last executing test programs: 4m5.947105572s ago: executing program 0 (id=111): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 4m5.555953392s ago: executing program 0 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) 4m5.001332012s ago: executing program 0 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000180)='./file1\x00') 4m3.782017087s ago: executing program 0 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 4m3.150865123s ago: executing program 0 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r2, &(0x7f0000000780)="a73e3e44d16e45439c1688f3fba86da57ec0c3c12dceec3c25fcb6c7b9dab17a0dab4097f2fc2784b6540f9e0a9bd0c9ef56aaa35c9a4a1b45d51f163eff65b084adb62d775567f12cc8114dc17e02b9480ecfd64a64e54d95f4a1d6ae7f221e324335c683e29f19af109693248051cf194e41aff8c5ea0b2bde0f24443fb79c106d61d66fca0c5874b5e055c54b60326655fdc7e204f1efcc6e", 0x0}, 0x20) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000600)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m2.667761436s ago: executing program 0 (id=129): io_uring_setup(0x4c2e, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_emit_ethernet(0xc6, &(0x7f0000000680)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0xff, 0xb, "5652905f755d7e6a94f8141a7fb68f5934446c06b01e80813e317a9683bac8439d6c13a1f72da649b86fd6e5429d91b5dad7ac64b8868869f6f1c506ffed94877909ef59b956c07e1bed36ca616b11f507af1f28ce0b5166096c88aaee89b872a46e0877aef4c0ea7e389f2e1e9c0120dca1f4232c599585df54e720a575cf45409b7efabf165ad60e670795e6e938de5bea5f1e4f77ceaee65413ee27f01c8bbc578ec59bf577bd6320689577bd7214e72196affb"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x675, 0x5c5, 0xfe, 0x9a0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r2, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/mdstat\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100028bd7000fedbdf250d0000001c00018008000100", @ANYRES32=r10, @ANYBLOB="e5880a010000000000000000", @ANYRES32=r14, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 3m47.530084585s ago: executing program 32 (id=129): io_uring_setup(0x4c2e, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_emit_ethernet(0xc6, &(0x7f0000000680)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0xff, 0xb, "5652905f755d7e6a94f8141a7fb68f5934446c06b01e80813e317a9683bac8439d6c13a1f72da649b86fd6e5429d91b5dad7ac64b8868869f6f1c506ffed94877909ef59b956c07e1bed36ca616b11f507af1f28ce0b5166096c88aaee89b872a46e0877aef4c0ea7e389f2e1e9c0120dca1f4232c599585df54e720a575cf45409b7efabf165ad60e670795e6e938de5bea5f1e4f77ceaee65413ee27f01c8bbc578ec59bf577bd6320689577bd7214e72196affb"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x675, 0x5c5, 0xfe, 0x9a0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r2, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/mdstat\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100028bd7000fedbdf250d0000001c00018008000100", @ANYRES32=r10, @ANYBLOB="e5880a010000000000000000", @ANYRES32=r14, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 9.153586464s ago: executing program 2 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.570305826s ago: executing program 2 (id=1623): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capget(&(0x7f00000005c0)={0x20080522}, 0x0) 7.445423957s ago: executing program 2 (id=1625): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 7.391935292s ago: executing program 4 (id=1627): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r1}, 0x10) fsmount(r0, 0x0, 0x0) 6.607042351s ago: executing program 4 (id=1634): socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000040)='./file0\x00', 0x100) socket(0x15, 0x2, 0x6e89) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = io_uring_setup(0x5b54, &(0x7f0000000a80)={0x0, 0x2df0, 0x1, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=0x0, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.413832035s ago: executing program 4 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472614e873d6e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.088874452s ago: executing program 3 (id=1648): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x80fe, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x9, @empty, 0x3}, @ib={0x1b, 0xf, 0xffa, {"50916300"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) 4.055723048s ago: executing program 2 (id=1649): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24002}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_IFALIAS={0x14, 0x14, 'pimreg1\x00'}]}, 0x50}}, 0x800) unshare(0x20000400) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00') syz_open_procfs$namespace(r1, &(0x7f0000001ec0)='ns/pid\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$packet(0x11, 0x2, 0x300) unshare(0x2060200) getsockopt$packet_buf(r4, 0x107, 0x5, 0x0, &(0x7f0000001040)) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)}], 0x3) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002797da04457cd7402b0db624086f85ef989d62d6dfa4be3b1c42c6ab64694dd67e2a534ffae39a6a49539a92d0085144f3a5840bd2cddcbcbf90627a3772f91fa288ab51a805aadd436b86c4108be633a632c27a6bf8f811319772c24fcaea1349b45c56ef1cc54f0577970ffcdccebb95901e074664f41184b928c17d37e3b818b035f19d931d116d33018056733425fd6fcfa7dbbbe820937254552261f9d9f104cc235ea63ccd41bdd76f193424b0ec787e1fbdcc2a339659bdeb268368bafacca8c3626d43df50955", @ANYRES32=r9], 0x20, 0x2400e044}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r10, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) 3.809003437s ago: executing program 3 (id=1652): socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000040)='./file0\x00', 0x100) socket(0x15, 0x2, 0x6e89) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = io_uring_setup(0x5b54, &(0x7f0000000a80)={0x0, 0x2df0, 0x1, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=0x0, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.553975976s ago: executing program 1 (id=1655): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0x2, 0x12) 3.349160857s ago: executing program 6 (id=1656): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") 2.657541342s ago: executing program 1 (id=1657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x6c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) 2.595185871s ago: executing program 3 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) unshare(0x28000000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.533439109s ago: executing program 5 (id=1659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) listen(r0, 0x3) 2.413149146s ago: executing program 2 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 2.115440255s ago: executing program 2 (id=1661): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 2.067817466s ago: executing program 5 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.067480607s ago: executing program 1 (id=1663): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.713464724s ago: executing program 3 (id=1664): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 1.684999324s ago: executing program 6 (id=1665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 1.660995908s ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 1.573508179s ago: executing program 5 (id=1667): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 1.17204486s ago: executing program 6 (id=1668): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 1.170868724s ago: executing program 1 (id=1669): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 1.152264102s ago: executing program 4 (id=1670): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.151370878s ago: executing program 3 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000600)) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.084129328s ago: executing program 5 (id=1672): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80fe, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x9, @empty, 0x3}, @ib={0x1b, 0xf, 0xffa, {"50916300"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) 831.132568ms ago: executing program 6 (id=1673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) 795.813329ms ago: executing program 5 (id=1674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_macvtap\x00', @local}) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 665.807571ms ago: executing program 1 (id=1675): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r5 = syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b1fceeb1f3b9e2ea9cfcb5a2ee978e0f67a9a6f7c3cd417ee850fa147e253061e1a2fe812f129539060098a00c04325d4966328848b98663be6315df4acafc1f90064a0a26da016e81", @ANYRES16=r3, @ANYBLOB="200028bd7000fcdbdf251e0000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x4103) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a58bc94ae742e11df77c3c9fa95307503f0f5e54", 0x14}, {&(0x7f0000001740)="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", 0x6ad}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000006ec48af64600"/20, @ANYRES32, @ANYRES32=r7], 0x18, 0x40000}}], 0x2, 0x80004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x8, &(0x7f0000000100)={0xa, 0x4e23, 0xffffffff, @loopback, 0x4f}, 0x1c) 659.822207ms ago: executing program 4 (id=1676): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r4, &(0x7f0000000c40)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x6a040000) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 599.932803ms ago: executing program 3 (id=1677): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 521.181619ms ago: executing program 6 (id=1678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 432.37707ms ago: executing program 5 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472614e873d6e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 113.172384ms ago: executing program 1 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43cfffe800000000000000000000000000010ff02000000000000000000"], 0x340a) 0s ago: executing program 6 (id=1681): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd70000400000055000000"], 0x14}, 0x1, 0x0, 0x0, 0x240440d1}, 0x10000) r0 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) pipe(&(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r9, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@block_validity}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 237.037802][ T30] audit: type=1326 audit(1757906497.889:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.6.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 237.064404][ T30] audit: type=1326 audit(1757906497.889:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.6.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 237.160015][ T30] audit: type=1326 audit(1757906497.889:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.6.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 237.253460][ T30] audit: type=1326 audit(1757906497.889:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.6.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 237.290212][ T8386] loop6: detected capacity change from 0 to 512 [ 237.333512][ T8386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 237.530223][ T8386] EXT4-fs (loop6): 1 truncate cleaned up [ 237.606243][ T8386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.640035][ T8391] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 237.707116][ T8386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.731018][ T8391] netlink: 'syz.3.731': attribute type 10 has an invalid length. [ 237.740713][ T8391] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 238.611230][ T8410] loop2: detected capacity change from 0 to 512 [ 238.903976][ T8414] lo speed is unknown, defaulting to 1000 [ 238.930830][ T8414] lo speed is unknown, defaulting to 1000 [ 239.416487][ T8410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.437974][ T8410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 239.450706][ T8410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.736: bg 0: block 248: padding at end of block bitmap is not set [ 239.467309][ T8410] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.736: Failed to acquire dquot type 1 [ 239.480428][ T8410] EXT4-fs (loop2): 1 truncate cleaned up [ 239.489008][ T8410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.963456][ T8431] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 240.971367][ T8431] netlink: 17 bytes leftover after parsing attributes in process `syz.5.744'. [ 241.934077][ T8434] random: crng reseeded on system resumption [ 241.952375][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.810143][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 242.810169][ T30] audit: type=1326 audit(1757911660.113:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 242.933393][ T30] audit: type=1326 audit(1757911660.113:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 243.030991][ T30] audit: type=1326 audit(1757911660.153:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 243.113698][ T30] audit: type=1326 audit(1757914238.157:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 243.265219][ T8476] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 243.271887][ T8476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.311925][ T8476] vhci_hcd vhci_hcd.0: Device attached [ 243.357796][ T8479] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 243.364575][ T8479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.416708][ T8479] vhci_hcd vhci_hcd.0: Device attached [ 243.436681][ T8476] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 243.443331][ T8476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.494194][ T8476] vhci_hcd vhci_hcd.0: Device attached [ 243.519604][ T8480] vhci_hcd: connection closed [ 243.519916][ T8485] vhci_hcd: connection closed [ 243.520508][ T8477] vhci_hcd: connection closed [ 243.529463][ T1145] vhci_hcd: stop threads [ 243.543291][ T1145] vhci_hcd: release socket [ 243.553332][ T6906] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 243.561148][ T1145] vhci_hcd: disconnect device [ 243.574036][ T8478] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 243.614753][ T1145] vhci_hcd: stop threads [ 243.624930][ T1145] vhci_hcd: release socket [ 243.647284][ T1145] vhci_hcd: disconnect device [ 243.652133][ T1145] vhci_hcd: stop threads [ 243.675876][ T1145] vhci_hcd: release socket [ 243.695087][ T1145] vhci_hcd: disconnect device [ 244.433277][ T30] audit: type=1326 audit(1757914239.737:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 244.587176][ T30] audit: type=1326 audit(1757914239.757:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 244.630158][ T8522] mmap: syz.5.776 (8522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 245.073287][ T8527] lo speed is unknown, defaulting to 1000 [ 245.098181][ T8527] lo speed is unknown, defaulting to 1000 [ 245.553620][ T30] audit: type=1326 audit(1757914239.767:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 245.576039][ T30] audit: type=1326 audit(1757914239.767:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 245.599137][ T30] audit: type=1326 audit(1757914239.767:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 245.621891][ T30] audit: type=1326 audit(1757914239.767:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.5.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 245.763513][ T8531] loop4: detected capacity change from 0 to 512 [ 245.776446][ T8531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.787310][ T8531] EXT4-fs (loop4): orphan cleanup on readonly fs [ 245.815073][ T8531] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.778: bg 0: block 248: padding at end of block bitmap is not set [ 245.833324][ T8531] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.778: Failed to acquire dquot type 1 [ 245.848520][ T8531] EXT4-fs (loop4): 1 truncate cleaned up [ 245.901977][ T8531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.991302][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.355785][ T8510] loop3: detected capacity change from 0 to 512 [ 246.361852][ T8553] netlink: 'syz.6.784': attribute type 3 has an invalid length. [ 246.467499][ T8510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.504116][ T8510] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.699417][ T8563] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 246.706005][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.728668][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 246.750310][ T8567] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 246.756996][ T8567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.828058][ T8567] vhci_hcd vhci_hcd.0: Device attached [ 246.852325][ T8563] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 246.858992][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.900321][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 246.927749][ T8568] vhci_hcd: connection closed [ 246.928211][ T1145] vhci_hcd: stop threads [ 246.928692][ T8573] vhci_hcd: connection closed [ 246.933036][ T1145] vhci_hcd: release socket [ 246.933139][ T1145] vhci_hcd: disconnect device [ 246.952175][ T8564] vhci_hcd: connection closed [ 246.965068][ T6910] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 247.008176][ T1145] vhci_hcd: stop threads [ 247.012599][ T1145] vhci_hcd: release socket [ 247.033777][ T8565] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 247.040037][ T1145] vhci_hcd: disconnect device [ 247.072170][ T1145] vhci_hcd: stop threads [ 247.083014][ T1145] vhci_hcd: release socket [ 247.106546][ T1145] vhci_hcd: disconnect device [ 247.129259][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.302366][ T6906] vhci_hcd: vhci_device speed not set [ 249.380386][ T8600] loop4: detected capacity change from 0 to 1024 [ 249.412494][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 249.433015][ T8600] EXT4-fs: Ignoring removed nobh option [ 249.438621][ T8600] EXT4-fs: inline encryption not supported [ 249.493152][ T8604] tc_dump_action: action bad kind [ 249.551666][ T8600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.646029][ T8600] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4182: comm syz.4.798: Allocating blocks 385-513 which overlap fs metadata [ 249.674066][ T8599] EXT4-fs (loop4): pa ffff88804c07e000: logic 16, phys. 129, len 24 [ 249.682490][ T8599] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5433: group 0, free 0, pa_free 8 [ 249.694585][ T8604] netlink: 'syz.1.800': attribute type 4 has an invalid length. [ 249.759561][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 249.926763][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.144706][ T8623] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 250.230522][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 250.301350][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 250.328912][ T8623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.345601][ T8630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 250.352183][ T8630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.363674][ T8638] netlink: 'syz.2.810': attribute type 27 has an invalid length. [ 250.401035][ T8626] vlan2: entered allmulticast mode [ 250.437994][ T8639] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 250.444671][ T8639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.452751][ T8630] vhci_hcd vhci_hcd.0: Device attached [ 250.509751][ T8639] vhci_hcd vhci_hcd.0: Device attached [ 250.518142][ T8638] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 250.541655][ T8630] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 250.548229][ T8630] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.566370][ T8645] syz_tun: entered allmulticast mode [ 250.607611][ T8630] vhci_hcd vhci_hcd.0: Device attached [ 250.646179][ T8632] syz_tun: left allmulticast mode [ 250.693082][ T8642] vhci_hcd: connection closed [ 250.693218][ T8640] vhci_hcd: connection closed [ 250.698272][ T59] vhci_hcd: stop threads [ 250.700469][ T8636] vhci_hcd: connection closed [ 250.703244][ T6902] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 250.726009][ T8637] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 250.730280][ T59] vhci_hcd: release socket [ 250.746109][ T59] vhci_hcd: disconnect device [ 250.767698][ T59] vhci_hcd: stop threads [ 250.790352][ T59] vhci_hcd: release socket [ 250.800593][ T59] vhci_hcd: disconnect device [ 250.821286][ T59] vhci_hcd: stop threads [ 250.846093][ T59] vhci_hcd: release socket [ 250.851213][ T59] vhci_hcd: disconnect device [ 251.142390][ T8655] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 251.617091][ T8658] lo speed is unknown, defaulting to 1000 [ 251.633714][ T8658] lo speed is unknown, defaulting to 1000 [ 252.152641][ T6910] vhci_hcd: vhci_device speed not set [ 252.374333][ T8688] random: crng reseeded on system resumption [ 252.683052][ T8682] netlink: 48 bytes leftover after parsing attributes in process `syz.6.823'. [ 252.842194][ T8689] lo speed is unknown, defaulting to 1000 [ 252.891545][ T8689] lo speed is unknown, defaulting to 1000 [ 253.095061][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 253.141812][ T8697] netlink: 312 bytes leftover after parsing attributes in process `syz.6.829'. [ 253.181168][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 254.392076][ T8706] netlink: 'syz.6.831': attribute type 10 has an invalid length. [ 254.522409][ T8703] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 254.538525][ T8706] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 254.600372][ T8706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.692364][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 254.698948][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.777326][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 254.831443][ T8715] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 254.838117][ T8715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.891565][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 254.898146][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.905903][ T8715] vhci_hcd vhci_hcd.0: Device attached [ 254.941575][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 254.960179][ T8717] vhci_hcd: connection closed [ 254.965814][ T8712] vhci_hcd: connection closed [ 254.970853][ T8719] vhci_hcd: connection closed [ 254.976937][ T6009] vhci_hcd: stop threads [ 255.011320][ T6009] vhci_hcd: release socket [ 255.021558][ T6009] vhci_hcd: disconnect device [ 255.037052][ T6009] vhci_hcd: stop threads [ 255.055710][ T6009] vhci_hcd: release socket [ 255.080610][ T6009] vhci_hcd: disconnect device [ 255.110664][ T6009] vhci_hcd: stop threads [ 255.125636][ T6009] vhci_hcd: release socket [ 255.144340][ T6009] vhci_hcd: disconnect device [ 255.658510][ T8735] netlink: 'syz.6.839': attribute type 1 has an invalid length. [ 255.703840][ T8735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.738574][ T8740] netlink: 2 bytes leftover after parsing attributes in process `syz.4.841'. [ 255.826969][ T6902] vhci_hcd: vhci_device speed not set [ 255.873843][ T8735] vlan2: entered allmulticast mode [ 255.889930][ T8735] veth1: entered allmulticast mode [ 256.806165][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 256.843641][ T8762] netlink: 'syz.3.850': attribute type 27 has an invalid length. [ 256.863507][ T8764] loop5: detected capacity change from 0 to 1024 [ 256.880549][ T8762] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 256.905380][ T8766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 256.911951][ T8766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.921606][ T8766] vhci_hcd vhci_hcd.0: Device attached [ 256.929458][ T8762] syz_tun: entered allmulticast mode [ 256.951609][ T8764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.973586][ T8761] syz_tun: left allmulticast mode [ 256.982101][ T8766] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 256.988644][ T8766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.016863][ T8766] vhci_hcd vhci_hcd.0: Device attached [ 257.044315][ T8775] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 257.050967][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 257.068880][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 257.068904][ T30] audit: type=1800 audit(1757914252.349:487): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.851" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 257.122407][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 257.157733][ T8776] vhci_hcd: connection closed [ 257.158054][ T8767] vhci_hcd: connection closed [ 257.163052][ T6009] vhci_hcd: stop threads [ 257.163232][ T8773] vhci_hcd: connection closed [ 257.172589][ T6009] vhci_hcd: release socket [ 257.201004][ T6906] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 257.213640][ T8768] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 257.227685][ T6009] vhci_hcd: disconnect device [ 257.232897][ T6009] vhci_hcd: stop threads [ 257.237373][ T6009] vhci_hcd: release socket [ 257.246323][ T6009] vhci_hcd: disconnect device [ 257.261754][ T6009] vhci_hcd: stop threads [ 257.266048][ T6009] vhci_hcd: release socket [ 257.271163][ T6009] vhci_hcd: disconnect device [ 257.277679][ T8779] siw: device registration error -23 [ 257.286300][ T8779] tc_dump_action: action bad kind [ 257.330739][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.349653][ T8779] netlink: 'syz.3.853': attribute type 4 has an invalid length. [ 257.508318][ T30] audit: type=1326 audit(1757914252.809:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 257.585510][ T30] audit: type=1326 audit(1757914252.809:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 257.608449][ T8787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.856'. [ 257.618475][ T30] audit: type=1326 audit(1757914252.809:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 257.674005][ T30] audit: type=1326 audit(1757916830.834:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.6.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 257.908891][ T30] audit: type=1326 audit(1757916831.204:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 257.952083][ T8793] syz.2.859 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 257.962569][ T30] audit: type=1326 audit(1757916831.204:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 257.962654][ T30] audit: type=1326 audit(1757916831.254:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 257.962726][ T30] audit: type=1326 audit(1757916831.254:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 258.247885][ T30] audit: type=1326 audit(1757916831.254:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 258.781418][ T8807] loop3: detected capacity change from 0 to 1024 [ 258.809980][ T8807] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 258.966290][ T8807] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 259.030257][ T8807] JBD2: no valid journal superblock found [ 259.048219][ T8807] EXT4-fs (loop3): Could not load journal inode [ 260.509798][ T8821] lo speed is unknown, defaulting to 1000 [ 260.517684][ T8821] lo speed is unknown, defaulting to 1000 [ 261.484873][ T8832] lo speed is unknown, defaulting to 1000 [ 261.492766][ T8832] lo speed is unknown, defaulting to 1000 [ 261.577933][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 262.051355][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.875'. [ 262.380388][ T6906] vhci_hcd: vhci_device speed not set [ 262.550283][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 262.591408][ T8852] loop6: detected capacity change from 0 to 1024 [ 262.598529][ T8855] netlink: 'syz.4.880': attribute type 27 has an invalid length. [ 262.625800][ T8852] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 262.640398][ T8855] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 262.665339][ T8852] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 262.719750][ T8855] vlan2: left allmulticast mode [ 262.747734][ T8858] syz_tun: entered allmulticast mode [ 262.754231][ T8852] JBD2: no valid journal superblock found [ 262.781562][ T8852] EXT4-fs (loop6): Could not load journal inode [ 265.012437][ T8890] loop2: detected capacity change from 0 to 256 [ 265.506381][ T8890] lo speed is unknown, defaulting to 1000 [ 265.514284][ T8890] lo speed is unknown, defaulting to 1000 [ 265.641085][ T8888] loop5: detected capacity change from 0 to 1024 [ 265.861794][ T8888] EXT4-fs: Ignoring removed bh option [ 265.887569][ T8888] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 266.808771][ T8897] lo speed is unknown, defaulting to 1000 [ 266.819368][ T8897] lo speed is unknown, defaulting to 1000 [ 266.886560][ T8888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.100951][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 267.100979][ T30] audit: type=1804 audit(1757916840.385:503): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.890" name="/newroot/147/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 268.081287][ T8910] lo speed is unknown, defaulting to 1000 [ 268.089461][ T8910] lo speed is unknown, defaulting to 1000 [ 268.234431][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.073927][ T8927] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 269.152843][ T8932] loop6: detected capacity change from 0 to 128 [ 269.179587][ T8930] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 269.226185][ T8927] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.900'. [ 269.255532][ T8932] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 269.271742][ T8932] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.468676][ T8930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.593638][ T6720] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.825698][ T8946] loop6: detected capacity change from 0 to 2048 [ 269.891230][ T5919] Alternate GPT is invalid, using primary GPT. [ 269.909218][ T5919] loop6: p1 p2 p3 [ 270.014169][ T8946] Alternate GPT is invalid, using primary GPT. [ 270.014282][ T8946] loop6: p1 p2 p3 [ 270.132094][ T8944] loop2: detected capacity change from 0 to 8192 [ 270.206145][ T8944] loop2: p1 p2[DM] p4 [ 270.206411][ T8944] loop2: p1 size 196608 extends beyond EOD, truncated [ 270.240837][ T8944] loop2: p2 start 4292936063 is beyond EOD, [ 270.330683][ T8957] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 270.347917][ T8944] truncated [ 270.371653][ T8944] loop2: p4 size 50331648 extends beyond EOD, truncated [ 270.390899][ T8951] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 270.591791][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 270.663826][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 270.914668][ T8965] loop5: detected capacity change from 0 to 512 [ 270.982428][ T30] audit: type=1326 audit(1757916844.276:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.018645][ T8965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.052682][ T30] audit: type=1326 audit(1757916844.276:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.080913][ T30] audit: type=1326 audit(1757916844.346:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.422495][ T8965] EXT4-fs (loop5): 1 truncate cleaned up [ 271.567836][ T30] audit: type=1326 audit(1757916844.356:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.704120][ T8965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.768625][ T30] audit: type=1326 audit(1757916844.356:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.798395][ T30] audit: type=1326 audit(1757916844.366:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 271.977708][ T8965] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #15: comm syz.5.912: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 272.565337][ T8985] lo speed is unknown, defaulting to 1000 [ 272.597295][ T8985] lo speed is unknown, defaulting to 1000 [ 272.965247][ T8991] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 272.971357][ T30] audit: type=1326 audit(1757916846.246:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 273.010706][ T30] audit: type=1326 audit(1757916846.287:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 273.039010][ T30] audit: type=1326 audit(1757916846.287:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 273.102998][ T6775] udevd[6775]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 273.108156][ T30] audit: type=1326 audit(1757916846.287:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 273.129502][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 273.204791][ T8987] loop3: detected capacity change from 0 to 512 [ 273.233049][ T8987] EXT4-fs: Ignoring removed nobh option [ 273.289111][ T8991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.473232][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.553862][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.918: corrupted inode contents [ 273.627814][ T8987] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.918: mark_inode_dirty error [ 273.640736][ T9003] tc_dump_action: action bad kind [ 273.693409][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.918: corrupted inode contents [ 273.871850][ T8987] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.918: mark_inode_dirty error [ 273.962502][ T9003] netlink: 'syz.5.922': attribute type 4 has an invalid length. [ 273.966142][ T8987] Quota error (device loop3): write_blk: dquota write failed [ 273.998547][ T8987] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 274.020755][ T8987] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.918: Failed to acquire dquot type 0 [ 274.055426][ T9010] loop6: detected capacity change from 0 to 128 [ 274.066561][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.918: corrupted inode contents [ 274.107997][ T8987] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.918: mark_inode_dirty error [ 274.131966][ T30] audit: type=1800 audit(1757916847.437:514): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.924" name="file2" dev="loop6" ino=1048611 res=0 errno=0 [ 274.167192][ T9010] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 274.180362][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.918: corrupted inode contents [ 274.183710][ T9010] FAT-fs (loop6): Filesystem has been set read-only [ 274.200366][ T9010] syz.6.924: attempt to access beyond end of device [ 274.200366][ T9010] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 274.214506][ T9010] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 274.225260][ T9010] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 274.241865][ T8987] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.918: mark_inode_dirty error [ 274.256239][ T9011] syz.6.924: attempt to access beyond end of device [ 274.256239][ T9011] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 274.273951][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.918: corrupted inode contents [ 274.295507][ T9011] Buffer I/O error on dev loop6, logical block 2065, async page read [ 274.307588][ T8987] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 274.307760][ T9011] syz.6.924: attempt to access beyond end of device [ 274.307760][ T9011] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 274.336089][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.918: corrupted inode contents [ 274.338221][ T9011] Buffer I/O error on dev loop6, logical block 2066, async page read [ 274.356389][ T9011] syz.6.924: attempt to access beyond end of device [ 274.356389][ T9011] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 274.377672][ T9011] Buffer I/O error on dev loop6, logical block 2067, async page read [ 274.398021][ T9011] syz.6.924: attempt to access beyond end of device [ 274.398021][ T9011] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 274.399134][ T8987] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.918: mark_inode_dirty error [ 274.411428][ T9011] Buffer I/O error on dev loop6, logical block 2068, async page read [ 274.436631][ T9011] syz.6.924: attempt to access beyond end of device [ 274.436631][ T9011] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 274.456223][ T9011] Buffer I/O error on dev loop6, logical block 2069, async page read [ 274.464761][ T9011] syz.6.924: attempt to access beyond end of device [ 274.464761][ T9011] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 274.484255][ T9011] Buffer I/O error on dev loop6, logical block 2070, async page read [ 274.493221][ T8987] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 274.510400][ T9011] syz.6.924: attempt to access beyond end of device [ 274.510400][ T9011] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 274.541197][ T8987] EXT4-fs (loop3): 1 truncate cleaned up [ 274.553237][ T9011] Buffer I/O error on dev loop6, logical block 2071, async page read [ 274.565393][ T8987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.584134][ T9011] syz.6.924: attempt to access beyond end of device [ 274.584134][ T9011] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 274.604898][ T8987] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.617684][ T9011] Buffer I/O error on dev loop6, logical block 2072, async page read [ 274.653834][ T9010] syz.6.924: attempt to access beyond end of device [ 274.653834][ T9010] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 274.686215][ T9010] Buffer I/O error on dev loop6, logical block 2065, async page read [ 274.718119][ T9010] Buffer I/O error on dev loop6, logical block 2066, async page read [ 274.796829][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.912426][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'. [ 275.270968][ T9027] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 275.301364][ T9027] netlink: 'syz.5.932': attribute type 10 has an invalid length. [ 275.327382][ T9027] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 275.560581][ T30] audit: type=1326 audit(1757916848.867:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 275.637422][ T30] audit: type=1326 audit(1757916848.897:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 275.706711][ T30] audit: type=1326 audit(1757916848.897:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 276.036131][ T9040] loop5: detected capacity change from 0 to 1024 [ 276.048602][ T9040] EXT4-fs: Ignoring removed orlov option [ 276.054318][ T9040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.140849][ T9040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.499632][ T9048] lo speed is unknown, defaulting to 1000 [ 276.523474][ T9048] lo speed is unknown, defaulting to 1000 [ 277.321715][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.361072][ T9054] ip6tnl0: entered promiscuous mode [ 277.381394][ T9054] ip6tnl0: entered allmulticast mode [ 277.578353][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 277.673920][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 277.712781][ T9060] loop5: detected capacity change from 0 to 2048 [ 277.812163][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.945'. [ 277.833744][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 277.864415][ T9065] syz_tun: entered allmulticast mode [ 277.907636][ T9064] syz_tun: left allmulticast mode [ 278.213502][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 278.213526][ T30] audit: type=1326 audit(1757916851.517:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 278.494304][ T30] audit: type=1326 audit(1757916851.657:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 278.517377][ T30] audit: type=1326 audit(1757919429.669:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 278.572814][ T9075] loop6: detected capacity change from 0 to 512 [ 278.583397][ T30] audit: type=1326 audit(1757919429.669:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.5.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 279.327127][ T6906] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 279.399683][ T9075] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #12: comm syz.6.950: corrupted in-inode xattr: invalid ea_ino [ 280.385602][ T30] audit: type=1326 audit(1757919431.690:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 281.396845][ T6906] usb 3-1: Using ep0 maxpacket: 16 [ 281.424951][ T9075] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.950: couldn't read orphan inode 12 (err -117) [ 282.877774][ T9075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.922696][ T30] audit: type=1326 audit(1757919431.690:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 282.990934][ T6906] usb 3-1: device descriptor read/all, error -71 [ 283.090885][ T9096] loop4: detected capacity change from 0 to 1024 [ 283.099115][ T30] audit: type=1326 audit(1757919431.690:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 283.156445][ T9096] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 283.201679][ T9096] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 283.266537][ T30] audit: type=1326 audit(1757919431.690:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 283.355763][ T30] audit: type=1326 audit(1757919431.690:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 283.396445][ T9096] JBD2: no valid journal superblock found [ 283.407072][ T9096] EXT4-fs (loop4): Could not load journal inode [ 283.500553][ T30] audit: type=1326 audit(1757919431.690:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 283.522932][ T30] audit: type=1326 audit(1757919431.690:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 283.552571][ T30] audit: type=1326 audit(1757919431.690:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 283.557486][ T6720] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.575213][ T30] audit: type=1326 audit(1757919431.690:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 283.719070][ T9107] lo speed is unknown, defaulting to 1000 [ 283.727054][ T9107] lo speed is unknown, defaulting to 1000 [ 283.735257][ T30] audit: type=1326 audit(1757919431.690:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 283.813680][ T30] audit: type=1326 audit(1757919431.690:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 283.876050][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 283.946361][ T30] audit: type=1326 audit(1757919431.690:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80dd2ada9 code=0x7ffc0000 [ 284.046308][ T30] audit: type=1326 audit(1757919431.690:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80dd85b67 code=0x7ffc0000 [ 284.122596][ T9120] syz_tun: entered allmulticast mode [ 284.131417][ T9113] syz_tun: left allmulticast mode [ 284.253935][ T9118] loop6: detected capacity change from 0 to 8192 [ 284.288377][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 284.339262][ T9127] syzkaller1: entered promiscuous mode [ 284.356375][ T9127] syzkaller1: entered allmulticast mode [ 284.392784][ T9118] loop6: p1 < > [ 284.461957][ T5179] Bluetooth: hci0: command 0x0406 tx timeout [ 284.501716][ T9132] loop3: detected capacity change from 0 to 512 [ 284.531910][ T9136] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 284.551114][ T9132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.587271][ T9130] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 284.865716][ T9144] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 284.872307][ T9144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.886354][ T9144] vhci_hcd vhci_hcd.0: Device attached [ 284.928233][ T9144] ip6tnl0: left promiscuous mode [ 284.940936][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.967115][ T9144] ip6tnl0: left allmulticast mode [ 284.984884][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 284.988738][ T9144] netlink: 136 bytes leftover after parsing attributes in process `syz.4.970'. [ 284.999053][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 285.044335][ T9144] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 285.093438][ T6902] vhci_hcd: vhci_device speed not set [ 285.111189][ T9145] vhci_hcd: connection closed [ 285.114499][ T6012] vhci_hcd: stop threads [ 285.132449][ T6012] vhci_hcd: release socket [ 285.137230][ T6906] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 285.149512][ T6012] vhci_hcd: disconnect device [ 285.176833][ T6902] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 285.192532][ T6902] usb 41-1: enqueue for inactive port 0 [ 285.276467][ T6902] vhci_hcd: vhci_device speed not set [ 285.306513][ T6906] usb 7-1: Using ep0 maxpacket: 16 [ 285.319737][ T6906] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.357286][ T6906] usb 7-1: config 0 has no interfaces? [ 285.376420][ T6906] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 285.399592][ T6906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.438193][ T6906] usb 7-1: Product: syz [ 285.457813][ T6906] usb 7-1: Manufacturer: syz [ 285.462489][ T6906] usb 7-1: SerialNumber: syz [ 285.495719][ T9158] tipc: Started in network mode [ 285.497171][ T6906] usb 7-1: config 0 descriptor?? [ 285.511824][ T9158] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 285.534384][ T9158] tipc: Enabling of bearer rejected, failed to enable media [ 285.817831][ T9162] loop3: detected capacity change from 0 to 1024 [ 285.831603][ T9162] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 285.862945][ T9162] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 285.884137][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 285.914626][ T9162] JBD2: no valid journal superblock found [ 285.923537][ T9162] EXT4-fs (loop3): Could not load journal inode [ 285.942620][ T9166] syz_tun: entered allmulticast mode [ 285.974871][ T9164] syz_tun: left allmulticast mode [ 286.130684][ T9174] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.982'. [ 286.199714][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.984'. [ 286.354183][ T9182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.985'. [ 286.379496][ T9187] 9pnet: p9_errstr2errno: server reported unknown error [ 286.873060][ T9200] netlink: 'syz.4.989': attribute type 4 has an invalid length. [ 286.880906][ T9200] netlink: 17 bytes leftover after parsing attributes in process `syz.4.989'. [ 287.563267][ T9201] pim6reg: entered allmulticast mode [ 287.899274][ T912] usb 7-1: USB disconnect, device number 3 [ 288.311204][ T9220] tc_dump_action: action bad kind [ 288.587640][ T9220] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 289.013216][ T9231] lo speed is unknown, defaulting to 1000 [ 289.038947][ T9231] lo speed is unknown, defaulting to 1000 [ 289.488414][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 289.488440][ T30] audit: type=1326 audit(1757919440.801:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 289.564817][ T9238] __nla_validate_parse: 2 callbacks suppressed [ 289.564846][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 289.616642][ T30] audit: type=1326 audit(1757919440.801:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 289.704432][ T30] audit: type=1326 audit(1757919440.801:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 289.771733][ T30] audit: type=1326 audit(1757922018.808:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 289.803830][ T9241] loop2: detected capacity change from 0 to 1024 [ 289.844727][ T9241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.915788][ T9241] EXT4-fs: test_dummy_encryption requires encrypt feature [ 290.339742][ T9249] netlink: 'syz.6.1007': attribute type 4 has an invalid length. [ 290.347594][ T9249] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1007'. [ 290.767589][ T30] audit: type=1326 audit(1757922020.069:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 290.922173][ T30] audit: type=1326 audit(1757922020.109:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 291.011324][ T9251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1010'. [ 291.107574][ T30] audit: type=1326 audit(1757922020.109:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 291.317437][ T9254] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1011'. [ 291.343346][ T9254] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 291.674297][ T30] audit: type=1326 audit(1757922020.979:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 291.705782][ T9266] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1016'. [ 291.754995][ T30] audit: type=1326 audit(1757922020.979:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 291.831340][ T30] audit: type=1326 audit(1757922020.979:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9265 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 292.730439][ T9291] tc_dump_action: action bad kind [ 293.535783][ T9291] netlink: 'syz.5.1026': attribute type 4 has an invalid length. [ 293.671679][ T9295] lo speed is unknown, defaulting to 1000 [ 293.737372][ T9295] lo speed is unknown, defaulting to 1000 [ 293.840840][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1028'. [ 294.872565][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 294.872592][ T30] audit: type=1326 audit(1757922024.169:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 295.037609][ T30] audit: type=1326 audit(1757922024.269:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 295.060136][ T30] audit: type=1326 audit(1757922024.269:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 295.082627][ T30] audit: type=1326 audit(1757922024.279:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 295.122883][ T9323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.197561][ T30] audit: type=1326 audit(1757922024.499:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.260841][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1036'. [ 295.290134][ T30] audit: type=1326 audit(1757922024.499:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.380147][ T30] audit: type=1326 audit(1757922024.499:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.443531][ T30] audit: type=1326 audit(1757922024.499:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.492805][ T9337] netlink: 'syz.5.1041': attribute type 1 has an invalid length. [ 295.525515][ T30] audit: type=1326 audit(1757922024.499:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.548026][ T30] audit: type=1326 audit(1757922024.499:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 295.591693][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1041'. [ 295.601419][ T9341] loop4: detected capacity change from 0 to 1024 [ 295.616109][ T9337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.622413][ T9341] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.684425][ T9341] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.734421][ T9341] JBD2: no valid journal superblock found [ 295.754325][ T9341] EXT4-fs (loop4): Could not load journal inode [ 295.764704][ T912] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 295.852376][ T9344] siw: device registration error -23 [ 295.893589][ T9344] tc_dump_action: action bad kind [ 295.954547][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 296.005236][ T912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.027446][ T912] usb 2-1: config 0 has no interfaces? [ 296.056876][ T912] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 296.074201][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.086427][ T9344] netlink: 'syz.3.1043': attribute type 4 has an invalid length. [ 296.092426][ T912] usb 2-1: Product: syz [ 296.104313][ T912] usb 2-1: Manufacturer: syz [ 296.108941][ T912] usb 2-1: SerialNumber: syz [ 296.129709][ T912] usb 2-1: config 0 descriptor?? [ 296.271464][ T9355] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1046'. [ 296.422638][ T6906] usb 2-1: USB disconnect, device number 2 [ 296.804679][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 296.813911][ T9365] lo speed is unknown, defaulting to 1000 [ 296.821820][ T9365] lo speed is unknown, defaulting to 1000 [ 296.860289][ T9366] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1052'. [ 296.942565][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 297.150246][ T9380] random: crng reseeded on system resumption [ 297.221964][ T9382] siw: device registration error -23 [ 297.230184][ T9382] tc_dump_action: action bad kind [ 297.325514][ T9382] netlink: 'syz.6.1061': attribute type 4 has an invalid length. [ 297.467834][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 297.902469][ T9407] tipc: Enabling of bearer rejected, failed to enable media [ 298.021239][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 298.060652][ T9409] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1071'. [ 298.079998][ T9411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1072'. [ 298.179150][ T9414] netlink: 'syz.3.1074': attribute type 27 has an invalid length. [ 298.214249][ T9414] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 298.269403][ T9418] syz_tun: entered allmulticast mode [ 298.317645][ T9412] syz_tun: left allmulticast mode [ 298.320624][ T9422] random: crng reseeded on system resumption [ 299.066102][ T9446] loop4: detected capacity change from 0 to 512 [ 299.101085][ T9446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.194641][ T9446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.257089][ T9446] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.279368][ T9451] loop5: detected capacity change from 0 to 1024 [ 299.310676][ T9451] EXT4-fs: Ignoring removed nobh option [ 299.317227][ T9451] EXT4-fs: Ignoring removed nobh option [ 299.322880][ T9446] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1086: corrupted xattr block 19: overlapping e_value [ 299.326479][ T9451] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 299.394159][ T9451] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: comm syz.5.1088: inode #4294967295: comm syz.5.1088: iget: illegal inode # [ 299.488971][ T9451] EXT4-fs (loop5): no journal found [ 299.510283][ T9451] EXT4-fs (loop5): can't get journal size [ 299.550773][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.560957][ T9451] EXT4-fs (loop5): failed to initialize system zone (-22) [ 299.602509][ T9451] EXT4-fs (loop5): mount failed [ 299.665527][ T9462] program syz.1.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.130402][ T9470] netlink: 'syz.5.1095': attribute type 10 has an invalid length. [ 300.169046][ T9470] dummy0: entered promiscuous mode [ 300.269901][ T9474] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 300.277842][ T9474] __nla_validate_parse: 4 callbacks suppressed [ 300.277898][ T9474] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1092'. [ 301.077243][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 301.077269][ T30] audit: type=1326 audit(1757929764.387:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.166223][ T9482] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 301.172796][ T9482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.213498][ T30] audit: type=1326 audit(1757929764.387:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.224029][ T9482] vhci_hcd vhci_hcd.0: Device attached [ 301.296963][ T9486] vhci_hcd: connection closed [ 301.297670][ T1081] vhci_hcd: stop threads [ 301.297706][ T30] audit: type=1326 audit(1757929764.427:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.302396][ T1081] vhci_hcd: release socket [ 301.323475][ T30] audit: type=1326 audit(1757929764.427:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.430073][ T1081] vhci_hcd: disconnect device [ 301.453783][ T912] vhci_hcd: vhci_device speed not set [ 301.455220][ T30] audit: type=1326 audit(1757929764.427:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.498624][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'. [ 301.553720][ T30] audit: type=1326 audit(1757929764.427:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.619054][ T30] audit: type=1326 audit(1757929764.437:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.681410][ T30] audit: type=1326 audit(1757929764.437:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.765322][ T30] audit: type=1326 audit(1757929764.437:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.803587][ T30] audit: type=1326 audit(1757929764.437:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849d78eba9 code=0x7ffc0000 [ 301.933224][ T9513] loop5: detected capacity change from 0 to 2048 [ 301.942239][ T9513] EXT4-fs: Ignoring removed nobh option [ 301.961127][ T9513] EXT4-fs: Ignoring removed bh option [ 301.978981][ T9513] EXT4-fs: inline encryption not supported [ 302.046702][ T9513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.204966][ T9513] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1112: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 302.873362][ T9531] lo speed is unknown, defaulting to 1000 [ 302.905014][ T9531] lo speed is unknown, defaulting to 1000 [ 303.185321][ T9524] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 303.237265][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.289946][ T9538] tc_dump_action: action bad kind [ 303.508070][ T9538] netlink: 'syz.1.1119': attribute type 4 has an invalid length. [ 303.862731][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 303.902877][ T9556] syz_tun: entered allmulticast mode [ 303.909286][ T9554] random: crng reseeded on system resumption [ 303.921708][ T9553] syz_tun: left allmulticast mode [ 304.179480][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 304.222265][ T9568] bridge_slave_1: left allmulticast mode [ 304.232307][ T9568] bridge_slave_1: left promiscuous mode [ 304.248355][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.278736][ T9568] bridge_slave_0: left allmulticast mode [ 304.300971][ T9568] bridge_slave_0: left promiscuous mode [ 304.317429][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.530052][ T9566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1129'. [ 304.844524][ T9590] tc_dump_action: action bad kind [ 305.006731][ T9590] netlink: 'syz.1.1137': attribute type 4 has an invalid length. [ 305.073197][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 305.141304][ T9603] syz_tun: entered allmulticast mode [ 305.150566][ T9602] syz_tun: left allmulticast mode [ 305.426488][ T9614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1149'. [ 305.532983][ T6902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 305.621796][ T9619] loop6: detected capacity change from 0 to 512 [ 305.682130][ T9619] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 305.749094][ T6902] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.083444][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 306.083499][ T30] audit: type=1326 audit(1757937503.388:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cfb2ada9 code=0x7ffc0000 [ 306.381021][ T30] audit: type=1326 audit(1757937503.428:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cfb85b67 code=0x7ffc0000 [ 306.533183][ T30] audit: type=1326 audit(1757937503.428:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cfb2ada9 code=0x7ffc0000 [ 306.678014][ T30] audit: type=1326 audit(1757937503.448:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cfb85b67 code=0x7ffc0000 [ 306.707711][ T6902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.722342][ T6902] usb 2-1: Product: syz [ 306.726850][ T6902] usb 2-1: Manufacturer: syz [ 306.731466][ T6902] usb 2-1: SerialNumber: syz [ 306.844518][ T30] audit: type=1326 audit(1757937503.448:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cfb2ada9 code=0x7ffc0000 [ 306.971214][ T9637] loop3: detected capacity change from 0 to 512 [ 306.996173][ T30] audit: type=1326 audit(1757937503.448:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 307.132781][ T30] audit: type=1326 audit(1757937503.468:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cfb85b67 code=0x7ffc0000 [ 307.169175][ T9637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.262871][ T9637] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.290138][ T30] audit: type=1326 audit(1757937503.478:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cfb2ada9 code=0x7ffc0000 [ 307.325094][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1159'. [ 307.370420][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1159'. [ 307.438000][ T30] audit: type=1326 audit(1757937503.498:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cfb85b67 code=0x7ffc0000 [ 307.592615][ T30] audit: type=1326 audit(1757937503.498:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cfb2ada9 code=0x7ffc0000 [ 307.685054][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.836242][ T6902] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.999252][ T6906] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.338947][ T9667] loop5: detected capacity change from 0 to 1024 [ 308.431964][ T9667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.469230][ T9667] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.579627][ T9677] loop2: detected capacity change from 0 to 512 [ 308.700519][ T9677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 308.749114][ T10] usb 2-1: USB disconnect, device number 3 [ 308.785738][ T9677] EXT4-fs (loop2): 1 truncate cleaned up [ 308.800325][ T9669] loop4: detected capacity change from 0 to 256 [ 308.813617][ T9669] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.827512][ T9677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.303023][ T6906] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 309.310312][ T6906] ath9k_htc: Failed to initialize the device [ 309.322042][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 310.015354][ T9695] lo speed is unknown, defaulting to 1000 [ 310.052176][ T9695] lo speed is unknown, defaulting to 1000 [ 310.270639][ T9689] lo speed is unknown, defaulting to 1000 [ 310.296663][ T9689] lo speed is unknown, defaulting to 1000 [ 310.330533][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.470657][ T6012] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm kworker/u8:11: bg 0: block 393: padding at end of block bitmap is not set [ 310.554230][ T6012] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 310.621941][ T6012] EXT4-fs (loop5): This should not happen!! Data will be lost [ 310.621941][ T6012] [ 311.388473][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.699156][ T9719] random: crng reseeded on system resumption [ 311.780009][ T9721] tc_dump_action: action bad kind [ 311.992361][ T9721] netlink: 'syz.5.1179': attribute type 4 has an invalid length. [ 313.052303][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 313.362911][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1195'. [ 313.476671][ T9758] loop3: detected capacity change from 0 to 512 [ 313.697858][ T9758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.513582][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.735834][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 314.924100][ T9784] usb usb5: usbfs: process 9784 (syz.6.1200) did not claim interface 0 before use [ 315.261751][ T9785] lo speed is unknown, defaulting to 1000 [ 315.291311][ T9785] lo speed is unknown, defaulting to 1000 [ 315.702546][ T9786] loop4: detected capacity change from 0 to 1024 [ 315.744700][ T9780] syz.2.1198 (9780) used greatest stack depth: 19752 bytes left [ 315.757521][ T9789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1199'. [ 315.773411][ T9786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.989686][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.335845][ T9818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 317.342425][ T9818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 317.360960][ T9818] vhci_hcd vhci_hcd.0: Device attached [ 317.418744][ T9822] loop2: detected capacity change from 0 to 512 [ 317.427428][ T9818] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1209'. [ 317.457325][ T9818] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 317.547968][ T9822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.560955][ T6906] vhci_hcd: vhci_device speed not set [ 317.618517][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 317.618547][ T30] audit: type=1326 audit(1757937514.880:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.652641][ T30] audit: type=1326 audit(1757937514.880:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.657455][ T6906] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 317.699085][ T30] audit: type=1326 audit(1757937515.000:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.729983][ T9819] vhci_hcd: connection reset by peer [ 317.735815][ T30] audit: type=1326 audit(1757937515.000:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.737702][ T12] vhci_hcd: stop threads [ 317.775359][ T30] audit: type=1326 audit(1757937515.000:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.798306][ T12] vhci_hcd: release socket [ 317.802965][ T12] vhci_hcd: disconnect device [ 317.858595][ T30] audit: type=1326 audit(1757937515.000:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 317.918621][ T30] audit: type=1326 audit(1757937515.000:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 318.003353][ T30] audit: type=1326 audit(1757937515.000:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 318.046490][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.125726][ T30] audit: type=1326 audit(1757937515.000:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 318.213599][ T30] audit: type=1326 audit(1757937515.120:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 318.338219][ T9846] loop2: detected capacity change from 0 to 512 [ 318.432451][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 318.450844][ T9848] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1220'. [ 318.661668][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1223'. [ 319.541974][ T9862] loop5: detected capacity change from 0 to 128 [ 319.790570][ T9872] syz_tun: entered allmulticast mode [ 319.834962][ T9871] syz_tun: left allmulticast mode [ 320.238122][ T9878] loop6: detected capacity change from 0 to 512 [ 320.331670][ T9878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.102405][ T6720] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.543292][ T9899] loop3: detected capacity change from 0 to 1024 [ 321.609384][ T9899] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 321.634532][ T9899] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 322.210904][ T9904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1239'. [ 322.426794][ T9899] JBD2: no valid journal superblock found [ 322.459931][ T9899] EXT4-fs (loop3): Could not load journal inode [ 322.568504][ T9925] random: crng reseeded on system resumption [ 322.595649][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 322.840388][ T6906] vhci_hcd: vhci_device speed not set [ 323.399152][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 323.520298][ T9957] netlink: 'syz.5.1260': attribute type 27 has an invalid length. [ 323.581538][ T9957] dummy0: left promiscuous mode [ 323.655874][ T9960] usb usb5: usbfs: process 9960 (syz.3.1259) did not claim interface 0 before use [ 324.162203][ T9957] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 324.203908][ T9964] program syz.6.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.247460][ T9961] lo speed is unknown, defaulting to 1000 [ 324.255124][ T9961] lo speed is unknown, defaulting to 1000 [ 324.332623][ T9963] syz_tun: entered allmulticast mode [ 324.477922][ T9956] syz_tun: left allmulticast mode [ 324.795553][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1264'. [ 324.927787][ T9978] loop6: detected capacity change from 0 to 512 [ 324.958316][ T9978] EXT4-fs: Ignoring removed bh option [ 324.978834][ T9978] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 325.063063][ T9979] loop4: detected capacity change from 0 to 512 [ 325.093307][ T9979] EXT4-fs: Ignoring removed orlov option [ 325.124226][ T9979] EXT4-fs: Ignoring removed i_version option [ 325.145169][ T9979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.155148][ T9978] EXT4-fs (loop6): 1 truncate cleaned up [ 325.171889][ T9978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.243836][ T9979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.269193][ T9979] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.342416][ T6720] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.372485][ T9979] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.795692][ T9996] syzkaller0: entered promiscuous mode [ 325.829350][ T9996] syzkaller0: entered allmulticast mode [ 325.922648][T10005] program syz.4.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.994827][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 325.994851][ T30] audit: type=1326 audit(1757937523.312:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 326.089811][ T30] audit: type=1326 audit(1757937523.352:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 326.115436][ T30] audit: type=1326 audit(1757937523.352:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 326.138899][ T30] audit: type=1326 audit(1757937523.352:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 326.195120][ T30] audit: type=1326 audit(1757937523.352:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 328.394982][T10028] lo speed is unknown, defaulting to 1000 [ 328.402962][T10028] lo speed is unknown, defaulting to 1000 [ 328.655648][T10037] random: crng reseeded on system resumption [ 330.229364][ T30] audit: type=1326 audit(1757937527.542:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.6.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x0 [ 330.622328][T10077] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 330.628908][T10077] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 330.697658][T10077] vhci_hcd vhci_hcd.0: Device attached [ 330.712749][T10083] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1299'. [ 330.742648][T10083] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 330.789186][T10078] vhci_hcd: connection closed [ 330.870067][ T1145] vhci_hcd: stop threads [ 330.888860][ T10] vhci_hcd: vhci_device speed not set [ 330.890202][ T1145] vhci_hcd: release socket [ 330.910443][ T1145] vhci_hcd: disconnect device [ 330.958520][ T10] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 330.996902][ T10] usb 37-1: enqueue for inactive port 0 [ 331.098773][ T10] vhci_hcd: vhci_device speed not set [ 331.666689][T10106] pim6reg: entered allmulticast mode [ 331.693511][T10106] pim6reg: left allmulticast mode [ 332.801341][T10135] loop4: detected capacity change from 0 to 512 [ 333.080778][T10135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.190849][T10145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 333.197420][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 333.228586][T10145] vhci_hcd vhci_hcd.0: Device attached [ 333.268750][T10145] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1320'. [ 333.308134][T10145] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 333.379243][T10149] vhci_hcd: connection closed [ 333.389239][ T12] vhci_hcd: stop threads [ 333.418122][ T912] vhci_hcd: vhci_device speed not set [ 333.426041][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.435440][ T12] vhci_hcd: release socket [ 333.440178][ T12] vhci_hcd: disconnect device [ 333.498530][ T912] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 333.526617][ T912] usb 37-1: enqueue for inactive port 0 [ 333.621640][ T912] vhci_hcd: vhci_device speed not set [ 333.806003][T10168] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1328'. [ 333.836079][ T30] audit: type=1107 audit(1757937531.153:993): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 333.855968][T10168] ksmbd: Unknown IPC event: 3, ignore. [ 334.118053][T10175] siw: device registration error -23 [ 334.128907][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 334.148377][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 334.213988][T10175] tc_dump_action: action bad kind [ 334.505169][T10182] netlink: 'syz.4.1332': attribute type 4 has an invalid length. [ 334.711593][ T30] audit: type=1326 audit(1757937532.033:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 334.807761][ T30] audit: type=1326 audit(1757937532.073:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 334.835881][T10192] loop6: detected capacity change from 0 to 1024 [ 334.883585][ T30] audit: type=1326 audit(1757937532.073:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 334.912289][T10195] loop4: detected capacity change from 0 to 512 [ 334.964215][T10192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.013425][ T30] audit: type=1326 audit(1757937532.073:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.060658][ T30] audit: type=1326 audit(1757937532.073:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.110379][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.160062][ T30] audit: type=1326 audit(1757937532.073:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.183099][ T30] audit: type=1326 audit(1757937532.073:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.205870][ T30] audit: type=1326 audit(1757937532.073:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.229474][ T30] audit: type=1326 audit(1757937532.093:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 335.411633][ T6720] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.460081][T10208] random: crng reseeded on system resumption [ 335.548588][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.997100][T10213] lo speed is unknown, defaulting to 1000 [ 336.026715][T10213] lo speed is unknown, defaulting to 1000 [ 336.462654][T10216] netlink: 'syz.5.1346': attribute type 1 has an invalid length. [ 336.558851][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 336.600287][T10216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.607911][T10210] lo speed is unknown, defaulting to 1000 [ 336.678628][T10210] lo speed is unknown, defaulting to 1000 [ 338.453229][T10262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1361'. [ 339.474898][T10278] syz_tun: entered allmulticast mode [ 339.495579][T10281] loop5: detected capacity change from 0 to 512 [ 339.558818][T10275] syz_tun: left allmulticast mode [ 339.609198][T10281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.866172][T10295] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.905240][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.183680][T10307] program syz.2.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.287578][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 340.287604][ T30] audit: type=1326 audit(1757937537.614:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 340.385907][ T30] audit: type=1326 audit(1757937537.644:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 340.422922][T10313] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 340.436807][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 340.455961][ T30] audit: type=1326 audit(1757937537.704:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 340.683628][ T30] audit: type=1326 audit(1757937537.704:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 341.444038][ T30] audit: type=1326 audit(1757937537.734:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e501c1465 code=0x7ffc0000 [ 341.466651][ T30] audit: type=1326 audit(1757937537.994:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.6.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 341.613350][T10329] lo speed is unknown, defaulting to 1000 [ 341.621230][T10329] lo speed is unknown, defaulting to 1000 [ 342.175777][T10350] program syz.1.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.364353][T10355] siw: device registration error -23 [ 342.408805][T10355] tc_dump_action: action bad kind [ 342.603070][T10355] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 342.635936][T10364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1400'. [ 342.822914][T10369] syz_tun: entered allmulticast mode [ 342.869942][T10367] syz_tun: left allmulticast mode [ 342.951992][T10376] serio: Serial port ptm0 [ 343.049990][ T30] audit: type=1326 audit(1757937540.375:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.5.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 343.119390][ T30] audit: type=1326 audit(1757937540.375:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.5.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 343.152543][T10381] loop2: detected capacity change from 0 to 1024 [ 343.177019][T10381] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.192366][ T30] audit: type=1326 audit(1757937540.405:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.5.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 343.246466][ T30] audit: type=1326 audit(1757937540.405:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.5.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cfb8eba9 code=0x7ffc0000 [ 343.305841][T10381] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.347307][T10381] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 343.428134][T10381] EXT4-fs error (device loop2): ext4_free_blocks:6695: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 343.484006][T10385] syzkaller0: entered promiscuous mode [ 343.489838][T10385] syzkaller0: entered allmulticast mode [ 343.577500][T10381] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm +}[@: Invalid inode bitmap blk 0 in block_group 0 [ 343.610173][ T13] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.679427][T10381] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 343.702192][ T13] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 343.747394][T10381] EXT4-fs (loop2): 1 orphan inode deleted [ 343.795632][T10403] netlink: 'syz.3.1412': attribute type 4 has an invalid length. [ 343.797220][T10381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.803485][T10403] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1412'. [ 343.933244][T10381] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.370196][T10411] siw: device registration error -23 [ 344.395136][T10376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.411238][T10376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.417614][T10376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.423815][T10376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.441380][T10376] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 344.449921][T10376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.456064][T10376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 344.554917][T10415] netlink: 'syz.2.1416': attribute type 4 has an invalid length. [ 344.794484][T10420] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1417'. [ 345.416535][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.510866][T10407] lo speed is unknown, defaulting to 1000 [ 345.518640][T10407] lo speed is unknown, defaulting to 1000 [ 345.649680][T10411] tc_dump_action: action bad kind [ 345.997698][T10433] netlink: 'syz.3.1423': attribute type 10 has an invalid length. [ 346.038087][T10433] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 346.454860][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout [ 346.461176][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.467319][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 346.473363][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.525787][ T5179] Bluetooth: hci0: command 0x0406 tx timeout [ 346.710292][T10453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1432'. [ 346.751699][T10455] loop3: detected capacity change from 0 to 256 [ 346.764754][T10457] netlink: 'syz.5.1430': attribute type 4 has an invalid length. [ 346.772997][T10457] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1430'. [ 346.803209][T10455] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.548828][T10471] loop5: detected capacity change from 0 to 128 [ 347.627707][T10469] usb usb5: usbfs: process 10469 (syz.4.1429) did not claim interface 0 before use [ 347.741332][T10475] lo speed is unknown, defaulting to 1000 [ 347.750763][T10475] lo speed is unknown, defaulting to 1000 [ 347.784555][T10471] bio_check_eod: 431 callbacks suppressed [ 347.784580][T10471] syz.5.1437: attempt to access beyond end of device [ 347.784580][T10471] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 348.213828][T10481] tipc: Enabling of bearer rejected, failed to enable media [ 348.562497][T10494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1446'. [ 348.605620][ T5179] Bluetooth: hci0: command 0x0406 tx timeout [ 348.692634][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 348.720930][T10497] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1448'. [ 349.224081][T10509] lo speed is unknown, defaulting to 1000 [ 349.231871][T10509] lo speed is unknown, defaulting to 1000 [ 349.867536][T10512] loop6: detected capacity change from 0 to 256 [ 349.875451][T10512] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.122201][T10518] netlink: 'syz.5.1454': attribute type 10 has an invalid length. [ 350.203330][T10525] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 350.291386][T10527] tipc: Enabling of bearer rejected, failed to enable media [ 350.433579][T10535] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1462'. [ 350.839555][T10549] siw: device registration error -23 [ 350.883505][T10549] tc_dump_action: action bad kind [ 350.904070][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 350.926712][T10551] random: crng reseeded on system resumption [ 351.050651][T10557] netlink: 'syz.4.1464': attribute type 4 has an invalid length. [ 351.058874][T10557] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1464'. [ 352.106007][T10566] lo speed is unknown, defaulting to 1000 [ 352.113900][T10566] lo speed is unknown, defaulting to 1000 [ 352.204413][T10559] netlink: 'syz.2.1466': attribute type 4 has an invalid length. [ 352.418505][T10569] openvswitch: netlink: Message has 8 unknown bytes. [ 352.485852][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 352.533849][T10575] loop3: detected capacity change from 0 to 1024 [ 352.554176][T10575] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.558465][T10577] netlink: 'syz.5.1475': attribute type 27 has an invalid length. [ 352.585569][T10577] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 352.632453][T10575] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.1473: Invalid block bitmap block 0 in block_group 0 [ 352.672835][T10582] syz_tun: entered allmulticast mode [ 352.716362][T10575] __quota_error: 14 callbacks suppressed [ 352.716388][T10575] Quota error (device loop3): write_blk: dquota write failed [ 352.741434][T10575] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 352.741620][T10577] syz_tun: left allmulticast mode [ 352.752543][T10575] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1473: Failed to acquire dquot type 0 [ 352.770570][T10584] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1477'. [ 352.871566][T10575] EXT4-fs error (device loop3): ext4_free_blocks:6695: comm syz.3.1473: Freeing blocks not in datazone - block = 0, count = 4096 [ 352.938020][T10575] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.1473: Invalid inode bitmap blk 0 in block_group 0 [ 352.965120][ T13] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 353.021804][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 353.051244][T10575] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 353.114563][T10575] EXT4-fs (loop3): 1 orphan inode deleted [ 353.122392][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.126591][T10597] loop5: detected capacity change from 0 to 512 [ 353.178249][T10597] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.219706][T10597] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #16: comm syz.5.1482: invalid indirect mapped block 4294967295 (level 0) [ 353.265086][T10597] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #16: comm syz.5.1482: invalid indirect mapped block 4294967295 (level 1) [ 353.386296][T10597] EXT4-fs (loop5): 1 orphan inode deleted [ 353.392103][T10597] EXT4-fs (loop5): 1 truncate cleaned up [ 353.404336][T10602] netlink: 'syz.2.1484': attribute type 21 has an invalid length. [ 353.436820][T10597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.451986][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.563229][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 353.610645][T10597] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 353.639539][T10607] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1486'. [ 353.709603][T10611] siw: device registration error -23 [ 353.745127][T10611] tc_dump_action: action bad kind [ 353.760021][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.765975][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1488'. [ 353.870121][T10613] bridge_slave_0: left allmulticast mode [ 353.885164][T10613] bridge_slave_0: left promiscuous mode [ 353.910280][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.028137][T10611] netlink: 'syz.6.1488': attribute type 4 has an invalid length. [ 354.079557][T10613] bridge_slave_1: left allmulticast mode [ 354.110108][T10626] loop3: detected capacity change from 0 to 256 [ 354.138321][T10613] bridge_slave_1: left promiscuous mode [ 354.162229][T10625] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 354.175960][T10626] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.204858][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.224671][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'. [ 354.251163][T10633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1494'. [ 354.278942][T10613] bond0: (slave bond_slave_0): Releasing backup interface [ 354.287053][T10636] loop5: detected capacity change from 0 to 128 [ 354.307667][T10613] bond0: (slave bond_slave_1): Releasing backup interface [ 354.333401][T10613] team0: Port device team_slave_0 removed [ 354.379658][T10638] syz.5.1496: attempt to access beyond end of device [ 354.379658][T10638] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 354.380377][T10613] team0: Port device team_slave_1 removed [ 354.404074][T10613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.420146][T10638] syz.5.1496: attempt to access beyond end of device [ 354.420146][T10638] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 354.435350][T10613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.448570][T10613] bond0: (slave wlan1): Releasing backup interface [ 354.515176][T10625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.596326][T10638] syz.5.1496: attempt to access beyond end of device [ 354.596326][T10638] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 354.609871][T10638] syz.5.1496: attempt to access beyond end of device [ 354.609871][T10638] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 354.623401][T10638] syz.5.1496: attempt to access beyond end of device [ 354.623401][T10638] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 354.642410][T10638] syz.5.1496: attempt to access beyond end of device [ 354.642410][T10638] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 354.713187][T10638] syz.5.1496: attempt to access beyond end of device [ 354.713187][T10638] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 354.732270][T10638] syz.5.1496: attempt to access beyond end of device [ 354.732270][T10638] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 354.752705][T10638] syz.5.1496: attempt to access beyond end of device [ 354.752705][T10638] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 354.795377][T10638] syz.5.1496: attempt to access beyond end of device [ 354.795377][T10638] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 354.903407][T10651] loop4: detected capacity change from 0 to 512 [ 354.948686][T10649] netlink: 'syz.6.1501': attribute type 10 has an invalid length. [ 354.974753][T10654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 354.981325][T10654] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 354.986742][T10649] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 355.022345][T10651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.027330][T10654] vhci_hcd vhci_hcd.0: Device attached [ 355.035439][T10660] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1502'. [ 355.124886][T10660] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 355.157506][T10655] vhci_hcd: connection closed [ 355.157888][ T1081] vhci_hcd: stop threads [ 355.175940][ T1081] vhci_hcd: release socket [ 355.180586][ T1081] vhci_hcd: disconnect device [ 355.182020][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.204311][ T6902] vhci_hcd: vhci_device speed not set [ 355.290578][ T30] audit: type=1326 audit(1757937552.617:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.356670][ T30] audit: type=1326 audit(1757937552.617:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.397172][ T30] audit: type=1326 audit(1757937552.617:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.433565][ T30] audit: type=1326 audit(1757937552.617:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.548719][ T30] audit: type=1326 audit(1757937552.617:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.650966][ T30] audit: type=1326 audit(1757937552.617:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.766069][ T30] audit: type=1326 audit(1757937552.617:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 355.860251][T10680] syz_tun: entered allmulticast mode [ 355.885159][T10679] syz_tun: left allmulticast mode [ 355.894329][T10683] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 356.002935][T10683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.736966][T10701] lo speed is unknown, defaulting to 1000 [ 356.770030][T10701] lo speed is unknown, defaulting to 1000 [ 357.260055][T10709] loop2: detected capacity change from 0 to 512 [ 357.297132][T10709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.458290][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.247886][T10717] lo speed is unknown, defaulting to 1000 [ 358.255635][T10717] lo speed is unknown, defaulting to 1000 [ 358.628942][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 358.703970][T10726] netlink: 'syz.1.1523': attribute type 4 has an invalid length. [ 358.711749][T10726] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1523'. [ 358.725335][T10729] netlink: 'syz.4.1525': attribute type 27 has an invalid length. [ 358.807950][T10729] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 358.937704][T10729] syz_tun: left allmulticast mode [ 360.330349][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 360.330376][ T30] audit: type=1326 audit(1757937557.647:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 360.435514][ T30] audit: type=1326 audit(1757937557.677:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 361.222108][T10768] lo speed is unknown, defaulting to 1000 [ 361.253497][T10768] lo speed is unknown, defaulting to 1000 [ 361.654783][T10771] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 361.661358][T10771] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.669547][T10771] vhci_hcd vhci_hcd.0: Device attached [ 361.713072][T10771] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1537'. [ 361.743038][T10771] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 361.824672][T10772] vhci_hcd: connection closed [ 361.825253][ T59] vhci_hcd: stop threads [ 361.842319][ T59] vhci_hcd: release socket [ 361.847011][ T59] vhci_hcd: disconnect device [ 361.863640][ T6906] vhci_hcd: vhci_device speed not set [ 362.131584][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 362.205217][T10785] netlink: 'syz.5.1543': attribute type 27 has an invalid length. [ 362.275509][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 362.329859][T10792] loop2: detected capacity change from 0 to 164 [ 362.353471][ T30] audit: type=1326 audit(1757937559.638:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 362.396657][T10792] iso9660: Unknown parameter '' [ 362.484048][T10792] lo speed is unknown, defaulting to 1000 [ 362.500628][ T30] audit: type=1326 audit(1757937559.638:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 362.569019][T10792] lo speed is unknown, defaulting to 1000 [ 362.581291][ T30] audit: type=1326 audit(1757937559.638:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 362.605364][ T30] audit: type=1326 audit(1757937559.638:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 362.628283][ T30] audit: type=1326 audit(1757937559.638:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 362.651851][ T30] audit: type=1326 audit(1757937559.638:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 363.036249][T10801] lo speed is unknown, defaulting to 1000 [ 363.060694][T10801] lo speed is unknown, defaulting to 1000 [ 363.414897][T10792] lo speed is unknown, defaulting to 1000 [ 363.433581][T10792] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 363.444941][ T30] audit: type=1326 audit(1757937559.648:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 363.467560][ T30] audit: type=1326 audit(1757937559.648:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 363.562674][T10792] lo speed is unknown, defaulting to 1000 [ 363.617945][T10792] lo speed is unknown, defaulting to 1000 [ 363.655245][T10792] lo speed is unknown, defaulting to 1000 [ 363.685202][T10792] lo speed is unknown, defaulting to 1000 [ 363.711916][T10792] lo speed is unknown, defaulting to 1000 [ 363.805956][T10792] lo speed is unknown, defaulting to 1000 [ 363.844257][T10792] lo speed is unknown, defaulting to 1000 [ 364.519406][T10826] loop2: detected capacity change from 0 to 128 [ 364.972285][T10834] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 364.980130][T10834] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1558'. [ 365.419526][T10849] loop2: detected capacity change from 0 to 256 [ 365.437933][T10849] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.471644][T10851] random: crng reseeded on system resumption [ 367.183093][T10883] pim6reg: entered allmulticast mode [ 367.447382][T10893] lo speed is unknown, defaulting to 1000 [ 367.455277][T10893] lo speed is unknown, defaulting to 1000 [ 367.463302][T10893] lo speed is unknown, defaulting to 1000 [ 368.249828][T10907] random: crng reseeded on system resumption [ 368.501329][T10913] loop2: detected capacity change from 0 to 1024 [ 368.528042][T10913] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 368.545146][T10913] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 368.561420][T10913] JBD2: no valid journal superblock found [ 368.572221][T10913] EXT4-fs (loop2): Could not load journal inode [ 368.612125][T10917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1589'. [ 369.166304][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 369.166331][ T30] audit: type=1326 audit(1757937566.478:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 369.290070][ T30] audit: type=1326 audit(1757937566.518:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 369.382496][ T30] audit: type=1326 audit(1757937566.538:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 369.410525][ T912] IPVS: starting estimator thread 0... [ 369.483903][ T30] audit: type=1326 audit(1757937566.538:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 369.576960][ T30] audit: type=1326 audit(1757937566.538:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 369.625152][T10937] IPVS: using max 23 ests per chain, 55200 per kthread [ 369.750005][ T30] audit: type=1326 audit(1757937566.538:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 370.420441][T10947] loop3: detected capacity change from 0 to 256 [ 370.610710][ T30] audit: type=1326 audit(1757937566.538:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 370.633339][ T30] audit: type=1326 audit(1757937566.538:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 370.663673][T10947] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.725674][ T30] audit: type=1326 audit(1757937566.538:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 370.754429][ T30] audit: type=1326 audit(1757937566.538:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fb80dd8eba9 code=0x7ffc0000 [ 371.415289][T10956] lo speed is unknown, defaulting to 1000 [ 371.441934][T10956] lo speed is unknown, defaulting to 1000 [ 371.467597][T10956] lo speed is unknown, defaulting to 1000 [ 371.704716][T10952] loop2: detected capacity change from 0 to 256 [ 371.735890][T10952] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.372518][T10973] loop2: detected capacity change from 0 to 512 [ 372.417144][T10973] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.479184][T10973] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1606: Failed to acquire dquot type 1 [ 372.540036][T10973] EXT4-fs (loop2): 1 truncate cleaned up [ 372.548140][T10973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.654592][T10982] loop4: detected capacity change from 0 to 1024 [ 372.667192][T10982] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 372.716839][T10982] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 372.776857][T10982] JBD2: no valid journal superblock found [ 372.793965][T10986] macvtap0: refused to change device tx_queue_len [ 372.800243][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.802130][T10982] EXT4-fs (loop4): Could not load journal inode [ 373.267730][T11001] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 373.274307][T11001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 373.291777][T11001] vhci_hcd vhci_hcd.0: Device attached [ 373.302381][T11004] vhci_hcd: connection closed [ 373.307624][ T6009] vhci_hcd: stop threads [ 373.317828][ T6009] vhci_hcd: release socket [ 373.329170][ T6009] vhci_hcd: disconnect device [ 373.344682][T11006] tipc: Enabled bearer , priority 0 [ 373.364657][T11006] syzkaller0: entered promiscuous mode [ 373.370180][T11006] syzkaller0: entered allmulticast mode [ 373.457293][T11006] tipc: Resetting bearer [ 373.466059][T11003] tipc: Resetting bearer [ 373.516252][T11003] tipc: Disabling bearer [ 373.734296][T11013] loop4: detected capacity change from 0 to 1024 [ 373.783032][T11013] EXT4-fs: Ignoring removed orlov option [ 373.867014][T11013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.337000][T11020] lo speed is unknown, defaulting to 1000 [ 374.368005][T11020] lo speed is unknown, defaulting to 1000 [ 374.398547][T11020] lo speed is unknown, defaulting to 1000 [ 374.671819][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 374.671846][ T30] audit: type=1326 audit(1757937571.989:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.781297][ T30] audit: type=1326 audit(1757937571.989:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.809800][ T30] audit: type=1326 audit(1757937572.029:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.832757][ T30] audit: type=1326 audit(1757937572.029:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.928781][ T30] audit: type=1326 audit(1757937572.029:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.967213][ T30] audit: type=1326 audit(1757937572.029:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 374.996661][ T5874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.014337][ T30] audit: type=1326 audit(1757937572.029:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 375.037518][ T30] audit: type=1326 audit(1757937572.029:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 375.066979][ T30] audit: type=1326 audit(1757937572.029:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 375.348257][ T30] audit: type=1326 audit(1757937572.039:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f0e5078eba9 code=0x7ffc0000 [ 375.502017][T11036] netlink: 'syz.2.1625': attribute type 4 has an invalid length. [ 375.559126][T11036] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1625'. [ 375.908196][T11046] loop4: detected capacity change from 0 to 1024 [ 375.937573][T11046] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 375.972758][T11046] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 376.054685][T11046] JBD2: no valid journal superblock found [ 376.077926][T11046] EXT4-fs (loop4): Could not load journal inode [ 376.080446][T11050] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1636'. [ 376.795648][T11063] lo speed is unknown, defaulting to 1000 [ 376.804201][T11063] lo speed is unknown, defaulting to 1000 [ 376.812927][T11063] lo speed is unknown, defaulting to 1000 [ 377.117806][T11069] loop5: detected capacity change from 0 to 1024 [ 377.208613][T11069] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 377.290910][T11069] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 377.347646][T11069] JBD2: no valid journal superblock found [ 377.376569][T11069] EXT4-fs (loop5): Could not load journal inode [ 377.635556][T11069] loop5: detected capacity change from 0 to 2048 [ 377.775283][T11069] Alternate GPT is invalid, using primary GPT. [ 377.789628][T11069] loop5: p1 p2 p3 [ 377.806802][T11074] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1642'. [ 378.416301][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1650'. [ 378.676199][T11096] loop3: detected capacity change from 0 to 1024 [ 378.692465][T11096] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 378.792784][T11096] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 378.893861][T11096] JBD2: no valid journal superblock found [ 378.907756][T11096] EXT4-fs (loop3): Could not load journal inode [ 379.754155][T11109] loop6: detected capacity change from 0 to 1024 [ 379.873102][T11109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 379.941557][T11109] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.203318][T11112] lo speed is unknown, defaulting to 1000 [ 380.211267][T11112] lo speed is unknown, defaulting to 1000 [ 380.219034][T11112] lo speed is unknown, defaulting to 1000 [ 380.667666][ T6720] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.795764][T11136] netlink: 'syz.2.1661': attribute type 4 has an invalid length. [ 380.854648][T11136] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1661'. [ 380.900459][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 380.900485][ T30] audit: type=1326 audit(1757937578.220:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 380.949358][ T30] audit: type=1326 audit(1757937578.250:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 380.977428][ T30] audit: type=1326 audit(1757937578.270:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.091236][ T30] audit: type=1326 audit(1757937578.270:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.207056][ T30] audit: type=1326 audit(1757937578.270:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.317007][ T30] audit: type=1326 audit(1757937578.270:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.386578][T11152] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 381.402282][ T30] audit: type=1326 audit(1757937578.330:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.437230][ T30] audit: type=1326 audit(1757937578.330:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5018eba9 code=0x7ffc0000 [ 381.553245][T11155] bond5: (slave bridge0): making interface the new active one [ 381.563729][T11155] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 381.639322][T11157] syz_tun: entered allmulticast mode [ 381.684600][T11156] syz_tun: left allmulticast mode [ 381.761636][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1674'. [ 381.782003][T11159] netlink: 'syz.5.1674': attribute type 27 has an invalid length. [ 381.813707][T11159] syz_tun: entered allmulticast mode [ 381.830077][T11158] syz_tun: left allmulticast mode [ 381.920107][T11165] lo speed is unknown, defaulting to 1000 [ 381.947931][T11165] lo speed is unknown, defaulting to 1000 [ 382.130478][T11165] lo speed is unknown, defaulting to 1000 [ 382.535671][T11179] loop6: detected capacity change from 0 to 512 [ 382.609512][T11179] EXT4-fs warning (device loop6): ext4_xattr_inode_get:540: inode #11: comm syz.6.1681: ea_inode file size=0 entry size=6 [ 382.717648][T11179] ------------[ cut here ]------------ [ 382.723454][T11179] EA inode 11 i_nlink=2 [ 382.734227][T11179] WARNING: CPU: 0 PID: 11179 at fs/ext4/xattr.c:1051 ext4_xattr_inode_update_ref+0x4a6/0x570 [ 382.748786][T11179] Modules linked in: [ 382.753069][T11179] CPU: 0 UID: 0 PID: 11179 Comm: syz.6.1681 Not tainted syzkaller #0 PREEMPT(full) [ 382.762557][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.772714][T11179] RIP: 0010:ext4_xattr_inode_update_ref+0x4a6/0x570 [ 382.779433][T11179] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 73 40 44 89 e2 48 c7 c7 20 03 c8 8b e8 eb 76 f0 fe 90 <0f> 0b 90 90 e9 40 fe ff ff e8 0c d3 31 ff 44 0f b6 3d 2b 32 0a 0e [ 382.799124][T11179] RSP: 0018:ffffc90014e07430 EFLAGS: 00010282 [ 382.805659][T11179] RAX: 0000000000000000 RBX: ffff88804c1395b8 RCX: ffffc9001f8f1000 [ 382.813740][T11179] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 382.821810][T11179] RBP: ffffc90014e074f0 R08: 0000000000000001 R09: 0000000000000000 [ 382.829824][T11179] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 382.837900][T11179] R13: 1ffff920029c0e89 R14: ffff88804c139690 R15: 0000000000000000 [ 382.845966][T11179] FS: 00007f0e5107e6c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 382.854992][T11179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.861648][T11179] CR2: 00007f6e1cd3e3f0 CR3: 0000000055d52000 CR4: 0000000000350ef0 [ 382.869671][T11179] Call Trace: [ 382.873015][T11179] [ 382.875981][T11179] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 382.882451][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.888134][T11179] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 382.894439][T11179] ext4_xattr_inode_dec_ref_all+0x52a/0xed0 [ 382.900414][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.906249][T11179] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 382.912837][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.918511][T11179] ? errseq_check+0x4f/0x90 [ 382.923206][T11179] ext4_xattr_delete_inode+0x4ee/0xb80 [ 382.928710][T11179] ? rcu_is_watching+0x12/0xc0 [ 382.933584][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.939262][T11179] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 382.945320][T11179] ? ext4_journal_check_start+0x22b/0x340 [ 382.951185][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.956856][T11179] ? __ext4_journal_start_sb+0x19e/0x690 [ 382.962607][T11179] ? ext4_evict_inode+0x5cf/0x18e0 [ 382.967773][T11179] ext4_evict_inode+0x7d6/0x18e0 [ 382.972808][T11179] ? __pfx_ext4_evict_inode+0x10/0x10 [ 382.978222][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.983984][T11179] ? __pfx_ext4_evict_inode+0x10/0x10 [ 382.989403][T11179] evict+0x3e6/0x920 [ 382.993379][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.999060][T11179] ? __pfx_evict+0x10/0x10 [ 383.004735][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.010428][T11179] iput+0x521/0x880 [ 383.014319][T11179] ? __pfx_ext4_drop_inode+0x10/0x10 [ 383.019649][T11179] ext4_orphan_cleanup+0x731/0x11e0 [ 383.024981][T11179] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 383.030670][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.036403][T11179] ? ext4_register_li_request+0xec/0x9b0 [ 383.042194][T11179] ext4_fill_super+0x8a38/0xafa0 [ 383.047224][T11179] ? __pfx_ext4_fill_super+0x10/0x10 [ 383.052598][T11179] ? do_raw_spin_lock+0x12c/0x2b0 [ 383.057662][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.063405][T11179] ? find_held_lock+0x2b/0x80 [ 383.068127][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.073887][T11179] ? set_blocksize+0x406/0x500 [ 383.078699][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.084488][T11179] ? sb_set_blocksize+0x176/0x1d0 [ 383.089561][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.095303][T11179] ? setup_bdev_super+0x369/0x730 [ 383.100383][T11179] get_tree_bdev_flags+0x38c/0x620 [ 383.105586][T11179] ? __pfx_ext4_fill_super+0x10/0x10 [ 383.110969][T11179] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 383.116662][T11179] ? apparmor_capable+0x114/0x1d0 [ 383.121778][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.127456][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.133263][T11179] ? security_capable+0x7e/0x260 [ 383.138257][T11179] vfs_get_tree+0x8e/0x340 [ 383.142807][T11179] path_mount+0x1513/0x2000 [ 383.147372][T11179] ? __pfx_path_mount+0x10/0x10 [ 383.152337][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.158014][T11179] ? kmem_cache_free+0x2d1/0x4d0 [ 383.163124][T11179] ? putname+0x154/0x1a0 [ 383.167426][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.173135][T11179] ? putname+0x154/0x1a0 [ 383.177461][T11179] ? __x64_sys_mount+0x28d/0x310 [ 383.182490][T11179] __x64_sys_mount+0x28d/0x310 [ 383.187300][T11179] ? __pfx___x64_sys_mount+0x10/0x10 [ 383.192717][T11179] do_syscall_64+0xcd/0x4e0 [ 383.197261][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.203245][T11179] RIP: 0033:0x7f0e5019034a [ 383.207688][T11179] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.227913][T11179] RSP: 002b:00007f0e5107de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.236444][T11179] RAX: ffffffffffffffda RBX: 00007f0e5107def0 RCX: 00007f0e5019034a [ 383.244556][T11179] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0e5107deb0 [ 383.252677][T11179] RBP: 0000200000000180 R08: 00007f0e5107def0 R09: 0000000000800700 [ 383.260765][T11179] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 383.268788][T11179] R13: 00007f0e5107deb0 R14: 000000000000046c R15: 0000200000000680 [ 383.276874][T11179] [ 383.279916][T11179] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.287221][T11179] CPU: 0 UID: 0 PID: 11179 Comm: syz.6.1681 Not tainted syzkaller #0 PREEMPT(full) [ 383.296631][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.306716][T11179] Call Trace: [ 383.310015][T11179] [ 383.312964][T11179] dump_stack_lvl+0x3d/0x1f0 [ 383.317612][T11179] vpanic+0x6e8/0x7a0 [ 383.321656][T11179] ? __pfx_vpanic+0x10/0x10 [ 383.326222][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.331903][T11179] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 383.337938][T11179] panic+0xca/0xd0 [ 383.341715][T11179] ? __pfx_panic+0x10/0x10 [ 383.346205][T11179] check_panic_on_warn+0xab/0xb0 [ 383.351218][T11179] __warn+0xf6/0x3c0 [ 383.355126][T11179] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 383.361144][T11179] report_bug+0x3c3/0x580 [ 383.365559][T11179] ? ext4_xattr_inode_update_ref+0x4a6/0x570 [ 383.371586][T11179] handle_bug+0x184/0x210 [ 383.375937][T11179] exc_invalid_op+0x17/0x50 [ 383.380452][T11179] asm_exc_invalid_op+0x1a/0x20 [ 383.385311][T11179] RIP: 0010:ext4_xattr_inode_update_ref+0x4a6/0x570 [ 383.391934][T11179] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 73 40 44 89 e2 48 c7 c7 20 03 c8 8b e8 eb 76 f0 fe 90 <0f> 0b 90 90 e9 40 fe ff ff e8 0c d3 31 ff 44 0f b6 3d 2b 32 0a 0e [ 383.411564][T11179] RSP: 0018:ffffc90014e07430 EFLAGS: 00010282 [ 383.417653][T11179] RAX: 0000000000000000 RBX: ffff88804c1395b8 RCX: ffffc9001f8f1000 [ 383.425634][T11179] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 383.433614][T11179] RBP: ffffc90014e074f0 R08: 0000000000000001 R09: 0000000000000000 [ 383.441596][T11179] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 383.449573][T11179] R13: 1ffff920029c0e89 R14: ffff88804c139690 R15: 0000000000000000 [ 383.457570][T11179] ? __warn_printk+0x1a5/0x350 [ 383.462385][T11179] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 383.468757][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.474410][T11179] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 383.480593][T11179] ext4_xattr_inode_dec_ref_all+0x52a/0xed0 [ 383.486619][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.492286][T11179] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 383.498751][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.504400][T11179] ? errseq_check+0x4f/0x90 [ 383.508925][T11179] ext4_xattr_delete_inode+0x4ee/0xb80 [ 383.514398][T11179] ? rcu_is_watching+0x12/0xc0 [ 383.519186][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.524833][T11179] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 383.530826][T11179] ? ext4_journal_check_start+0x22b/0x340 [ 383.536674][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.542326][T11179] ? __ext4_journal_start_sb+0x19e/0x690 [ 383.547973][T11179] ? ext4_evict_inode+0x5cf/0x18e0 [ 383.553112][T11179] ext4_evict_inode+0x7d6/0x18e0 [ 383.558103][T11179] ? __pfx_ext4_evict_inode+0x10/0x10 [ 383.563498][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.569154][T11179] ? __pfx_ext4_evict_inode+0x10/0x10 [ 383.574557][T11179] evict+0x3e6/0x920 [ 383.578469][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.584119][T11179] ? __pfx_evict+0x10/0x10 [ 383.588656][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.594319][T11179] iput+0x521/0x880 [ 383.598140][T11179] ? __pfx_ext4_drop_inode+0x10/0x10 [ 383.603446][T11179] ext4_orphan_cleanup+0x731/0x11e0 [ 383.608678][T11179] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 383.614339][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.619991][T11179] ? ext4_register_li_request+0xec/0x9b0 [ 383.625660][T11179] ext4_fill_super+0x8a38/0xafa0 [ 383.630660][T11179] ? __pfx_ext4_fill_super+0x10/0x10 [ 383.635969][T11179] ? do_raw_spin_lock+0x12c/0x2b0 [ 383.641005][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.646656][T11179] ? find_held_lock+0x2b/0x80 [ 383.651356][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.657005][T11179] ? set_blocksize+0x406/0x500 [ 383.661813][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.667482][T11179] ? sb_set_blocksize+0x176/0x1d0 [ 383.672529][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.678180][T11179] ? setup_bdev_super+0x369/0x730 [ 383.683244][T11179] get_tree_bdev_flags+0x38c/0x620 [ 383.688391][T11179] ? __pfx_ext4_fill_super+0x10/0x10 [ 383.693706][T11179] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 383.699373][T11179] ? apparmor_capable+0x114/0x1d0 [ 383.704412][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.710060][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.715706][T11179] ? security_capable+0x7e/0x260 [ 383.720665][T11179] vfs_get_tree+0x8e/0x340 [ 383.725111][T11179] path_mount+0x1513/0x2000 [ 383.729638][T11179] ? __pfx_path_mount+0x10/0x10 [ 383.734509][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.740158][T11179] ? kmem_cache_free+0x2d1/0x4d0 [ 383.745127][T11179] ? putname+0x154/0x1a0 [ 383.749484][T11179] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.755127][T11179] ? putname+0x154/0x1a0 [ 383.759391][T11179] ? __x64_sys_mount+0x28d/0x310 [ 383.764343][T11179] __x64_sys_mount+0x28d/0x310 [ 383.769120][T11179] ? __pfx___x64_sys_mount+0x10/0x10 [ 383.774431][T11179] do_syscall_64+0xcd/0x4e0 [ 383.778949][T11179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.784921][T11179] RIP: 0033:0x7f0e5019034a [ 383.789343][T11179] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.808966][T11179] RSP: 002b:00007f0e5107de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.817493][T11179] RAX: ffffffffffffffda RBX: 00007f0e5107def0 RCX: 00007f0e5019034a [ 383.825470][T11179] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0e5107deb0 [ 383.833450][T11179] RBP: 0000200000000180 R08: 00007f0e5107def0 R09: 0000000000800700 [ 383.841430][T11179] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 383.849412][T11179] R13: 00007f0e5107deb0 R14: 000000000000046c R15: 0000200000000680 [ 383.857432][T11179] [ 383.860743][T11179] Kernel Offset: disabled [ 383.865067][T11179] Rebooting in 86400 seconds..