] Bluetooth: hci1: command tx timeout
[ 581.210325][ T48] team0 (unregistering): Port device team_slave_0 removed
[ 581.258596][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 581.310646][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 581.929311][ T28] audit: type=1326 audit(1750144348.463:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.0.5005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47ce18e929 code=0x0
[ 581.965107][ T48] bond0 (unregistering): Released all slaves
[ 582.218063][T19334] 8021q: adding VLAN 0 to HW filter on device bond0
[ 582.293139][T19334] 8021q: adding VLAN 0 to HW filter on device team0
[ 582.299934][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 582.429245][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[ 582.436569][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 582.462506][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 582.519616][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 582.551319][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 582.558565][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 582.566110][T19488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 582.763578][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 583.091526][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 583.234751][T17849] Bluetooth: hci1: command tx timeout
[ 583.258488][T19334] veth0_vlan: entered promiscuous mode
[ 583.286427][T19334] veth1_vlan: entered promiscuous mode
[ 583.387421][T19334] veth0_macvtap: entered promiscuous mode
[ 583.447573][T19334] veth1_macvtap: entered promiscuous mode
[ 583.529347][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 583.551036][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 583.595770][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 583.616661][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 583.647345][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 583.693809][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 583.715136][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 583.734162][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 583.754030][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 583.768025][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 583.806617][T19334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 583.817843][T19334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 583.827820][T19334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 583.839554][T19334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 584.008250][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 584.034778][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 584.127625][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 584.149366][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 584.980379][T19523] loop1: detected capacity change from 0 to 512
[ 585.034412][T19523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 585.055154][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'.
[ 585.129381][T19523] EXT4-fs (loop1): 1 truncate cleaned up
[ 585.156997][T19523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 585.415653][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5020'.
[ 585.453529][ T5766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 585.478768][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 585.491195][ T5766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 585.502906][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 585.512082][ T5766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 585.528574][ T5766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 585.730768][T19538] loop3: detected capacity change from 0 to 2048
[ 585.791794][T19538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 586.065596][T19543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 586.087203][T19543] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 408 with error 28
[ 586.106130][T19534] chnl_net:caif_netlink_parms(): no params data found
[ 586.118057][T19543] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 586.118057][T19543]
[ 586.142048][T19543] EXT4-fs (loop3): Total free blocks count 0
[ 586.158976][T19543] EXT4-fs (loop3): Free/Dirty block details
[ 586.172676][T19543] EXT4-fs (loop3): free_blocks=2415919104
[ 586.179757][T19543] EXT4-fs (loop3): dirty_blocks=416
[ 586.185517][T19543] EXT4-fs (loop3): Block reservation details
[ 586.211252][T19543] EXT4-fs (loop3): i_reserved_data_blocks=26
[ 586.439965][T19534] bridge0: port 1(bridge_slave_0) entered blocking state
[ 586.464887][T19534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 586.472199][T19534] bridge_slave_0: entered allmulticast mode
[ 586.499983][ T3485] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[ 586.501076][T19534] bridge_slave_0: entered promiscuous mode
[ 586.568013][T19534] bridge0: port 2(bridge_slave_1) entered blocking state
[ 586.587602][T19534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 586.604604][T19534] bridge_slave_1: entered allmulticast mode
[ 586.615992][T19534] bridge_slave_1: entered promiscuous mode
[ 586.793431][T19534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 586.883092][T19534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 586.895494][T19523] warn_alloc: 3 callbacks suppressed
[ 586.895508][T19523] syz.1.5017: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 586.941169][T19523] CPU: 0 PID: 19523 Comm: syz.1.5017 Not tainted 6.6.93-syzkaller #0
[ 586.949302][T19523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 586.959380][T19523] Call Trace:
[ 586.962681][T19523] <TASK>
[ 586.965635][T19523] dump_stack_lvl+0x16c/0x230
[ 586.970358][T19523] ? show_regs_print_info+0x20/0x20
[ 586.975712][T19523] ? load_image+0x3b0/0x3b0
[ 586.980257][T19523] ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 586.986811][T19523] ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 586.993404][T19523] warn_alloc+0x210/0x300
[ 586.997772][T19523] ? zone_watermark_ok_safe+0x230/0x230
[ 587.003596][T19523] ? _raw_spin_unlock+0x28/0x40
[ 587.008558][T19523] __vmalloc_node_range+0x662/0x1320
[ 587.013887][T19523] ? free_vm_area+0x50/0x50
[ 587.018391][T19523] ? _raw_spin_unlock+0x28/0x40
[ 587.023332][T19523] ? __kasan_kmalloc+0x8f/0xa0
[ 587.028127][T19523] __vmalloc_node_range+0x568/0x1320
[ 587.033607][T19523] ? hash_netiface_create+0x361/0xff0
[ 587.039086][T19523] ? __asan_memset+0x22/0x40
[ 587.043803][T19523] ? free_vm_area+0x50/0x50
[ 587.048324][T19523] ? kvmalloc_node+0x70/0x180
[ 587.053005][T19523] ? rcu_is_watching+0x15/0xb0
[ 587.057769][T19523] ? kvmalloc_node+0x70/0x180
[ 587.062444][T19523] ? trace_kmalloc+0x1f/0xa0
[ 587.067032][T19523] kvmalloc_node+0x13f/0x180
[ 587.071625][T19523] ? hash_netiface_create+0x361/0xff0
[ 587.077261][T19523] hash_netiface_create+0x361/0xff0
[ 587.082459][T19523] ? __lock_acquire+0x7c80/0x7c80
[ 587.088010][T19523] ? __nla_parse+0x40/0x50
[ 587.092428][T19523] ? hash_netport6_gc+0x570/0x570
[ 587.098020][T19523] ip_set_create+0xa87/0x18e0
[ 587.102795][T19523] ? ip_set_create+0x4b2/0x18e0
[ 587.107688][T19523] ? ip_set_protocol+0x5d0/0x5d0
[ 587.112638][T19523] ? trace_contention_end+0x39/0xe0
[ 587.117867][T19523] nfnetlink_rcv_msg+0xb49/0x1130
[ 587.123039][T19523] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 587.129168][T19523] ? nfnetlink_rcv_msg+0x20e/0x1130
[ 587.134478][T19523] ? nfnetlink_unbind+0x160/0x160
[ 587.139520][T19523] ? __dev_queue_xmit+0x1a64/0x35a0
[ 587.144717][T19523] ? __netlink_deliver_tap+0x5ab/0x830
[ 587.150622][T19523] ? netlink_deliver_tap+0x19c/0x1b0
[ 587.155917][T19523] ? netlink_unicast+0x72b/0x8c0
[ 587.160863][T19523] ? netlink_sendmsg+0x8c1/0xbe0
[ 587.165971][T19523] ? ____sys_sendmsg+0x5bf/0x950
[ 587.170933][T19523] ? ___sys_sendmsg+0x220/0x290
[ 587.175791][T19523] ? __se_sys_sendmsg+0x1a5/0x270
[ 587.180897][T19523] ? do_syscall_64+0x55/0xb0
[ 587.185501][T19523] netlink_rcv_skb+0x216/0x480
[ 587.190955][T19523] ? nfnetlink_unbind+0x160/0x160
[ 587.196276][T19523] ? netlink_ack+0x1110/0x1110
[ 587.201057][T19523] ? apparmor_capable+0x137/0x1a0
[ 587.206229][T19523] ? bpf_lsm_capable+0x9/0x10
[ 587.210929][T19523] ? security_capable+0x89/0xb0
[ 587.216270][T19523] nfnetlink_rcv+0x274/0x2180
[ 587.221166][T19523] ? __local_bh_enable_ip+0x12e/0x1c0
[ 587.227059][T19523] ? lockdep_hardirqs_on+0x98/0x150
[ 587.232472][T19523] ? __local_bh_enable_ip+0x12e/0x1c0
[ 587.238317][T19523] ? _local_bh_enable+0xa0/0xa0
[ 587.243197][T19523] ? __dev_queue_xmit+0x245/0x35a0
[ 587.248354][T19523] ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 587.254805][T19523] ? __dev_queue_xmit+0x245/0x35a0
[ 587.260196][T19523] ? ref_tracker_free+0x634/0x7d0
[ 587.265259][T19523] ? __copy_skb_header+0xa7/0x550
[ 587.270903][T19523] ? refcount_inc+0x70/0x70
[ 587.275751][T19523] ? __skb_clone+0x63/0x790
[ 587.280655][T19523] ? __skb_clone+0x480/0x790
[ 587.285571][T19523] ? __netlink_deliver_tap+0x7e8/0x830
[ 587.291051][T19523] ? netlink_deliver_tap+0x2e/0x1b0
[ 587.296427][T19523] ? __lock_acquire+0x7c80/0x7c80
[ 587.301453][T19523] ? netlink_deliver_tap+0x2e/0x1b0
[ 587.306740][T19523] netlink_unicast+0x750/0x8c0
[ 587.311594][T19523] netlink_sendmsg+0x8c1/0xbe0
[ 587.316362][T19523] ? netlink_getsockopt+0x580/0x580
[ 587.321596][T19523] ? aa_sock_msg_perm+0x94/0x150
[ 587.326557][T19523] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 587.331861][T19523] ? security_socket_sendmsg+0x80/0xa0
[ 587.337348][T19523] ? netlink_getsockopt+0x580/0x580
[ 587.343398][T19523] ____sys_sendmsg+0x5bf/0x950
[ 587.348527][T19523] ? __asan_memset+0x22/0x40
[ 587.353980][T19523] ? __sys_sendmsg_sock+0x30/0x30
[ 587.359289][T19523] ? __import_iovec+0x5f2/0x860
[ 587.364348][T19523] ? import_iovec+0x73/0xa0
[ 587.368905][T19523] ___sys_sendmsg+0x220/0x290
[ 587.373760][T19523] ? __sys_sendmsg+0x270/0x270
[ 587.378553][T19523] __se_sys_sendmsg+0x1a5/0x270
[ 587.383399][T19523] ? __x64_sys_sendmsg+0x80/0x80
[ 587.388368][T19523] ? lockdep_hardirqs_on+0x98/0x150
[ 587.393573][T19523] do_syscall_64+0x55/0xb0
[ 587.397990][T19523] ? clear_bhb_loop+0x40/0x90
[ 587.402662][T19523] ? clear_bhb_loop+0x40/0x90
[ 587.407341][T19523] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 587.413241][T19523] RIP: 0033:0x7f4f6e78e929
[ 587.417652][T19523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 587.437739][T19523] RSP: 002b:00007f4f6f577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 587.446179][T19523] RAX: ffffffffffffffda RBX: 00007f4f6e9b5fa0 RCX: 00007f4f6e78e929
[ 587.454515][T19523] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000009
[ 587.462618][T19523] RBP: 00007f4f6e810b39 R08: 0000000000000000 R09: 0000000000000000
[ 587.470617][T19523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 587.478675][T19523] R13: 0000000000000000 R14: 00007f4f6e9b5fa0 R15: 00007ffc6af4ff48
[ 587.487092][T19523] </TASK>
[ 587.490142][ C0] vkms_vblank_simulate: vblank timer overrun
[ 587.544363][T19523] Mem-Info:
[ 587.548410][T19523] active_anon:5301 inactive_anon:0 isolated_anon:0
[ 587.548410][T19523] active_file:1252 inactive_file:40135 isolated_file:0
[ 587.548410][T19523] unevictable:768 dirty:87 writeback:0
[ 587.548410][T19523] slab_reclaimable:10653 slab_unreclaimable:126115
[ 587.548410][T19523] mapped:24327 shmem:1414 pagetables:507
[ 587.548410][T19523] sec_pagetables:0 bounce:0
[ 587.548410][T19523] kernel_misc_reclaimable:0
[ 587.548410][T19523] free:1299869 free_pcp:11179 free_cma:0
[ 587.602936][T19523] Node 0 active_anon:21404kB inactive_anon:0kB active_file:5008kB inactive_file:160336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97308kB dirty:344kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10856kB pagetables:2028kB sec_pagetables:0kB all_unreclaimable? no
[ 587.666990][T19523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 587.668980][T17849] Bluetooth: hci2: command tx timeout
[ 587.698325][ C0] vkms_vblank_simulate: vblank timer overrun
[ 587.728594][T19523] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 587.743025][T19534] team0: Port device team_slave_0 added
[ 587.758443][T19523] lowmem_reserve[]: 0 2525 2526 2526 2526
[ 587.771667][T19523] Node 0 DMA32 free:1274892kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21160kB inactive_anon:0kB active_file:5008kB inactive_file:159028kB unevictable:1536kB writepending:340kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:36980kB local_pcp:17012kB free_cma:0kB
[ 587.802359][T19523] lowmem_reserve[]: 0 0 1 1 1
[ 587.807228][T19523] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 587.836601][T19534] team0: Port device team_slave_1 added
[ 587.838353][T19523] lowmem_reserve[]: 0 0 0 0 0
[ 587.847022][T19523] Node 1 Normal free:3909204kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8448kB local_pcp:1664kB free_cma:0kB
[ 587.880073][T19523] lowmem_reserve[]: 0 0 0 0 0
[ 587.884954][T19523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 587.898259][T19523] Node 0 DMA32: 1*4kB (E) 3*8kB (UME) 75*16kB (UM) 212*32kB (UME) 101*64kB (ME) 57*128kB (ME) 29*256kB (M) 15*512kB (UME) 19*1024kB (UME) 15*2048kB (UME) 290*4096kB (UM) = 1274892kB
[ 587.930915][T19523] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 587.943678][T19523] Node 1 Normal: 237*4kB (UME) 60*8kB (UME) 56*16kB (UME) 208*32kB (UME) 67*64kB (UE) 13*128kB (UME) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3909204kB
[ 588.039218][T19523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 588.060438][T19523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 588.075348][T19523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 588.085771][T19534] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 588.092745][T19534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 588.119139][T19523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 588.136199][T19523] 42786 total pagecache pages
[ 588.140944][T19523] 0 pages in swap cache
[ 588.145218][T19523] Free swap = 124472kB
[ 588.149475][T19523] Total swap = 124996kB
[ 588.153728][T19523] 2097051 pages RAM
[ 588.153798][T19534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 588.157650][T19523] 0 pages HighMem/MovableOnly
[ 588.157660][T19523] 416120 pages reserved
[ 588.157666][T19523] 0 pages cma reserved
[ 588.279420][T19534] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 588.317606][T19534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 588.402679][T19534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 588.464119][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5027'.
[ 588.682522][T19534] hsr_slave_0: entered promiscuous mode
[ 588.706549][T19586] loop3: detected capacity change from 0 to 2048
[ 588.713427][T19534] hsr_slave_1: entered promiscuous mode
[ 588.764999][T19534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 588.774445][T19534] Cannot create hsr debugfs directory
[ 588.807133][T19586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 589.554856][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 589.794166][T17849] Bluetooth: hci2: command tx timeout
[ 590.342010][ T58] hsr_slave_1: left promiscuous mode
[ 590.358903][ T58] bridge_slave_1: left allmulticast mode
[ 590.379262][ T58] bridge_slave_1: left promiscuous mode
[ 590.397545][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 590.432384][ T58] bridge_slave_0: left promiscuous mode
[ 590.442502][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 590.508007][ T58] pimreg (unregistering): left allmulticast mode
[ 591.459353][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 591.813266][ T58] team0 (unregistering): Port device team_slave_1 removed
[ 591.890066][T17849] Bluetooth: hci2: command tx timeout
[ 591.902144][ T58] team0 (unregistering): Port device team_slave_0 removed
[ 591.992801][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 592.082427][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 592.750429][ T58] bond0 (unregistering): Released all slaves
[ 593.466649][T19534] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 593.510932][T19534] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 593.552794][T19534] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 593.590028][T19534] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 593.964983][T17849] Bluetooth: hci2: command tx timeout
[ 593.983256][T19534] 8021q: adding VLAN 0 to HW filter on device bond0
[ 594.006729][T19534] 8021q: adding VLAN 0 to HW filter on device team0
[ 594.041937][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 594.049175][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 594.126362][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 594.133564][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 594.830277][T19534] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 595.020748][T19534] veth0_vlan: entered promiscuous mode
[ 595.057120][T19534] veth1_vlan: entered promiscuous mode
[ 595.151061][T19534] veth0_macvtap: entered promiscuous mode
[ 595.206486][T19534] veth1_macvtap: entered promiscuous mode
[ 595.285131][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 595.318017][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.334102][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 595.355047][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.375366][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 595.409596][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.451045][T19534] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 595.492210][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 595.527702][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.559117][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 595.591644][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.614754][T19534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 595.635592][T19534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 595.665828][T19534] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 595.703769][T19534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 595.744319][T19534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 595.762881][T19534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 595.799645][T19534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 596.014548][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 596.054138][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 596.181935][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 596.207306][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 599.055760][T19799] vlan2: entered allmulticast mode
[ 599.104750][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5091'.
[ 599.800777][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5101'.
[ 601.083621][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5129'.
[ 601.686564][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5139'.
[ 602.343264][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5151'.
[ 602.444275][T19935] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5152'.
[ 602.476185][T19935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5152'.
[ 602.793022][T19938] netlink: 'syz.3.5153': attribute type 6 has an invalid length.
[ 603.473694][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5162'.
[ 604.405676][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'.
[ 605.207080][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5182'.
[ 606.274767][T20030] tun0: tun_chr_ioctl cmd 1074025675
[ 606.285902][T20030] tun0: persist enabled
[ 607.272638][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5210'.
[ 608.085494][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5221'.
[ 609.525996][T20132] loop1: detected capacity change from 0 to 1024
[ 609.541682][T20132] EXT4-fs: Ignoring removed orlov option
[ 609.620506][T20132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 609.667502][T20132] EXT4-fs (loop1): shut down requested (0)
[ 609.753610][T20139] tun0: tun_chr_ioctl cmd 1074025675
[ 609.759180][T20139] tun0: persist enabled
[ 609.879197][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 610.033941][T20143] loop1: detected capacity change from 0 to 2048
[ 610.123235][T20143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 611.077930][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 611.262186][T20168] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5250'.
[ 611.347396][T20171] tun0: tun_chr_ioctl cmd 1074025675
[ 611.353042][T20171] tun0: persist enabled
[ 611.531416][T20181] loop1: detected capacity change from 0 to 2048
[ 611.555069][T20176] netlink: 'syz.2.5254': attribute type 5 has an invalid length.
[ 611.578073][T20181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 611.818234][T20196] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5262'.
[ 612.588018][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 612.855036][T20215] netlink: 'syz.2.5270': attribute type 5 has an invalid length.
[ 612.883086][T20221] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5272'.
[ 614.218437][T20249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5284'.
[ 614.240502][T20249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5284'.
[ 614.250151][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5284'.
[ 614.698879][T20263] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5291'.
[ 614.822746][T20267] loop1: detected capacity change from 0 to 2048
[ 614.875364][T20267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 614.938136][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5295'.
[ 614.947516][T20274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5295'.
[ 614.956685][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5295'.
[ 615.672359][T20281] loop3: detected capacity change from 0 to 256
[ 615.869836][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 616.304689][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5304'.
[ 616.314306][T20300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5304'.
[ 616.325193][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5304'.
[ 616.983535][T20311] syz.0.5309[20311] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 617.008341][T20311] syz.0.5309[20311] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 617.718540][T20336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5319'.
[ 617.738962][T20336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5319'.
[ 617.888299][T20340] loop3: detected capacity change from 0 to 1024
[ 617.897109][T20340] EXT4-fs: Ignoring removed orlov option
[ 618.058444][T20340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 618.123167][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 619.252922][T20366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5330'.
[ 619.273365][T20366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5330'.
[ 621.491719][T20431] loop3: detected capacity change from 0 to 1024
[ 621.508707][T20431] EXT4-fs: Ignoring removed nobh option
[ 621.524154][T20431] EXT4-fs: Ignoring removed bh option
[ 621.539467][T20431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 621.589924][T20431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 621.616496][ T28] audit: type=1800 audit(1750144388.153:6314): pid=20431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5355" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 622.340646][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 622.814416][T20475] loop3: detected capacity change from 0 to 512
[ 622.850274][T20475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 622.938268][T20475] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 622.964400][T20475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[ 622.972703][T20475] System zones: 0-1, 15-15, 18-18, 34-34
[ 622.980383][T20475] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 622.990078][T20475] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[ 622.999904][T20475] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 623.014789][T20475] EXT4-fs (loop3): Cannot turn on quotas: error -22
[ 623.088418][T20475] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5373: bg 0: block 40: padding at end of block bitmap is not set
[ 623.174476][T20475] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem
[ 623.210404][T20475] EXT4-fs (loop3): 1 truncate cleaned up
[ 623.217421][T20475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 624.017477][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 624.529286][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 626.694942][ T28] audit: type=1326 audit(1750144393.243:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.745746][ T28] audit: type=1326 audit(1750144393.243:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.796717][ T28] audit: type=1326 audit(1750144393.273:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.890947][ T28] audit: type=1326 audit(1750144393.283:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.919157][ T28] audit: type=1326 audit(1750144393.283:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.942332][ T28] audit: type=1326 audit(1750144393.313:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 626.966009][ T28] audit: type=1326 audit(1750144393.313:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 627.058502][ T28] audit: type=1326 audit(1750144393.313:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 627.109520][ T28] audit: type=1326 audit(1750144393.373:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 627.157085][ T28] audit: type=1326 audit(1750144393.373:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20567 comm="syz.0.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ce18e929 code=0x7ffc0000
[ 627.181268][T20579] netlink: 'syz.0.5412': attribute type 5 has an invalid length.
[ 627.842741][T20605] netlink: 'syz.3.5424': attribute type 5 has an invalid length.
[ 628.547802][T20630] netlink: 'syz.2.5435': attribute type 5 has an invalid length.
[ 630.919870][T20707] loop1: detected capacity change from 0 to 2048
[ 630.985979][T20707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 631.243750][T20716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 631.266277][T20716] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 474 with error 28
[ 631.279667][T20716] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 631.279667][T20716]
[ 631.290262][T20716] EXT4-fs (loop1): Total free blocks count 0
[ 631.296797][T20716] EXT4-fs (loop1): Free/Dirty block details
[ 631.302945][T20716] EXT4-fs (loop1): free_blocks=2415919104
[ 631.310332][T20716] EXT4-fs (loop1): dirty_blocks=480
[ 631.316139][T20716] EXT4-fs (loop1): Block reservation details
[ 631.322335][T20716] EXT4-fs (loop1): i_reserved_data_blocks=30
[ 631.475960][T20725] xt_hashlimit: max too large, truncated to 1048576
[ 631.703215][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 633.396749][T20764] loop3: detected capacity change from 0 to 2048
[ 633.430727][T20764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 633.612879][T20764] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 633.613061][T20764] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 218 with error 28
[ 633.613086][T20764] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 633.613086][T20764]
[ 633.613100][T20764] EXT4-fs (loop3): Total free blocks count 0
[ 633.613112][T20764] EXT4-fs (loop3): Free/Dirty block details
[ 633.613127][T20764] EXT4-fs (loop3): free_blocks=2415919104
[ 633.613142][T20764] EXT4-fs (loop3): dirty_blocks=224
[ 633.613155][T20764] EXT4-fs (loop3): Block reservation details
[ 633.613166][T20764] EXT4-fs (loop3): i_reserved_data_blocks=14
[ 633.767448][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 635.584602][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'.
[ 635.646310][T20813] loop3: detected capacity change from 0 to 1024
[ 635.686992][T20813] EXT4-fs: Ignoring removed nobh option
[ 635.692611][T20813] EXT4-fs: Ignoring removed bh option
[ 635.745360][T20813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 635.953101][T20813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 635.996104][ T28] kauditd_printk_skb: 4 callbacks suppressed
[ 635.996118][ T28] audit: type=1800 audit(1750144402.543:6329): pid=20813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5506" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 636.903031][ T28] audit: type=1326 audit(1750144403.443:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 636.981939][ T28] audit: type=1326 audit(1750144403.473:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 636.982996][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 637.016090][ T28] audit: type=1326 audit(1750144403.483:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 637.064884][ T28] audit: type=1326 audit(1750144403.483:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 637.194258][ T28] audit: type=1326 audit(1750144403.483:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 637.264502][ T28] audit: type=1326 audit(1750144403.483:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 637.303632][ T28] audit: type=1326 audit(1750144403.483:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20835 comm="syz.2.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 638.333129][ T28] audit: type=1326 audit(1750144404.873:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.2.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 638.418041][T20866] loop3: detected capacity change from 0 to 1024
[ 638.445134][T20866] EXT4-fs: Ignoring removed nobh option
[ 638.453053][ T28] audit: type=1326 audit(1750144404.873:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.2.5526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 638.523750][T20866] EXT4-fs: Ignoring removed bh option
[ 638.567272][T20866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 638.662201][T20866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 638.676605][T20871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5527'.
[ 639.345658][T19018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 639.740517][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5538'.
[ 639.938286][T20909] loop3: detected capacity change from 0 to 1024
[ 639.946404][T20909] EXT4-fs: Ignoring removed nobh option
[ 639.952013][T20909] EXT4-fs: Ignoring removed bh option
[ 639.960943][T20909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 639.996977][T20909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 640.748164][T20939] loop1: detected capacity change from 0 to 2048
[ 640.800297][T20939] loop1: p1 < > p4
[ 640.812839][T20939] loop1: p4 size 8388608 extends beyond EOD, truncated
[ 641.017659][T19533] udevd[19533]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[ 641.038915][T20714] udevd[20714]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 641.104466][T19533] udevd[19533]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[ 641.116391][T20714] udevd[20714]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 641.260920][T20955] loop1: detected capacity change from 0 to 2048
[ 641.332065][T20955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 641.966743][ T5766] Bluetooth: hci4: command 0x0406 tx timeout
[ 642.079456][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 643.272486][ T28] kauditd_printk_skb: 5 callbacks suppressed
[ 643.272501][ T28] audit: type=1326 audit(1750144409.813:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.1.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 643.329689][ T28] audit: type=1326 audit(1750144409.843:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.1.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 643.361684][ T28] audit: type=1326 audit(1750144409.843:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.1.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 643.385772][T20979] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5568'.
[ 643.407664][ T28] audit: type=1326 audit(1750144409.843:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.1.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 643.436787][ T28] audit: type=1326 audit(1750144409.843:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.1.5567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 644.668156][T21004] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5578'.
[ 646.592127][T21028] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5588'.
[ 647.741838][T21049] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5597'.
[ 647.816185][ T28] audit: type=1326 audit(1750144414.363:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 647.842235][ T28] audit: type=1326 audit(1750144414.363:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 647.867062][ T28] audit: type=1326 audit(1750144414.383:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 647.900278][ T28] audit: type=1326 audit(1750144414.383:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 647.939428][ T28] audit: type=1326 audit(1750144414.383:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21050 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15bd58e929 code=0x7ffc0000
[ 648.025722][T21057] futex_wake_op: syz.1.5601 tries to shift op by -1; fix this program
[ 649.022470][T21071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5606'.
[ 650.129953][T21089] futex_wake_op: syz.1.5614 tries to shift op by -1; fix this program
[ 650.997558][T21093] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5615'.
[ 652.089420][T21109] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5622'.
[ 652.175460][T21113] futex_wake_op: syz.1.5625 tries to shift op by -1; fix this program
[ 653.479407][T21135] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5633'.
[ 653.553391][T21137] loop1: detected capacity change from 0 to 2048
[ 653.576728][T21137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 654.493307][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 654.988476][T21161] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5642'.
[ 658.059058][T21217] loop1: detected capacity change from 0 to 2048
[ 658.080259][T21217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 658.160609][T21222] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5665'.
[ 658.289089][T21222] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5665'.
[ 658.960397][T21222] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5665'.
[ 659.052055][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 659.315186][T21243] futex_wake_op: syz.1.5671 tries to shift op by -1; fix this program
[ 659.400385][T21245] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5672'.
[ 659.464967][T21245] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5672'.
[ 659.552152][T21245] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5672'.
[ 659.721487][T21250] loop1: detected capacity change from 0 to 2048
[ 659.990869][T21250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 660.003690][T21250] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 660.308996][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 661.381333][T21270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5679'.
[ 661.426449][T21270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5679'.
[ 661.492301][T21270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5679'.
[ 661.553824][T21278] futex_wake_op: syz.1.5680 tries to shift op by -1; fix this program
[ 661.900811][T21280] loop1: detected capacity change from 0 to 2048
[ 662.032924][T21280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 662.045756][T21280] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 662.485456][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 662.671466][T21290] loop1: detected capacity change from 0 to 2048
[ 662.697179][T21290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 662.876475][T21296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5686'.
[ 662.931172][T21296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5686'.
[ 663.586748][T21296] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5686'.
[ 663.701287][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 664.046326][T21319] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5693'.
[ 664.079701][T21319] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5693'.
[ 664.145876][T21319] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5693'.
[ 664.219339][T21324] loop1: detected capacity change from 0 to 2048
[ 664.245059][T21324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 665.209616][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 665.530374][T21347] loop1: detected capacity change from 0 to 2048
[ 665.556893][T21347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 666.545910][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 670.929414][T21454] futex_wake_op: syz.1.5742 tries to shift op by -1; fix this program
[ 671.308032][T21459] loop1: detected capacity change from 0 to 2048
[ 671.472441][T21459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 671.485125][T21459] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 671.903802][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 671.973231][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5744'.
[ 672.028668][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5744'.
[ 672.147089][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5744'.
[ 673.241237][T21501] loop1: detected capacity change from 0 to 128
[ 673.760070][T21521] loop1: detected capacity change from 0 to 128
[ 673.990786][ T28] kauditd_printk_skb: 9 callbacks suppressed
[ 673.990799][ T28] audit: type=1326 audit(1750144440.533:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21524 comm="syz.1.5771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6e78e929 code=0x0
[ 676.871577][T21577] futex_wake_op: syz.2.5794 tries to shift op by -1; fix this program
[ 678.154384][ T28] audit: type=1326 audit(1750144444.703:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21593 comm="syz.2.5801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15bd58e929 code=0x0
[ 678.699057][T21605] futex_wake_op: syz.1.5805 tries to shift op by -1; fix this program
[ 679.042663][T21607] loop1: detected capacity change from 0 to 2048
[ 679.148687][T21607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 679.161599][T21607] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 679.659009][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 680.109676][ T28] audit: type=1326 audit(1750144446.653:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21624 comm="syz.2.5812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15bd58e929 code=0x0
[ 680.180663][ T28] audit: type=1326 audit(1750144446.723:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21631 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.219663][ T28] audit: type=1326 audit(1750144446.723:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21631 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.242772][ T28] audit: type=1326 audit(1750144446.753:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21631 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.265763][ T28] audit: type=1326 audit(1750144446.753:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21631 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.292907][ T28] audit: type=1326 audit(1750144446.753:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21631 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.735574][ T28] audit: type=1326 audit(1750144447.283:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.762247][ T28] audit: type=1326 audit(1750144447.283:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.785532][ T28] audit: type=1326 audit(1750144447.303:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 680.811235][ T28] audit: type=1326 audit(1750144447.303:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.1.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6e78e929 code=0x7ffc0000
[ 683.425102][T21701] loop1: detected capacity change from 0 to 2048
[ 683.455083][T21701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 684.377605][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 684.469958][T21716] loop1: detected capacity change from 0 to 1024
[ 684.485684][T21716] EXT4-fs: inline encryption not supported
[ 684.506693][T21716] EXT4-fs: Ignoring removed bh option
[ 684.542805][T21716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 684.630059][T19334] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 685.959677][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 687.402831][T21771] loop1: detected capacity change from 0 to 512
[ 687.410208][T21771] EXT4-fs: Ignoring removed mblk_io_submit option
[ 687.417439][T21771] ext4: Unknown parameter 'seclabel'
[ 687.457196][T20714] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 687.882832][T21790] futex_wake_op: syz.1.5876 tries to shift op by -1; fix this program
[ 689.699286][T21809] loop1: detected capacity change from 0 to 256
[ 689.754588][T21809] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 690.584644][T21814] futex_wake_op: syz.2.5885 tries to shift op by -1; fix this program
[ 692.828031][T21831] futex_wake_op: syz.1.5892 tries to shift op by -1; fix this program
[ 694.062628][T21852] futex_wake_op: syz.1.5900 tries to shift op by -1; fix this program
[ 695.370263][T21869] futex_wake_op: syz.1.5907 tries to shift op by -1; fix this program
[ 696.479284][ T28] kauditd_printk_skb: 7 callbacks suppressed
[ 696.479297][ T28] audit: type=1326 audit(1750144463.023:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21876 comm="syz.1.5910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6e78e929 code=0x0
[ 747.399384][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 800.514434][ T29] INFO: task kworker/1:5:5841 blocked for more than 143 seconds.
[ 800.522252][ T29] Not tainted 6.6.93-syzkaller #0
[ 800.527882][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 800.537096][ T29] task:kworker/1:5 state:D stack:24080 pid:5841 ppid:2 flags:0x00004000
[ 800.546402][ T29] Workqueue: events rfkill_global_led_trigger_worker
[ 800.553107][ T29] Call Trace:
[ 800.556535][ T29] <TASK>
[ 800.559484][ T29] __schedule+0x14e2/0x4580
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 800.564083][ T29] ? mark_lock+0x94/0x320
[ 800.568437][ T29] ? asan.module_dtor+0x20/0x20
[ 800.573331][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 800.578651][ T29] schedule+0xbd/0x170
[ 800.582790][ T29] schedule_preempt_disabled+0x13/0x20
[ 800.588339][ T29] __mutex_lock+0x6b7/0xcc0
[ 800.592870][ T29] ? __mutex_lock+0x4e8/0xcc0
[ 800.597684][ T29] ? rfkill_global_led_trigger_worker+0x27/0xd0
[ 800.603975][ T29] ? mutex_lock_nested+0x20/0x20
[ 800.609009][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 800.624112][ T29] ? read_lock_is_recursive+0x20/0x20
[ 800.629568][ T29] ? process_scheduled_works+0x957/0x15b0
[ 800.660518][ T29] rfkill_global_led_trigger_worker+0x27/0xd0
[ 800.670890][ T29] ? process_scheduled_works+0x957/0x15b0
[ 800.677016][ T29] process_scheduled_works+0xa45/0x15b0
[ 800.682628][ T29] ? assign_work+0x400/0x400
[ 800.687363][ T29] ? assign_work+0x39e/0x400
[ 800.691984][ T29] worker_thread+0xa55/0xfc0
[ 800.696720][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 800.702639][ T29] ? _raw_spin_unlock+0x40/0x40
[ 800.707571][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 800.713494][ T29] kthread+0x2fa/0x390
[ 800.717691][ T29] ? pr_cont_work+0x560/0x560
[ 800.722385][ T29] ? kthread_blkcg+0xd0/0xd0
[ 800.727054][ T29] ret_from_fork+0x48/0x80
[ 800.731480][ T29] ? kthread_blkcg+0xd0/0xd0
[ 800.736246][ T29] ret_from_fork_asm+0x11/0x20
[ 800.741036][ T29] </TASK>
[ 800.744200][ T29] INFO: task syz.0.5540:20901 blocked for more than 143 seconds.
[ 800.751927][ T29] Not tainted 6.6.93-syzkaller #0
[ 800.757539][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 800.767100][ T29] task:syz.0.5540 state:D stack:24976 pid:20901 ppid:17846 flags:0x00004006
[ 800.776427][ T29] Call Trace:
[ 800.779718][ T29] <TASK>
[ 800.782690][ T29] __schedule+0x14e2/0x4580
[ 800.787292][ T29] ? asan.module_dtor+0x20/0x20
[ 800.792184][ T29] ? __mutex_lock+0x6b2/0xcc0
[ 800.797146][ T29] ? __mutex_trylock_common+0x84/0x250
[ 800.802640][ T29] ? trace_raw_output_contention_end+0xd0/0xd0
[ 800.808894][ T29] schedule+0xbd/0x170
[ 800.812989][ T29] schedule_preempt_disabled+0x13/0x20
[ 800.818674][ T29] __mutex_lock+0x6b7/0xcc0
[ 800.823207][ T29] ? __mutex_lock+0x4e8/0xcc0
[ 800.827996][ T29] ? nfc_rfkill_set_block+0x50/0x2e0
[ 800.833304][ T29] ? mutex_lock_nested+0x20/0x20
[ 800.838327][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 800.843537][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 800.849556][ T29] ? _raw_spin_unlock+0x40/0x40
[ 800.854511][ T29] ? nfc_unregister_device+0x2a0/0x2a0
[ 800.859986][ T29] nfc_rfkill_set_block+0x50/0x2e0
[ 800.865163][ T29] ? nfc_unregister_device+0x2a0/0x2a0
[ 800.870667][ T29] rfkill_set_block+0x1c6/0x420
[ 800.875602][ T29] rfkill_fop_write+0x45c/0x570
[ 800.880466][ T29] ? end_current_label_crit_section+0x149/0x170
[ 800.886786][ T29] ? rfkill_fop_read+0x4b0/0x4b0
[ 800.891759][ T29] ? fsnotify_perm+0x5d/0x5e0
[ 800.896519][ T29] ? security_file_permission+0x79/0xa0
[ 800.902077][ T29] ? rfkill_fop_read+0x4b0/0x4b0
[ 800.907171][ T29] vfs_write+0x288/0x940
[ 800.912059][ T29] ? file_end_write+0x250/0x250
[ 800.917013][ T29] ? __fget_files+0x28/0x4d0
[ 800.921613][ T29] ? __fget_files+0x44a/0x4d0
[ 800.926353][ T29] ? __fdget_pos+0x1d8/0x330
[ 800.931037][ T29] ? ksys_write+0x75/0x250
[ 800.935559][ T29] ksys_write+0x147/0x250
[ 800.939909][ T29] ? __ia32_sys_read+0x90/0x90
[ 800.944774][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 800.949985][ T29] do_syscall_64+0x55/0xb0
[ 800.954537][ T29] ? clear_bhb_loop+0x40/0x90
[ 800.959226][ T29] ? clear_bhb_loop+0x40/0x90
[ 800.964059][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 800.969968][ T29] RIP: 0033:0x7f47ce18e929
[ 800.974443][ T29] RSP: 002b:00007f47cf090038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 800.982973][ T29] RAX: ffffffffffffffda RBX: 00007f47ce3b5fa0 RCX: 00007f47ce18e929
[ 800.991117][ T29] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a
[ 800.999284][ T29] RBP: 00007f47ce210b39 R08: 0000000000000000 R09: 0000000000000000
[ 801.007599][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 801.015765][ T29] R13: 0000000000000000 R14: 00007f47ce3b5fa0 R15: 00007ffdfd04a978
[ 801.023757][ T29] </TASK>
[ 801.026976][ T29] INFO: task syz.3.5541:20903 blocked for more than 143 seconds.
[ 801.034773][ T29] Not tainted 6.6.93-syzkaller #0
[ 801.040335][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 801.049071][ T29] task:syz.3.5541 state:D stack:25800 pid:20903 ppid:19018 flags:0x00004006
[ 801.058443][ T29] Call Trace:
[ 801.061718][ T29] <TASK>
[ 801.064788][ T29] __schedule+0x14e2/0x4580
[ 801.069314][ T29] ? __kernfs_remove+0x720/0x840
[ 801.074630][ T29] ? asan.module_dtor+0x20/0x20
[ 801.079501][ T29] ? __mutex_lock+0x6b2/0xcc0
[ 801.084326][ T29] ? __mutex_trylock_common+0x84/0x250
[ 801.089796][ T29] ? trace_raw_output_contention_end+0xd0/0xd0
[ 801.096025][ T29] schedule+0xbd/0x170
[ 801.100102][ T29] schedule_preempt_disabled+0x13/0x20
[ 801.105673][ T29] __mutex_lock+0x6b7/0xcc0
[ 801.110205][ T29] ? __mutex_lock+0x4e8/0xcc0
[ 801.114967][ T29] ? rfkill_unregister+0xc8/0x220
[ 801.119999][ T29] ? mutex_lock_nested+0x20/0x20
[ 801.124990][ T29] ? kill_device+0x160/0x160
[ 801.129585][ T29] ? nfc_genl_device_removed+0x22e/0x320
[ 801.135299][ T29] ? destroy_workqueue+0x898/0xf20
[ 801.140419][ T29] ? nfc_genl_setup_device_added+0x320/0x320
[ 801.146445][ T29] ? destroy_workqueue+0xd80/0xf20
[ 801.151565][ T29] ? destroy_workqueue+0x898/0xf20
[ 801.156780][ T29] rfkill_unregister+0xc8/0x220
[ 801.161658][ T29] nfc_unregister_device+0x96/0x2a0
[ 801.166955][ T29] ? virtual_ncidev_open+0x1a0/0x1a0
[ 801.172279][ T29] virtual_ncidev_close+0x59/0x90
[ 801.177509][ T29] __fput+0x234/0x970
[ 801.181523][ T29] task_work_run+0x1ce/0x250
[ 801.186193][ T29] ? task_work_cancel+0x240/0x240
[ 801.191234][ T29] ? task_work_add+0x3a3/0x440
[ 801.196098][ T29] get_signal+0x1235/0x1400
[ 801.200628][ T29] ? fput+0x15b/0x1a0
[ 801.204682][ T29] ? do_preadv+0x283/0x330
[ 801.209110][ T29] arch_do_signal_or_restart+0x96/0x780
[ 801.214743][ T29] ? get_sigframe_size+0x20/0x20
[ 801.219698][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 801.225750][ T29] ? exit_to_user_mode_loop+0x3b/0x110
[ 801.231333][ T29] exit_to_user_mode_loop+0x70/0x110
[ 801.236699][ T29] exit_to_user_mode_prepare+0xb1/0x140
[ 801.242260][ T29] syscall_exit_to_user_mode+0x1a/0x50
[ 801.247976][ T29] do_syscall_64+0x61/0xb0
[ 801.252524][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.257268][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.261969][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 801.267954][ T29] RIP: 0033:0x7f4be8f8e929
[ 801.272376][ T29] RSP: 002b:00007f4be9dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 801.280896][ T29] RAX: fffffffffffffff2 RBX: 00007f4be91b5fa0 RCX: 00007f4be8f8e929
[ 801.289001][ T29] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000006
[ 801.297102][ T29] RBP: 00007f4be9010b39 R08: 00000000fffffff9 R09: 0000000000000000
[ 801.305226][ T29] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[ 801.313236][ T29] R13: 0000000000000000 R14: 00007f4be91b5fa0 R15: 00007ffdb706b798
[ 801.323643][ T29] </TASK>
[ 801.327184][ T29] INFO: task syz-executor:21166 blocked for more than 144 seconds.
[ 801.335438][ T29] Not tainted 6.6.93-syzkaller #0
[ 801.341007][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 801.349963][ T29] task:syz-executor state:D stack:27688 pid:21166 ppid:1 flags:0x00004000
[ 801.359408][ T29] Call Trace:
[ 801.362707][ T29] <TASK>
[ 801.365801][ T29] __schedule+0x14e2/0x4580
[ 801.370358][ T29] ? asan.module_dtor+0x20/0x20
[ 801.375302][ T29] ? __mutex_lock+0x6b2/0xcc0
[ 801.379996][ T29] ? __mutex_trylock_common+0x84/0x250
[ 801.385618][ T29] ? trace_raw_output_contention_end+0xd0/0xd0
[ 801.391798][ T29] schedule+0xbd/0x170
[ 801.396126][ T29] schedule_preempt_disabled+0x13/0x20
[ 801.401599][ T29] __mutex_lock+0x6b7/0xcc0
[ 801.406257][ T29] ? __mutex_lock+0x4e8/0xcc0
[ 801.410947][ T29] ? rfkill_register+0x37/0x8e0
[ 801.415867][ T29] ? mutex_lock_nested+0x20/0x20
[ 801.420830][ T29] ? device_initialize+0x24b/0x440
[ 801.426036][ T29] rfkill_register+0x37/0x8e0
[ 801.430737][ T29] hci_register_dev+0x3f5/0x890
[ 801.435711][ T29] vhci_create_device+0x38b/0x6e0
[ 801.440755][ T29] vhci_write+0x3b5/0x470
[ 801.445206][ T29] vfs_write+0x43b/0x940
[ 801.449463][ T29] ? file_end_write+0x250/0x250
[ 801.454416][ T29] ? __fdget_pos+0x1d8/0x330
[ 801.459021][ T29] ksys_write+0x147/0x250
[ 801.463347][ T29] ? __ia32_sys_read+0x90/0x90
[ 801.468175][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 801.473382][ T29] do_syscall_64+0x55/0xb0
[ 801.477877][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.482555][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.487317][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 801.493232][ T29] RIP: 0033:0x7f471398d3a0
[ 801.497736][ T29] RSP: 002b:00007ffdd2424eb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 801.506212][ T29] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f471398d3a0
[ 801.514324][ T29] RDX: 0000000000000002 RSI: 00007ffdd2424eca RDI: 00000000000000ca
[ 801.522301][ T29] RBP: 00007f4713bb6738 R08: 0000000000000000 R09: 00007f47146ed6c0
[ 801.530312][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 801.538344][ T29] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[ 801.546408][ T29] </TASK>
[ 801.549452][ T29] INFO: task syz-executor:21167 blocked for more than 144 seconds.
[ 801.557398][ T29] Not tainted 6.6.93-syzkaller #0
[ 801.562923][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 801.571648][ T29] task:syz-executor state:D stack:27816 pid:21167 ppid:1 flags:0x00004000
[ 801.580937][ T29] Call Trace:
[ 801.584289][ T29] <TASK>
[ 801.587232][ T29] __schedule+0x14e2/0x4580
[ 801.591747][ T29] ? __lock_acquire+0x7c80/0x7c80
[ 801.596869][ T29] ? asan.module_dtor+0x20/0x20
[ 801.601727][ T29] ? __mutex_lock+0x6b2/0xcc0
[ 801.606476][ T29] ? __mutex_trylock_common+0x84/0x250
[ 801.611967][ T29] ? trace_raw_output_contention_end+0xd0/0xd0
[ 801.618228][ T29] schedule+0xbd/0x170
[ 801.622482][ T29] schedule_preempt_disabled+0x13/0x20
[ 801.628080][ T29] __mutex_lock+0x6b7/0xcc0
[ 801.632596][ T29] ? __mutex_lock+0x4e8/0xcc0
[ 801.637339][ T29] ? rfkill_register+0x37/0x8e0
[ 801.642192][ T29] ? mutex_lock_nested+0x20/0x20
[ 801.647185][ T29] ? device_initialize+0x24b/0x440
[ 801.652302][ T29] rfkill_register+0x37/0x8e0
[ 801.657065][ T29] hci_register_dev+0x3f5/0x890
[ 801.661941][ T29] vhci_create_device+0x38b/0x6e0
[ 801.667957][ T29] vhci_write+0x3b5/0x470
[ 801.672329][ T29] vfs_write+0x43b/0x940
[ 801.676694][ T29] ? file_end_write+0x250/0x250
[ 801.681576][ T29] ? __fdget_pos+0x1d8/0x330
[ 801.686236][ T29] ksys_write+0x147/0x250
[ 801.690581][ T29] ? __ia32_sys_read+0x90/0x90
[ 801.695446][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 801.700654][ T29] do_syscall_64+0x55/0xb0
[ 801.705152][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.709849][ T29] ? clear_bhb_loop+0x40/0x90
[ 801.714655][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 801.720583][ T29] RIP: 0033:0x7fc25518d3a0
[ 801.725119][ T29] RSP: 002b:00007ffe22540088 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 801.733563][ T29] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc25518d3a0
[ 801.741771][ T29] RDX: 0000000000000002 RSI: 00007ffe2254009a RDI: 00000000000000ca
[ 801.749795][ T29] RBP: 00007fc2553b6738 R08: 0000000000000000 R09: 00007fc255eed6c0
[ 801.757848][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 801.765857][ T29] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[ 801.773826][ T29] </TASK>
[ 801.777000][ T29]
[ 801.777000][ T29] Showing all locks held in the system:
[ 801.784998][ T29] 1 lock held by khungtaskd/29:
[ 801.789846][ T29] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 801.799847][ T29] 5 locks held by kworker/u4:9/3456:
[ 801.805202][ T29] 2 locks held by getty/5534:
[ 801.809884][ T29] #0: ffff88823bcce8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 801.819824][ T29] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380
[ 801.829998][ T29] 3 locks held by kworker/1:5/5841:
[ 801.835255][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 801.846332][ T29] #1: ffffc9000488fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 801.859882][ T29] #2: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[ 801.871264][ T29] 2 locks held by syz.0.5540/20901:
[ 801.876641][ T29] #0: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a2/0x570
[ 801.886822][ T29] #1: ffff88801cbfe100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2e0
[ 801.896589][ T29] 2 locks held by syz.3.5541/20903:
[ 801.901785][ T29] #0: ffff88801cbfe100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0
[ 801.911581][ T29] #1: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc8/0x220
[ 801.921953][ T29] 2 locks held by syz-executor/21166:
[ 801.927369][ T29] #0: ffff88805dd5f918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0
[ 801.937532][ T29] #1: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0
[ 801.947574][ T29] 2 locks held by syz-executor/21167:
[ 801.952956][ T29] #0: ffff888076d94118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0
[ 801.963133][ T29] #1: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0
[ 801.973131][ T29] 3 locks held by syz.2.5899/21845:
[ 801.978392][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 801.986902][ T29] #1: ffff888022fbe100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0xa1/0x320
[ 801.996582][ T29] #2: ffffffff8e289a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0
[ 802.006585][ T29] 1 lock held by syz.1.5912/21882:
[ 802.011692][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.020203][ T29] 1 lock held by syz-executor/21885:
[ 802.025545][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.034227][ T29] 1 lock held by syz-executor/21887:
[ 802.039516][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.048014][ T29] 1 lock held by syz-executor/21890:
[ 802.053293][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.061803][ T29] 1 lock held by syz-executor/21891:
[ 802.067218][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.075945][ T29] 1 lock held by syz-executor/21898:
[ 802.081258][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.089772][ T29] 1 lock held by syz-executor/21900:
[ 802.095146][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.103623][ T29] 1 lock held by syz-executor/21903:
[ 802.108972][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.117507][ T29] 1 lock held by syz-executor/21904:
[ 802.122772][ T29] #0: ffffffff8d4c42a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370
[ 802.131427][ T29]
[ 802.133758][ T29] =============================================
[ 802.133758][ T29]
[ 802.142236][ T29] NMI backtrace for cpu 0
[ 802.146573][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.93-syzkaller #0
[ 802.154376][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 802.164415][ T29] Call Trace:
[ 802.167680][ T29] <TASK>
[ 802.170596][ T29] dump_stack_lvl+0x16c/0x230
[ 802.175350][ T29] ? preempt_count_add+0x91/0x1a0
[ 802.180709][ T29] ? show_regs_print_info+0x20/0x20
[ 802.185894][ T29] ? load_image+0x3b0/0x3b0
[ 802.190382][ T29] nmi_cpu_backtrace+0x39b/0x3d0
[ 802.195318][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 802.201476][ T29] ? _printk+0xd0/0x110
[ 802.205627][ T29] ? load_image+0x3b0/0x3b0
[ 802.210127][ T29] ? load_image+0x3b0/0x3b0
[ 802.214622][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 802.220686][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 802.226665][ T29] watchdog+0xf41/0xf80
[ 802.230816][ T29] ? watchdog+0x1e1/0xf80
[ 802.235140][ T29] kthread+0x2fa/0x390
[ 802.239194][ T29] ? hungtask_pm_notify+0x90/0x90
[ 802.244220][ T29] ? kthread_blkcg+0xd0/0xd0
[ 802.248805][ T29] ret_from_fork+0x48/0x80
[ 802.253220][ T29] ? kthread_blkcg+0xd0/0xd0
[ 802.257797][ T29] ret_from_fork_asm+0x11/0x20
[ 802.262567][ T29] </TASK>
[ 802.265791][ T29] Sending NMI from CPU 0 to CPUs 1:
[ 802.271015][ C1] NMI backtrace for cpu 1
[ 802.271037][ C1] CPU: 1 PID: 3456 Comm: kworker/u4:9 Not tainted 6.6.93-syzkaller #0
[ 802.271053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 802.271063][ C1] Workqueue: bat_events batadv_nc_worker
[ 802.271089][ C1] RIP: 0010:__lock_acquire+0x681/0x7c80
[ 802.271109][ C1] Code: 83 3d 22 b0 81 15 00 0f 84 ad 01 00 00 31 db 48 81 c3 c9 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 b4 62 00 00 <45> 84 f6 0f 84 76 05 00 00 0f b6 1b 48 8b 44 24 48 42 0f b6 04 00
[ 802.271123][ C1] RSP: 0018:ffffc9000c7477c0 EFLAGS: 00000046
[ 802.271135][ C1] RAX: 0000000000000000 RBX: ffffffff906edf79 RCX: ffffffff81670411
[ 802.271147][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90d84520
[ 802.271157][ C1] RBP: ffffc9000c747a08 R08: dffffc0000000000 R09: 1ffffffff21b08a4
[ 802.271168][ C1] R10: dffffc0000000000 R11: fffffbfff21b08a5 R12: ffff88802d6264c4
[ 802.271180][ C1] R13: ffff88802d625a00 R14: 0000000000000002 R15: ffff88802d626550
[ 802.271191][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 802.271204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 802.271215][ C1] CR2: 0000558c962cd000 CR3: 000000000cb30000 CR4: 00000000003506e0
[ 802.271228][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 802.271238][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 802.271247][ C1] Call Trace:
[ 802.271252][ C1] <TASK>
[ 802.271270][ C1] ? verify_lock_unused+0x140/0x140
[ 802.271290][ C1] ? verify_lock_unused+0x140/0x140
[ 802.271311][ C1] lock_acquire+0x197/0x410
[ 802.271327][ C1] ? batadv_nc_worker+0xd2/0x610
[ 802.271350][ C1] ? batadv_nc_worker+0xd2/0x610
[ 802.271371][ C1] ? read_lock_is_recursive+0x20/0x20
[ 802.271388][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 802.271407][ C1] ? batadv_nc_worker+0xd2/0x610
[ 802.271427][ C1] batadv_nc_worker+0xef/0x610
[ 802.271448][ C1] ? batadv_nc_worker+0xd2/0x610
[ 802.271470][ C1] ? process_scheduled_works+0x957/0x15b0
[ 802.271488][ C1] process_scheduled_works+0xa45/0x15b0
[ 802.271516][ C1] ? assign_work+0x400/0x400
[ 802.271536][ C1] ? assign_work+0x39e/0x400
[ 802.271554][ C1] worker_thread+0xa55/0xfc0
[ 802.271581][ C1] kthread+0x2fa/0x390
[ 802.271595][ C1] ? pr_cont_work+0x560/0x560
[ 802.271611][ C1] ? kthread_blkcg+0xd0/0xd0
[ 802.271625][ C1] ret_from_fork+0x48/0x80
[ 802.271641][ C1] ? kthread_blkcg+0xd0/0xd0
[ 802.271655][ C1] ret_from_fork_asm+0x11/0x20
[ 802.271680][ C1] </TASK>
[ 802.272067][ T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 802.528683][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.93-syzkaller #0
[ 802.536475][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 802.546517][ T29] Call Trace:
[ 802.549793][ T29] <TASK>
[ 802.552717][ T29] dump_stack_lvl+0x16c/0x230
[ 802.557392][ T29] ? show_regs_print_info+0x20/0x20
[ 802.562583][ T29] ? load_image+0x3b0/0x3b0
[ 802.567093][ T29] panic+0x2c0/0x710
[ 802.570981][ T29] ? schedule_preempt_disabled+0x20/0x20
[ 802.576614][ T29] ? bpf_jit_dump+0xd0/0xd0
[ 802.581108][ T29] ? __irq_work_queue_local+0x13a/0x3b0
[ 802.586645][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 802.592799][ T29] watchdog+0xf80/0xf80
[ 802.596947][ T29] ? watchdog+0x1e1/0xf80
[ 802.601353][ T29] kthread+0x2fa/0x390
[ 802.605409][ T29] ? hungtask_pm_notify+0x90/0x90
[ 802.610423][ T29] ? kthread_blkcg+0xd0/0xd0
[ 802.615026][ T29] ret_from_fork+0x48/0x80
[ 802.619430][ T29] ? kthread_blkcg+0xd0/0xd0
[ 802.624008][ T29] ret_from_fork_asm+0x11/0x20
[ 802.628852][ T29] </TASK>
[ 802.632143][ T29] Kernel Offset: disabled
[ 802.636453][ T29] Rebooting in 86400 seconds..