last executing test programs: 25m31.622606885s ago: executing program 32 (id=253): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x18, &(0x7f00000003c0)={0x20, 0x5, 0x2e, "1a7a2a415d352605b4f9df628958f0433f5fb807f537e657201eb11e660ff9f650e965aa4f8d491b1f0572ad2887"}, 0x0, 0x0, 0x0, 0x0}) 25m27.073141129s ago: executing program 33 (id=266): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900000000eaff000073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x1000}) close(r0) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) 25m25.565466694s ago: executing program 34 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 25m24.185024448s ago: executing program 3 (id=312): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) 25m23.998352912s ago: executing program 3 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 25m23.947274042s ago: executing program 3 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) 25m23.854457588s ago: executing program 3 (id=315): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) 25m22.793564178s ago: executing program 35 (id=293): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000bc0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25m22.099577655s ago: executing program 3 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(0x0, 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 25m22.005817304s ago: executing program 3 (id=318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 25m15.594339505s ago: executing program 36 (id=306): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x400) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x19) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x9, 0x7, 0x6b0, 0x510000000, 0x6, 0x40}, 0x0) 25m10.478297178s ago: executing program 6 (id=322): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) 25m10.436734918s ago: executing program 6 (id=323): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) 25m10.189589825s ago: executing program 6 (id=324): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 25m10.030375804s ago: executing program 6 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140000000000800024000000000080003b384"], 0x54}}, 0x0) 25m9.957030256s ago: executing program 6 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x15f897, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open(0x0, 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 25m9.760633342s ago: executing program 6 (id=327): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 25m6.710809133s ago: executing program 37 (id=318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 24m54.538009914s ago: executing program 38 (id=327): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 24m22.507057205s ago: executing program 0 (id=444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x100, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x100}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 24m22.106970342s ago: executing program 0 (id=448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 24m21.44373641s ago: executing program 0 (id=451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, 0x0) 24m18.344550242s ago: executing program 0 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 24m18.022138755s ago: executing program 0 (id=463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 24m17.340745279s ago: executing program 0 (id=464): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') writev(0xffffffffffffffff, &(0x7f0000000540), 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x180, 0x100) 24m1.766546404s ago: executing program 39 (id=464): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') writev(0xffffffffffffffff, &(0x7f0000000540), 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x180, 0x100) 54.288274559s ago: executing program 7 (id=5349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}, {0x0}], 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 53.797350132s ago: executing program 7 (id=5353): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=0x10001, 0x12) 53.333919854s ago: executing program 7 (id=5356): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 52.518360207s ago: executing program 7 (id=5362): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") syz_clone(0x7800000, 0x0, 0xffffffee, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 51.987902211s ago: executing program 7 (id=5369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffd9b, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c805}, 0x400400c) 50.614284575s ago: executing program 7 (id=5379): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 49.718882302s ago: executing program 40 (id=5379): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 29.684973426s ago: executing program 4 (id=5507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) 29.366601996s ago: executing program 4 (id=5511): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8a, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x10000}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 28.937493532s ago: executing program 4 (id=5514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 28.396901538s ago: executing program 4 (id=5517): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x11, 0x2}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@local, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x68}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x800, 0xd, 0x7, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 27.592108263s ago: executing program 4 (id=5519): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000204e00204e0000", 0x58}], 0x1) 27.027080463s ago: executing program 4 (id=5525): unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@sr0, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYRESDEC=0x0], 0x50) 11.541903862s ago: executing program 41 (id=5525): unshare(0x40400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@sr0, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYRESDEC=0x0], 0x50) 9.729402065s ago: executing program 2 (id=5620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008001) 9.339416791s ago: executing program 2 (id=5623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fstat(r0, &(0x7f0000000180)) 8.638904385s ago: executing program 2 (id=5626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=f']) 8.494342951s ago: executing program 8 (id=5628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206405000000000020"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',acc', @ANYRES32]) 7.94216719s ago: executing program 2 (id=5631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000bd8000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = openat$autofs(0xffffff9c, 0x0, 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x8c}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r8, 0x0, 0x0, 0x7) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="11002a00dd0b6162636465666768696a6b00"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100) 7.942014242s ago: executing program 5 (id=5632): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 7.887226501s ago: executing program 8 (id=5633): modify_ldt$read_default(0x2, &(0x7f0000000000)=""/156, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00'}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 7.499395352s ago: executing program 5 (id=5634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008001) 7.001157514s ago: executing program 5 (id=5636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000e51f9193bb5a51ba3205ac1884d65b795d4d6878eaf83a198a6dda709401354be367286cb8", @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f6d61637674617000000004000380"], 0x30}}, 0x4004) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x2, 0x3, {"2e53511905730163a951ba05789f0f66"}, 0x68, 0x7f23, 0x7}, @ib={0x1b, 0xffff, 0xffffffff, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 4.906399424s ago: executing program 1 (id=5649): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000580), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 4.693822483s ago: executing program 1 (id=5650): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 4.438411827s ago: executing program 2 (id=5651): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x988, &(0x7f0000000b40)={[{@barrier_val}, {@discard}, {@block_validity}, {@nobarrier}, {@noblock_validity}, {@nobarrier}]}, 0x1, 0x7a0, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000004c0)={0x8, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x226}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000500)={0x80, 0x2, 'client1\x00', 0xffffffff80000006, "f7f3e800001600", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.250478733s ago: executing program 9 (id=5652): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) poll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x101) 4.114232496s ago: executing program 1 (id=5653): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 3.205929221s ago: executing program 9 (id=5654): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 2.809315817s ago: executing program 9 (id=5655): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 813.439917ms ago: executing program 8 (id=5656): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10000) 720.769955ms ago: executing program 8 (id=5657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 542.3951ms ago: executing program 8 (id=5658): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x7800000, 0x0, 0xffffffee, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 508.673564ms ago: executing program 9 (id=5659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008001) 385.163531ms ago: executing program 9 (id=5660): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x0) 312.732656ms ago: executing program 5 (id=5661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 258.307723ms ago: executing program 2 (id=5662): unshare(0x40400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 76.831888ms ago: executing program 9 (id=5663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 0s ago: executing program 8 (id=5664): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): us mode [ 1601.107183][T24028] syzkaller0: entered allmulticast mode [ 1601.172190][T24028] tipc: Resetting bearer [ 1601.223744][T24027] tipc: Resetting bearer [ 1601.380372][T24027] tipc: Disabling bearer [ 1601.527478][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1601.608924][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1601.954214][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4990'. [ 1602.521598][T24048] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1602.531363][T24048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1602.546476][T24048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1602.676428][T19971] lo speed is unknown, defaulting to 1000 [ 1602.723068][T24012] infiniband syz2: set active [ 1602.779926][T24012] infiniband syz2: added lo [ 1602.807353][T24012] syz2: rxe_create_cq: returned err = -12 [ 1602.824585][T24012] infiniband syz2: Couldn't create ib_mad CQ [ 1602.850286][T24012] infiniband syz2: Couldn't open port 1 [ 1603.036854][T24012] RDS/IB: syz2: added [ 1603.064707][T24012] smc: adding ib device syz2 with port count 1 [ 1603.102669][T24012] smc: ib device syz2 port 1 has no pnetid [ 1603.133314][T19978] lo speed is unknown, defaulting to 1000 [ 1603.184456][T24012] lo speed is unknown, defaulting to 1000 [ 1603.495236][T24066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1603.968945][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1603.989297][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1604.648967][T24012] lo speed is unknown, defaulting to 1000 [ 1604.696463][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5016'. [ 1605.768378][T24012] lo speed is unknown, defaulting to 1000 [ 1606.432840][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1606.478690][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1607.489265][ T30] audit: type=1326 audit(1760308153.779:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.494363][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5029'. [ 1607.620653][T24135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.628299][T24135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.669499][T24135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.677147][T24135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.771558][ T30] audit: type=1326 audit(1760308153.779:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.801509][ T30] audit: type=1326 audit(1760308153.779:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.824614][ T30] audit: type=1326 audit(1760308153.779:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.847202][ T30] audit: type=1326 audit(1760308153.779:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.889740][ T30] audit: type=1326 audit(1760308153.779:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1607.952167][T24138] lo speed is unknown, defaulting to 1000 [ 1607.973178][T24012] lo speed is unknown, defaulting to 1000 [ 1607.987663][ T30] audit: type=1326 audit(1760308153.779:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1608.192596][ T30] audit: type=1326 audit(1760308153.779:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1608.215627][ T30] audit: type=1326 audit(1760308153.779:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1608.238365][ T30] audit: type=1326 audit(1760308153.779:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24134 comm="syz.9.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1609.640997][T24138] lo speed is unknown, defaulting to 1000 [ 1609.913781][T24012] lo speed is unknown, defaulting to 1000 [ 1610.492742][T24173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.722549][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1610.734718][T24184] digital: digital_start_poll: Unknown protocol [ 1611.575388][T24012] lo speed is unknown, defaulting to 1000 [ 1613.372385][T24205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5051'. [ 1614.126019][T24214] loop5: detected capacity change from 0 to 512 [ 1614.184329][T24215] netlink: 384 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1614.251987][T24214] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1614.279204][T24214] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1614.328570][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5058'. [ 1614.339743][T24214] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 1614.348470][T24219] digital: digital_start_poll: Unknown protocol [ 1614.440303][T24214] loop5: detected capacity change from 0 to 512 [ 1614.447596][T24214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1614.493146][T24214] EXT4-fs: Ignoring removed bh option [ 1614.547723][T24214] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1614.602880][T24214] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #11: comm syz.5.5056: corrupted inode contents [ 1614.644101][T24214] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #11: comm syz.5.5056: mark_inode_dirty error [ 1614.677913][T24214] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.5056: invalid indirect mapped block 1 (level 1) [ 1614.715860][T24214] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #11: comm syz.5.5056: corrupted inode contents [ 1614.764469][T24214] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 1614.825729][T24214] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #11: comm syz.5.5056: corrupted inode contents [ 1614.849406][T24214] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.5056: mark_inode_dirty error [ 1614.876824][T24214] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 1614.903985][T24214] EXT4-fs (loop5): 1 truncate cleaned up [ 1614.919559][T24214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.963018][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5065'. [ 1614.978660][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5065'. [ 1615.735805][T21069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.956116][T24255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.416222][T24273] netlink: 'syz.7.5076': attribute type 27 has an invalid length. [ 1616.588235][T24270] netlink: 'syz.9.5075': attribute type 7 has an invalid length. [ 1616.626229][T24270] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5075'. [ 1616.707945][T24276] loop4: detected capacity change from 0 to 128 [ 1616.729956][T24276] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1616.813683][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1616.813710][ T30] audit: type=1326 audit(1760308163.109:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1616.942026][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.948415][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.017803][ T30] audit: type=1326 audit(1760308163.109:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.149985][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1617.159197][ T30] audit: type=1326 audit(1760308163.109:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.181079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.237903][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1617.267435][ T30] audit: type=1326 audit(1760308163.109:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.399509][ T30] audit: type=1326 audit(1760308163.109:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.513640][ T30] audit: type=1326 audit(1760308163.109:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.637322][ T30] audit: type=1326 audit(1760308163.119:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.724827][ T30] audit: type=1326 audit(1760308163.139:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.746967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.771081][T24289] loop7: detected capacity change from 0 to 512 [ 1617.849754][ T30] audit: type=1326 audit(1760308163.139:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1617.909395][T24289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1617.922289][T24289] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.933029][ T30] audit: type=1326 audit(1760308163.149:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933758eec9 code=0x7ffc0000 [ 1618.028897][T24289] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1618.211256][T20103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.437394][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5090'. [ 1618.468409][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5090'. [ 1618.579542][T24313] loop9: detected capacity change from 0 to 512 [ 1618.630679][T24313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.683923][T24313] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.793944][T24319] loop1: detected capacity change from 0 to 512 [ 1618.835142][T24319] EXT4-fs: Ignoring removed nobh option [ 1618.885400][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.5094: corrupted inode contents [ 1618.930745][T24319] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #3: comm syz.1.5094: mark_inode_dirty error [ 1618.948077][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.980132][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.5094: corrupted inode contents [ 1619.034989][T24319] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.5094: mark_inode_dirty error [ 1619.110327][T24319] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.5094: Failed to acquire dquot type 0 [ 1619.142729][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5094: corrupted inode contents [ 1619.239784][T24319] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.5094: mark_inode_dirty error [ 1619.277858][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5094: corrupted inode contents [ 1619.328784][T24319] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5094: mark_inode_dirty error [ 1619.370102][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5094: corrupted inode contents [ 1619.399612][T24319] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1619.441830][T24319] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5094: corrupted inode contents [ 1619.448426][T24334] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.457797][T24319] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.5094: mark_inode_dirty error [ 1619.492301][T24319] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1619.503842][T24319] EXT4-fs (loop1): 1 truncate cleaned up [ 1619.534645][T24319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.592360][T24319] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.614203][T24331] lo speed is unknown, defaulting to 1000 [ 1619.643494][T24331] lo speed is unknown, defaulting to 1000 [ 1619.784506][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.914332][T24359] syz2: rxe_newlink: already configured on lo [ 1621.021786][T24334] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.077870][T24360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.206690][T24364] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5110'. [ 1621.241856][T24364] netlink: 'syz.9.5110': attribute type 10 has an invalid length. [ 1621.305387][T24364] netlink: 2 bytes leftover after parsing attributes in process `syz.9.5110'. [ 1621.345959][T24367] loop8: detected capacity change from 0 to 512 [ 1621.487058][T24367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.514461][T24334] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.527402][T24367] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1621.575265][T24364] team0: entered promiscuous mode [ 1621.583815][T24364] team_slave_0: entered promiscuous mode [ 1621.611283][T24364] team_slave_1: entered promiscuous mode [ 1621.631070][T24364] bridge0: port 3(team0) entered blocking state [ 1621.638204][T24364] bridge0: port 3(team0) entered disabled state [ 1621.645016][T24364] team0: entered allmulticast mode [ 1621.675477][T24364] team_slave_0: entered allmulticast mode [ 1621.695655][T24364] team_slave_1: entered allmulticast mode [ 1621.736289][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.750078][T24364] bridge0: port 3(team0) entered blocking state [ 1621.756568][T24364] bridge0: port 3(team0) entered forwarding state [ 1621.832457][T24334] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.035850][T24375] netlink: 'syz.5.5115': attribute type 6 has an invalid length. [ 1622.073289][ T975] kworker/1:2 (975) used greatest stack depth: 18184 bytes left [ 1622.101318][T24375] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5115'. [ 1622.649133][ T6691] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.849539][ T6691] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.021668][ T6691] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.164935][ T1141] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.310825][T24402] loop9: detected capacity change from 0 to 512 [ 1623.415330][T24402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1623.418434][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1623.418458][ T30] audit: type=1326 audit(1760308169.699:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.467374][ T30] audit: type=1326 audit(1760308169.699:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.490086][ T30] audit: type=1326 audit(1760308169.709:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.512722][ T30] audit: type=1326 audit(1760308169.729:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.537938][ T30] audit: type=1326 audit(1760308169.759:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.545599][T24402] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1623.582825][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1623.597725][ T30] audit: type=1326 audit(1760308169.889:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.635606][ T30] audit: type=1326 audit(1760308169.889:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.666372][ T30] audit: type=1326 audit(1760308169.889:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24404 comm="syz.1.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1623.882215][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.101144][ T30] audit: type=1326 audit(1760308170.389:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24420 comm="syz.9.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1624.155540][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5134'. [ 1624.192762][ T30] audit: type=1326 audit(1760308170.389:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24420 comm="syz.9.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1624.872009][T24442] tipc: Enabled bearer , priority 0 [ 1625.694261][T24441] tipc: Disabling bearer [ 1625.854176][T24451] syzkaller0: entered promiscuous mode [ 1625.869783][T24451] syzkaller0: entered allmulticast mode [ 1626.481616][T24472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5155'. [ 1627.822735][T24453] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1628.393022][T24496] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1629.845396][T24510] lo speed is unknown, defaulting to 1000 [ 1629.869324][T24510] lo speed is unknown, defaulting to 1000 [ 1630.471455][T24501] syz.8.5164: vmalloc error: size 50749440, failed to allocated page array size 99120, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1630.545202][T24501] CPU: 1 UID: 0 PID: 24501 Comm: syz.8.5164 Not tainted syzkaller #0 PREEMPT(full) [ 1630.545252][T24501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1630.545274][T24501] Call Trace: [ 1630.545294][T24501] [ 1630.545309][T24501] dump_stack_lvl+0x16c/0x1f0 [ 1630.545372][T24501] warn_alloc+0x248/0x3a0 [ 1630.545435][T24501] ? __pfx_warn_alloc+0x10/0x10 [ 1630.545515][T24501] ? xt_counters_alloc+0x4c/0x70 [ 1630.545554][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.545598][T24501] ? __vmalloc_node_noprof+0xad/0xf0 [ 1630.545658][T24501] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1630.545716][T24501] ? ip_setsockopt+0xcb/0xf0 [ 1630.545771][T24501] ? xt_counters_alloc+0x4c/0x70 [ 1630.545820][T24501] ? rcu_is_watching+0x12/0xc0 [ 1630.545857][T24501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1630.545913][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.545963][T24501] ? translate_table+0xd13/0x1c10 [ 1630.546021][T24501] ? kvfree+0xd/0x20 [ 1630.546057][T24501] ? xt_counters_alloc+0x4c/0x70 [ 1630.546104][T24501] __vmalloc_node_noprof+0xad/0xf0 [ 1630.546157][T24501] ? xt_counters_alloc+0x4c/0x70 [ 1630.546207][T24501] xt_counters_alloc+0x4c/0x70 [ 1630.546248][T24501] __do_replace+0x97/0x9f0 [ 1630.546314][T24501] ? __pfx_translate_table+0x10/0x10 [ 1630.546373][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.546417][T24501] ? _copy_from_user+0x59/0xd0 [ 1630.546480][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.546523][T24501] ? copy_from_sockptr_offset+0xed/0x1b0 [ 1630.546585][T24501] ? __pfx___do_replace+0x10/0x10 [ 1630.546648][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.546701][T24501] do_arpt_set_ctl+0xb78/0xe30 [ 1630.546761][T24501] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1630.546810][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.546864][T24501] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1630.546924][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.546967][T24501] ? trace_contention_end+0xdd/0x130 [ 1630.547014][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.547058][T24501] ? find_held_lock+0x2b/0x80 [ 1630.547119][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.547165][T24501] ? find_held_lock+0x2b/0x80 [ 1630.547237][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.547287][T24501] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1630.547349][T24501] ? lockdep_hardirqs_on+0x7c/0x110 [ 1630.547404][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.547450][T24501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1630.547509][T24501] ? sockopt_release_sock+0x52/0x60 [ 1630.547590][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.547634][T24501] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1630.547683][T24501] nf_setsockopt+0x8d/0xf0 [ 1630.547726][T24501] ip_setsockopt+0xcb/0xf0 [ 1630.547779][T24501] udp_setsockopt+0x7d/0xd0 [ 1630.547823][T24501] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1630.547867][T24501] do_sock_setsockopt+0xf3/0x1d0 [ 1630.547911][T24501] __sys_setsockopt+0x1a0/0x230 [ 1630.547974][T24501] __x64_sys_setsockopt+0xbd/0x160 [ 1630.548026][T24501] ? do_syscall_64+0x91/0xfa0 [ 1630.548081][T24501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1630.548125][T24501] ? lockdep_hardirqs_on+0x7c/0x110 [ 1630.548182][T24501] do_syscall_64+0xcd/0xfa0 [ 1630.548242][T24501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.548291][T24501] RIP: 0033:0x7f492eb8eec9 [ 1630.548321][T24501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.548357][T24501] RSP: 002b:00007f492fad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1630.548392][T24501] RAX: ffffffffffffffda RBX: 00007f492ede5fa0 RCX: 00007f492eb8eec9 [ 1630.548417][T24501] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000005 [ 1630.548440][T24501] RBP: 00007f492ec11f91 R08: 0000000000000438 R09: 0000000000000000 [ 1630.548463][T24501] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1630.548486][T24501] R13: 00007f492ede6038 R14: 00007f492ede5fa0 R15: 00007fff949bee18 [ 1630.548537][T24501] [ 1630.549050][T24501] Mem-Info: [ 1630.842744][T24501] active_anon:12102 inactive_anon:0 isolated_anon:0 [ 1630.842744][T24501] active_file:15548 inactive_file:40943 isolated_file:0 [ 1630.842744][T24501] unevictable:790 dirty:170 writeback:0 [ 1630.842744][T24501] slab_reclaimable:11833 slab_unreclaimable:106973 [ 1630.842744][T24501] mapped:37914 shmem:6153 pagetables:1725 [ 1630.842744][T24501] sec_pagetables:0 bounce:0 [ 1630.842744][T24501] kernel_misc_reclaimable:0 [ 1630.842744][T24501] free:1272329 free_pcp:14056 free_cma:0 [ 1630.842846][T24501] Node 0 active_anon:48408kB inactive_anon:0kB active_file:62192kB inactive_file:163568kB unevictable:1624kB isolated(anon):0kB isolated(file):0kB mapped:151656kB dirty:680kB writeback:0kB shmem:23076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:6764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1631.069811][T24501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1631.129600][T24501] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.210009][T24501] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 1631.215887][T24501] Node 0 DMA32 free:1182416kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44708kB inactive_anon:0kB active_file:62192kB inactive_file:163568kB unevictable:1624kB writepending:680kB zspages:0kB present:3129332kB managed:2543524kB mlocked:40kB bounce:0kB free_pcp:39320kB local_pcp:15484kB free_cma:0kB [ 1631.395922][T24526] loop4: detected capacity change from 0 to 128 [ 1631.414119][T24501] lowmem_reserve[]: 0 0 1 1 1 [ 1631.418930][T24501] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.486442][T24501] lowmem_reserve[]: 0 0 0 0 0 [ 1631.492049][T24501] Node 1 Normal free:3890616kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22248kB local_pcp:8100kB free_cma:0kB [ 1631.557379][T24526] bio_check_eod: 96 callbacks suppressed [ 1631.557407][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.557407][T24526] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1631.619702][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1631.619729][ T30] audit: type=1326 audit(1760308177.909:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1631.660260][T24528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1631.669461][T24501] lowmem_reserve[]: 0 0 0 0 0 [ 1631.678083][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.678083][T24526] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1631.689627][T24501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 1631.693313][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.693313][T24526] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1631.697164][T24528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1631.730895][T24501] (M) 3*4096kB (M) = 15360kB [ 1631.741412][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.741412][T24526] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1631.742902][T24501] Node 0 [ 1631.763030][T24532] syz.4.5172: attempt to access beyond end of device [ 1631.763030][T24532] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1631.765184][T24528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.766212][ T30] audit: type=1326 audit(1760308177.909:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1631.797616][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.797616][T24526] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1631.810254][T24532] syz.4.5172: attempt to access beyond end of device [ 1631.810254][T24532] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 1631.838947][T24501] DMA32: 415*4kB (UME) 742*8kB (ME) 510*16kB (UM) 648*32kB (UME) 268*64kB (UME) 108*128kB (UME) 87*256kB (UME) 27*512kB (UME) 8*1024kB (UM) 3*2048kB (UME) 261*4096kB (UM) = 1186956kB [ 1631.839273][T24501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1631.839505][T24501] Node 1 Normal: 210*4kB (UE) 46*8kB (UME) 32*16kB (UME) 146*32kB (UME) 43*64kB (UME) 14*128kB [ 1631.881705][ T30] audit: type=1326 audit(1760308177.909:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1631.891144][T24528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.892850][ T30] audit: type=1326 audit(1760308177.909:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1631.927462][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.927462][T24526] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1631.961702][T24501] (UME) 5*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3890616kB [ 1631.974519][T24528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.975256][T24501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1631.988266][T24526] syz.4.5172: attempt to access beyond end of device [ 1631.988266][T24526] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1632.005417][T24501] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1632.013203][T24526] syz.4.5172: attempt to access beyond end of device [ 1632.013203][T24526] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1632.031048][T24501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.040906][ T30] audit: type=1326 audit(1760308177.909:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.055132][T24501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.082415][ T30] audit: type=1326 audit(1760308177.909:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.097601][T24501] 60743 total pagecache pages [ 1632.115619][T24501] 0 pages in swap cache [ 1632.121898][T24501] Free swap = 124996kB [ 1632.129498][T24501] Total swap = 124996kB [ 1632.134028][T24501] 2097051 pages RAM [ 1632.138003][T24501] 0 pages HighMem/MovableOnly [ 1632.150329][T24501] 429080 pages reserved [ 1632.151291][ T30] audit: type=1326 audit(1760308177.949:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.154523][T24501] 0 pages cma reserved [ 1632.199032][ T30] audit: type=1326 audit(1760308177.949:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.223144][ T30] audit: type=1326 audit(1760308177.949:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.248520][ T30] audit: type=1326 audit(1760308177.949:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1632.573827][T24541] loop4: detected capacity change from 0 to 512 [ 1632.646737][T24541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1632.798420][T24541] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.296532][T24561] loop9: detected capacity change from 0 to 512 [ 1635.391042][T24561] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1635.430185][T24561] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1635.488169][T19414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.520818][T24561] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #16: comm syz.9.5181: corrupted inode contents [ 1635.584538][T24561] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #16: comm syz.9.5181: mark_inode_dirty error [ 1635.630326][T24561] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #16: comm syz.9.5181: corrupted inode contents [ 1635.694356][T24561] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.5181: mark_inode_dirty error [ 1635.740046][T24560] usb usb9: usbfs: process 24560 (syz.1.5182) did not claim interface 0 before use [ 1635.775027][T24561] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #16: comm syz.9.5181: corrupted inode contents [ 1635.832631][T24561] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 1635.870687][T24561] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #16: comm syz.9.5181: corrupted inode contents [ 1635.933663][T24561] EXT4-fs error (device loop9): ext4_truncate:4637: inode #16: comm syz.9.5181: mark_inode_dirty error [ 1635.980219][T24561] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 1636.048370][T24561] EXT4-fs (loop9): 1 truncate cleaned up [ 1636.336299][T19152] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:37: Failed to release dquot type 1 [ 1636.401145][T24561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1636.555323][T24578] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5187'. [ 1636.742177][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.048418][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5191'. [ 1637.770005][T24600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1638.368602][T24611] loop9: detected capacity change from 0 to 128 [ 1638.507024][T24611] bio_check_eod: 3 callbacks suppressed [ 1638.507051][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.507051][T24611] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1638.626421][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.626421][T24611] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1638.667267][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.667267][T24611] loop9: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1638.675244][T24612] syz.9.5199: attempt to access beyond end of device [ 1638.675244][T24612] loop9: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1638.731368][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.731368][T24611] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1638.808723][T24612] syz.9.5199: attempt to access beyond end of device [ 1638.808723][T24612] loop9: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 1638.856030][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.856030][T24611] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1638.951458][T24611] syz.9.5199: attempt to access beyond end of device [ 1638.951458][T24611] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1639.043472][T24611] syz.9.5199: attempt to access beyond end of device [ 1639.043472][T24611] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1639.183654][T24611] syz.9.5199: attempt to access beyond end of device [ 1639.183654][T24611] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1639.235082][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5202'. [ 1639.495722][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1639.495749][ T30] audit: type=1326 audit(1760308185.789:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.528611][T24619] loop5: detected capacity change from 0 to 4096 [ 1639.579341][T24619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1639.597085][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1639.609022][ T30] audit: type=1326 audit(1760308185.789:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.690137][ T30] audit: type=1326 audit(1760308185.829:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.692211][T24619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1639.754471][ T30] audit: type=1326 audit(1760308185.829:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.777202][ T30] audit: type=1326 audit(1760308185.829:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.777682][T24619] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.5203: invalid fast symlink length 131109 [ 1639.799793][ T30] audit: type=1326 audit(1760308185.829:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.835238][ T30] audit: type=1326 audit(1760308185.829:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.859456][ T30] audit: type=1326 audit(1760308185.829:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.882038][ T30] audit: type=1326 audit(1760308185.829:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1639.932638][ T30] audit: type=1326 audit(1760308185.829:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24620 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f905358eec9 code=0x7ffc0000 [ 1640.124130][T21069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.493378][T24638] 9pnet_fd: Insufficient options for proto=fd [ 1640.924484][T24646] loop1: detected capacity change from 0 to 1024 [ 1641.035909][T24646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1641.075758][T24648] syzkaller0: entered promiscuous mode [ 1641.081623][T24648] syzkaller0: entered allmulticast mode [ 1641.214319][T24646] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.350525][T24646] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.5212: lblock 3 mapped to illegal pblock 3 (length 1) [ 1641.392657][T24654] syzkaller0: entered promiscuous mode [ 1641.399140][T24654] syzkaller0: entered allmulticast mode [ 1641.407038][T24646] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1641.529798][T24646] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1641.529798][T24646] [ 1641.799356][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1641.961715][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5218'. [ 1642.253821][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5222'. [ 1642.285986][T24682] 9pnet_fd: Insufficient options for proto=fd [ 1642.313153][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1642.899988][T24695] syzkaller0: entered promiscuous mode [ 1642.923841][T24695] syzkaller0: entered allmulticast mode [ 1643.986954][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5236'. [ 1644.090119][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1644.416318][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'. [ 1645.635302][T24739] loop9: detected capacity change from 0 to 512 [ 1645.736605][T24736] loop8: detected capacity change from 0 to 1024 [ 1645.739620][T24738] lo speed is unknown, defaulting to 1000 [ 1645.751816][T24738] lo speed is unknown, defaulting to 1000 [ 1646.022392][T24736] EXT4-fs: Ignoring removed orlov option [ 1646.073631][T24736] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1646.110557][T24739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.179527][T24749] usb usb1: usbfs: process 24749 (syz.4.5247) did not claim interface 0 before use [ 1646.206896][T24736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.445286][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.504233][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5248'. [ 1646.921912][T24761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5253'. [ 1646.943437][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.988740][T24764] loop1: detected capacity change from 0 to 512 [ 1647.227204][T24764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.319844][T24764] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.936522][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.059972][T24788] loop9: detected capacity change from 0 to 512 [ 1648.109959][T24788] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1648.150802][T24788] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1648.186820][T24788] EXT4-fs (loop9): SIPHASH is not a valid default hash value [ 1648.325532][T24788] loop9: detected capacity change from 0 to 512 [ 1648.414106][T24788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1648.476447][T24788] EXT4-fs: Ignoring removed bh option [ 1648.550241][T24788] EXT4-fs error (device loop9): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1648.590190][T24788] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5262: corrupted inode contents [ 1648.591829][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1648.591852][ T30] audit: type=1326 audit(1760308194.889:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24792 comm="syz.5.5264" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eed38eec9 code=0x0 [ 1648.649598][T24788] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #11: comm syz.9.5262: mark_inode_dirty error [ 1648.706776][T24788] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.5262: invalid indirect mapped block 1 (level 1) [ 1648.744949][T24788] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5262: corrupted inode contents [ 1648.760193][T24795] loop5: detected capacity change from 0 to 8192 [ 1648.777977][T24788] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 1648.823059][T24788] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5262: corrupted inode contents [ 1648.853523][ T30] audit: type=1326 audit(1760308195.139:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24792 comm="syz.5.5264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x0 [ 1648.889899][T24788] EXT4-fs error (device loop9): ext4_truncate:4637: inode #11: comm syz.9.5262: mark_inode_dirty error [ 1648.970924][T24788] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 1648.993782][T24788] EXT4-fs (loop9): 1 truncate cleaned up [ 1649.027866][T24788] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1649.091883][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5268'. [ 1649.411718][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5269'. [ 1649.503437][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.768485][T24821] loop1: detected capacity change from 0 to 512 [ 1649.852410][T24821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.890170][T24821] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.905432][T24822] syzkaller0: entered promiscuous mode [ 1649.929242][T24822] syzkaller0: entered allmulticast mode [ 1650.050959][T24837] loop8: detected capacity change from 0 to 128 [ 1650.075244][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.200475][T24842] loop4: detected capacity change from 0 to 512 [ 1650.227296][T24845] siw: device registration error -23 [ 1650.270214][T24842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.302692][ T30] audit: type=1800 audit(1760308196.599:1596): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5277" name="bus" dev="loop8" ino=1048725 res=0 errno=0 [ 1650.329615][T24842] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.369537][T24837] bio_check_eod: 1 callbacks suppressed [ 1650.369565][T24837] syz.8.5277: attempt to access beyond end of device [ 1650.369565][T24837] loop8: rw=2049, sector=585, nr_sectors = 8 limit=128 [ 1650.410199][T24849] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5281'. [ 1650.439520][ T30] audit: type=1800 audit(1760308196.729:1597): pid=24842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5278" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1650.608010][T19414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.699968][T17696] kworker/u8:22: attempt to access beyond end of device [ 1650.699968][T17696] loop8: rw=1, sector=665, nr_sectors = 96 limit=128 [ 1650.732375][T24839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.740370][T24839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.779358][T24854] loop9: detected capacity change from 0 to 512 [ 1650.793134][T17696] kworker/u8:22: attempt to access beyond end of device [ 1650.793134][T17696] loop8: rw=1, sector=593, nr_sectors = 72 limit=128 [ 1650.863501][T17696] kworker/u8:22: attempt to access beyond end of device [ 1650.863501][T17696] loop8: rw=1, sector=761, nr_sectors = 280 limit=128 [ 1650.882728][T24854] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1650.889543][T24854] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1650.950858][T24859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5283'. [ 1650.960053][T24854] EXT4-fs (loop9): SIPHASH is not a valid default hash value [ 1651.010723][T24854] loop9: detected capacity change from 0 to 512 [ 1651.018347][T24854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1651.027432][T24854] EXT4-fs: Ignoring removed bh option [ 1651.034688][T24860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5283'. [ 1651.067931][T24854] EXT4-fs error (device loop9): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1651.090826][T24854] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5284: corrupted inode contents [ 1651.123791][T24854] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #11: comm syz.9.5284: mark_inode_dirty error [ 1651.207290][T24854] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.5284: invalid indirect mapped block 1 (level 1) [ 1651.273873][T24854] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5284: corrupted inode contents [ 1651.357363][T24854] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 1651.408223][T24854] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #11: comm syz.9.5284: corrupted inode contents [ 1651.450958][T24854] EXT4-fs error (device loop9): ext4_truncate:4637: inode #11: comm syz.9.5284: mark_inode_dirty error [ 1651.472400][T24854] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 1651.497937][T24868] loop8: detected capacity change from 0 to 1024 [ 1651.508971][T24854] EXT4-fs (loop9): 1 truncate cleaned up [ 1651.521018][T24868] EXT4-fs: Ignoring removed mblk_io_submit option [ 1651.538785][T24868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1651.549476][T24854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.592863][T24868] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.5287: bad orphan inode 11 [ 1651.618917][T24868] ext4_test_bit(bit=10, block=4) = 1 [ 1651.634691][T24868] is_bad_inode(inode)=0 [ 1651.647181][T24868] NEXT_ORPHAN(inode)=3254779904 [ 1651.665239][T24868] max_ino=32 [ 1651.670151][T24868] i_nlink=0 [ 1651.695684][T24868] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.5287: lblock 2 mapped to illegal pblock 2 (length 1) [ 1651.741395][T24868] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1651.749580][T24868] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.5287: lblock 0 mapped to illegal pblock 48 (length 1) [ 1651.814937][T24868] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1651.846210][T24868] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.5287: Failed to acquire dquot type 0 [ 1651.893108][T24868] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 1651.923750][T24868] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.5287: mark_inode_dirty error [ 1651.950151][T24868] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1651.972053][T24868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1652.208615][T17575] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.342502][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.344899][T24880] loop1: detected capacity change from 0 to 512 [ 1652.360449][T17575] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.368871][T17575] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.381492][T24880] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1652.404656][T24880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1652.414714][T17575] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.425060][T24880] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 1652.466232][T24880] loop1: detected capacity change from 0 to 512 [ 1652.477145][T24880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1652.499860][T24880] EXT4-fs: Ignoring removed bh option [ 1652.528965][T24880] EXT4-fs error (device loop1): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1652.559077][T24880] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5288: corrupted inode contents [ 1652.593382][T24880] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #11: comm syz.1.5288: mark_inode_dirty error [ 1652.638758][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.659301][T24880] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.5288: invalid indirect mapped block 1 (level 1) [ 1652.697994][T24839] geneve2: entered promiscuous mode [ 1652.721428][T21540] EXT4-fs error (device loop8): __ext4_get_inode_loc:4831: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1652.777469][T24880] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5288: corrupted inode contents [ 1652.797130][T21540] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 1652.807273][T21540] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 1652.880866][T24880] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1652.894615][ T36] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.924383][T24880] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5288: corrupted inode contents [ 1652.940317][ T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.978758][ T36] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.986332][T24880] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.5288: mark_inode_dirty error [ 1653.013244][ T36] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.029865][T24880] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1653.080091][T24880] EXT4-fs (loop1): 1 truncate cleaned up [ 1653.091701][T24880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1653.105099][T24892] loop4: detected capacity change from 0 to 512 [ 1653.137019][T24896] rdma_rxe: rxe_newlink: failed to add lo [ 1653.143248][T24892] EXT4-fs: Ignoring removed nobh option [ 1653.253272][T24900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5297'. [ 1653.351539][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.5293: corrupted inode contents [ 1653.428147][T24892] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #3: comm syz.4.5293: mark_inode_dirty error [ 1653.508317][T24905] loop5: detected capacity change from 0 to 128 [ 1653.518141][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.5293: corrupted inode contents [ 1654.317610][T24905] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1654.339790][T24892] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.5293: mark_inode_dirty error [ 1654.395937][T24905] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.513375][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.517808][T24892] Quota error (device loop4): write_blk: dquota write failed [ 1654.595054][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5301'. [ 1654.599914][T24892] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1654.605838][T24914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5301'. [ 1654.682316][T24892] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.5293: Failed to acquire dquot type 0 [ 1654.721608][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.5293: corrupted inode contents [ 1654.749260][T24918] loop7: detected capacity change from 0 to 512 [ 1654.767573][T24918] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1654.777405][T24892] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.5293: mark_inode_dirty error [ 1654.799758][T24918] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1654.815201][T24918] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 1654.857420][T24918] loop7: detected capacity change from 0 to 512 [ 1654.868169][T24918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1654.929578][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.5293: corrupted inode contents [ 1654.942313][T24918] EXT4-fs: Ignoring removed bh option [ 1654.976943][T24892] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5293: mark_inode_dirty error [ 1654.991032][T24918] EXT4-fs error (device loop7): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1655.046249][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.5293: corrupted inode contents [ 1655.053053][T24918] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #11: comm syz.7.5302: corrupted inode contents [ 1655.082788][T24918] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #11: comm syz.7.5302: mark_inode_dirty error [ 1655.094368][T24892] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 1655.118878][T24892] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.5293: corrupted inode contents [ 1655.136528][T21069] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1655.139828][T24918] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.5302: invalid indirect mapped block 1 (level 1) [ 1655.172383][T24892] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.5293: mark_inode_dirty error [ 1655.185872][T24918] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #11: comm syz.7.5302: corrupted inode contents [ 1655.211572][T24892] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 1655.387253][T24927] loop1: detected capacity change from 0 to 512 [ 1655.483264][T24918] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1655.600181][T24892] EXT4-fs (loop4): 1 truncate cleaned up [ 1655.618193][T24927] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5300: bad orphan inode 11862016 [ 1655.660126][T24927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1655.673744][T24927] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1655.902189][T24892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1655.916793][T24892] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1655.938829][T24918] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #11: comm syz.7.5302: corrupted inode contents [ 1655.960957][T24918] EXT4-fs error (device loop7): ext4_truncate:4637: inode #11: comm syz.7.5302: mark_inode_dirty error [ 1655.976687][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5303'. [ 1656.014180][T24918] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1656.142543][T24918] EXT4-fs (loop7): 1 truncate cleaned up [ 1656.175398][T24918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1656.269797][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1656.537174][T19414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.613410][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5309'. [ 1656.658745][T24946] loop1: detected capacity change from 0 to 1024 [ 1656.680159][T24946] EXT4-fs: Ignoring removed oldalloc option [ 1656.686775][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5311'. [ 1656.708105][T24946] EXT4-fs: Ignoring removed bh option [ 1656.763718][T24946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.844459][ T30] audit: type=1326 audit(1760308205.139:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.8.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1658.947344][ T30] audit: type=1326 audit(1760308205.139:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.8.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1659.019751][ T30] audit: type=1326 audit(1760308205.139:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.8.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1659.088013][ T30] audit: type=1326 audit(1760308205.139:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.8.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1659.178329][T24972] tipc: Enabling of bearer rejected, failed to enable media [ 1659.202830][ T30] audit: type=1326 audit(1760308205.139:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.8.5315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1659.260085][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.394489][T24972] syzkaller0: entered promiscuous mode [ 1659.421441][T24972] syzkaller0: entered allmulticast mode [ 1659.539201][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5320'. [ 1659.643182][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5323'. [ 1659.695580][T24994] digital: digital_start_poll: Unknown protocol [ 1660.570541][T25007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1661.324464][T20103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.852464][T25023] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5329'. [ 1663.113412][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5330'. [ 1663.168975][T25026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5330'. [ 1665.053076][T25049] loop9: detected capacity change from 0 to 512 [ 1665.061507][T25049] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1665.115886][T25049] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1665.129486][T25049] EXT4-fs (loop9): 1 truncate cleaned up [ 1665.141360][T25049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.167449][T25049] EXT4-fs warning (device loop9): verify_group_input:136: Cannot add at group 880048229 (only 1 groups) [ 1665.231264][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.938948][T25056] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1665.969070][T25060] loop1: detected capacity change from 0 to 512 [ 1665.977895][T25060] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1666.007481][T25060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1666.051153][T25060] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 1666.083748][T25060] loop1: detected capacity change from 0 to 512 [ 1666.091188][T25060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1666.097885][T25060] EXT4-fs: Ignoring removed bh option [ 1666.109233][T25016] lo speed is unknown, defaulting to 1000 [ 1666.128721][T25060] EXT4-fs error (device loop1): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1666.143634][T25016] lo speed is unknown, defaulting to 1000 [ 1666.150792][T25060] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5340: corrupted inode contents [ 1666.219399][T25060] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #11: comm syz.1.5340: mark_inode_dirty error [ 1666.246008][T25060] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.5340: invalid indirect mapped block 1 (level 1) [ 1666.263105][T25060] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5340: corrupted inode contents [ 1666.301538][T25066] loop9: detected capacity change from 0 to 128 [ 1666.307939][T25060] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1666.318272][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5342'. [ 1666.332076][T25060] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #11: comm syz.1.5340: corrupted inode contents [ 1666.372704][T25060] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.5340: mark_inode_dirty error [ 1666.431097][T25060] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1666.469420][T25060] EXT4-fs (loop1): 1 truncate cleaned up [ 1666.484697][ T30] audit: type=1800 audit(1760308212.779:1603): pid=25066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5344" name="bus" dev="loop9" ino=1048726 res=0 errno=0 [ 1666.501718][T25060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.599724][ T30] audit: type=1800 audit(1760308212.889:1604): pid=25066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5344" name="bus" dev="loop9" ino=1048726 res=0 errno=0 [ 1666.836684][T25071] syz.9.5344: attempt to access beyond end of device [ 1666.836684][T25071] loop9: rw=2049, sector=481, nr_sectors = 560 limit=128 [ 1666.964192][T25078] bridge0: port 3(syz_tun) entered blocking state [ 1667.009983][T25078] bridge0: port 3(syz_tun) entered disabled state [ 1667.073245][T25080] netlink: 'syz.5.5347': attribute type 10 has an invalid length. [ 1667.113647][T25078] syz_tun: entered allmulticast mode [ 1667.144504][T25078] syz_tun: entered promiscuous mode [ 1667.202973][T25078] bridge0: port 3(syz_tun) entered blocking state [ 1667.209610][T25078] bridge0: port 3(syz_tun) entered forwarding state [ 1668.254125][T25080] bridge0: port 3(syz_tun) entered disabled state [ 1668.260908][T25080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.268764][T25080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.295137][T25080] bridge0: port 3(syz_tun) entered blocking state [ 1668.301851][T25080] bridge0: port 3(syz_tun) entered forwarding state [ 1668.309220][T25080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.316505][T25080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.324113][T25080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.331375][T25080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.406017][T25080] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1668.740420][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5348'. [ 1668.844702][T25099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5350'. [ 1669.071767][T25105] loop9: detected capacity change from 0 to 512 [ 1669.108396][T25109] loop7: detected capacity change from 0 to 128 [ 1669.137883][T25105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.175487][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5354'. [ 1669.193854][T25109] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1669.261333][T25105] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.272496][T25109] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.273182][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5354'. [ 1669.531064][T20103] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1669.571872][ T30] audit: type=1326 audit(1760308215.869:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.650356][ T30] audit: type=1326 audit(1760308215.869:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.688716][ T30] audit: type=1326 audit(1760308215.869:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.719786][ T30] audit: type=1326 audit(1760308215.869:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.764158][ T30] audit: type=1326 audit(1760308215.869:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.856915][ T30] audit: type=1326 audit(1760308215.869:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1669.936187][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.963258][ T30] audit: type=1326 audit(1760308215.869:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1670.064888][ T30] audit: type=1326 audit(1760308215.869:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.9.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1670.107592][T25121] netlink: 'syz.7.5356': attribute type 3 has an invalid length. [ 1670.346418][T25125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5358'. [ 1670.389619][T25131] loop7: detected capacity change from 0 to 128 [ 1670.780474][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5366'. [ 1670.863282][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.171193][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5377'. [ 1672.206260][T17696] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.349975][T25175] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5378'. [ 1672.487595][T25181] loop4: detected capacity change from 0 to 128 [ 1672.512301][T25179] loop8: detected capacity change from 0 to 2048 [ 1672.652534][T25179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1672.709009][T17696] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.764960][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1672.764987][ T30] audit: type=1800 audit(1760308219.059:1637): pid=25181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5381" name="bus" dev="loop4" ino=1048730 res=0 errno=0 [ 1672.795182][T25179] EXT4-fs error (device loop8): ext4_validate_block_bitmap:431: comm syz.8.5380: bg 0: block 2: invalid block bitmap [ 1672.819454][T25179] EXT4-fs (loop8): Remounting filesystem read-only [ 1672.928592][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.963289][T17696] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.131704][T17696] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.288770][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5384'. [ 1673.688299][T25203] rdma_rxe: rxe_newlink: failed to add lo [ 1673.735536][T25208] loop5: detected capacity change from 0 to 128 [ 1673.744447][T25207] loop8: detected capacity change from 0 to 512 [ 1673.753715][T17696] bridge_slave_1: left allmulticast mode [ 1673.764506][T17696] bridge_slave_1: left promiscuous mode [ 1673.775396][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.775978][T25207] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1673.790058][T25205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1673.825323][T25208] syz.5.5390: attempt to access beyond end of device [ 1673.825323][T25208] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1673.842456][ T30] audit: type=1800 audit(1760308220.119:1638): pid=25208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5390" name="file2" dev="loop5" ino=1048731 res=0 errno=0 [ 1673.884998][T17696] bridge_slave_0: left allmulticast mode [ 1673.918006][T25207] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1673.937494][T17696] bridge_slave_0: left promiscuous mode [ 1673.948156][T25207] EXT4-fs warning (device loop8): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1673.985253][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.138415][T21540] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1674.282649][T25218] loop1: detected capacity change from 0 to 128 [ 1674.479247][ T30] audit: type=1800 audit(1760308220.769:1639): pid=25218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5394" name="bus" dev="loop1" ino=1048733 res=0 errno=0 [ 1674.881702][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.881702][T17575] loop1: rw=1, sector=249, nr_sectors = 136 limit=128 [ 1674.899182][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.899182][T17575] loop1: rw=1, sector=521, nr_sectors = 24 limit=128 [ 1674.925783][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.925783][T17575] loop1: rw=1, sector=569, nr_sectors = 24 limit=128 [ 1674.942220][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.942220][T17575] loop1: rw=1, sector=625, nr_sectors = 24 limit=128 [ 1674.956328][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.956328][T17575] loop1: rw=1, sector=681, nr_sectors = 48 limit=128 [ 1674.978796][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.978796][T17575] loop1: rw=1, sector=793, nr_sectors = 32 limit=128 [ 1674.978991][T16903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1674.993237][T17575] kworker/u8:1: attempt to access beyond end of device [ 1674.993237][T17575] loop1: rw=1, sector=849, nr_sectors = 32 limit=128 [ 1675.021060][T16903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1675.037867][T16903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1675.111952][T16903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1675.128182][T16903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1675.186567][T17575] kworker/u8:1: attempt to access beyond end of device [ 1675.186567][T17575] loop1: rw=1, sector=897, nr_sectors = 32 limit=128 [ 1675.200633][T17575] kworker/u8:1: attempt to access beyond end of device [ 1675.200633][T17575] loop1: rw=1, sector=969, nr_sectors = 24 limit=128 [ 1676.368970][T17696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.382430][T17696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.393789][T17696] bond0 (unregistering): Released all slaves [ 1676.469218][T25223] syz_tun: entered allmulticast mode [ 1676.484959][T25237] tipc: Started in network mode [ 1676.493525][T25237] tipc: Node identity 4233433e91dd, cluster identity 4711 [ 1676.517929][T25237] tipc: Enabled bearer , priority 0 [ 1676.566112][T25246] tipc: Resetting bearer [ 1676.608139][T25235] tipc: Disabling bearer [ 1676.618125][ T30] audit: type=1326 audit(1760308222.919:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1676.680218][T25254] syz.9.5401 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1676.779758][ T30] audit: type=1326 audit(1760308222.919:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1676.826980][T17696] tipc: Disabling bearer [ 1676.866270][T17696] tipc: Left network mode [ 1677.012508][T25236] lo speed is unknown, defaulting to 1000 [ 1677.098051][ T30] audit: type=1326 audit(1760308222.919:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1677.121405][ T30] audit: type=1326 audit(1760308222.919:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1677.152516][T25259] tipc: Enabling of bearer rejected, failed to enable media [ 1677.166920][T25236] lo speed is unknown, defaulting to 1000 [ 1677.184524][T16903] Bluetooth: hci0: command tx timeout [ 1677.410375][ T30] audit: type=1326 audit(1760308222.919:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1677.794273][T25259] syzkaller0: entered promiscuous mode [ 1677.838533][ T30] audit: type=1326 audit(1760308222.919:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1677.893086][T25259] syzkaller0: entered allmulticast mode [ 1677.929943][ T30] audit: type=1326 audit(1760308222.919:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.029750][ T30] audit: type=1326 audit(1760308222.919:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.088952][ T30] audit: type=1326 audit(1760308222.949:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.139785][ T30] audit: type=1326 audit(1760308222.969:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.219804][ T30] audit: type=1326 audit(1760308222.969:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.298250][ T30] audit: type=1326 audit(1760308222.969:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.326677][ T30] audit: type=1326 audit(1760308222.969:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.354540][ T30] audit: type=1326 audit(1760308222.969:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.378030][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.388034][ T30] audit: type=1326 audit(1760308222.969:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.9.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1678.897077][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1679.053048][T25299] bridge0: port 3(syz_tun) entered disabled state [ 1679.134766][T25299] syz_tun (unregistering): left allmulticast mode [ 1679.148002][T25299] syz_tun (unregistering): left promiscuous mode [ 1679.161671][T25299] bridge0: port 3(syz_tun) entered disabled state [ 1679.272067][T25307] 9p: Unknown access argument ÿÿÿÿ: -22 [ 1679.333751][T16903] Bluetooth: hci0: command tx timeout [ 1679.533233][T17696] hsr_slave_0: left promiscuous mode [ 1679.635974][T17696] hsr_slave_1: left promiscuous mode [ 1680.147542][T25330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5429'. [ 1680.700482][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5435'. [ 1680.854936][T25350] netlink: 'syz.4.5437': attribute type 1 has an invalid length. [ 1681.169907][T17696] team0 (unregistering): Port device team_slave_1 removed [ 1681.187220][T25356] loop5: detected capacity change from 0 to 1024 [ 1681.220466][T25356] EXT4-fs: Ignoring removed orlov option [ 1681.256857][T25356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.363893][T17696] team0 (unregistering): Port device team_slave_0 removed [ 1681.415511][T16903] Bluetooth: hci0: command tx timeout [ 1681.574717][T21069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.032420][T25367] rdma_rxe: rxe_newlink: failed to add lo [ 1682.156495][T25370] loop4: detected capacity change from 0 to 764 [ 1682.320068][T25372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5446'. [ 1682.410782][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1682.470281][T25375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1682.540225][T25372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.547675][T25372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.560967][T25372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.568381][T25372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.846637][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1682.846664][ T30] audit: type=1326 audit(1760308229.139:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1682.933688][ T30] audit: type=1326 audit(1760308229.189:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.005258][ T30] audit: type=1326 audit(1760308229.189:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.038723][ T30] audit: type=1326 audit(1760308229.189:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.062341][ T30] audit: type=1326 audit(1760308229.189:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.086058][ T30] audit: type=1326 audit(1760308229.199:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.115650][ T30] audit: type=1326 audit(1760308229.199:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.159796][ T30] audit: type=1326 audit(1760308229.199:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.186223][ T30] audit: type=1326 audit(1760308229.199:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.219325][ T30] audit: type=1326 audit(1760308229.199:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25380 comm="syz.8.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1683.263939][T25236] chnl_net:caif_netlink_parms(): no params data found [ 1683.323515][T25391] loop9: detected capacity change from 0 to 512 [ 1683.457295][T25391] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1683.493507][T16903] Bluetooth: hci0: command tx timeout [ 1683.533172][T25391] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1683.564746][T25391] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended [ 1683.630034][T25391] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.5453: inode #15: comm syz.9.5453: iget: illegal inode # [ 1683.675687][T25402] geneve2: entered promiscuous mode [ 1683.679962][T25391] EXT4-fs (loop9): Remounting filesystem read-only [ 1683.711366][T25391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.772935][T25403] netlink: 'syz.5.5456': attribute type 3 has an invalid length. [ 1683.800201][ T36] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 40307 - 0 [ 1683.813010][T25236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.860167][T25236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.867544][T25236] bridge_slave_0: entered allmulticast mode [ 1683.901852][T25236] bridge_slave_0: entered promiscuous mode [ 1683.924236][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.932075][T25236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.954003][T25236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.967006][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5459'. [ 1684.011245][T25236] bridge_slave_1: entered allmulticast mode [ 1684.019490][T25236] bridge_slave_1: entered promiscuous mode [ 1684.057531][ T36] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 40307 - 0 [ 1684.102362][T25410] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1684.130530][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5463'. [ 1684.190390][T25421] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5463'. [ 1684.218798][ T36] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 40307 - 0 [ 1684.239063][ T36] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 40307 - 0 [ 1684.291817][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5461'. [ 1684.325378][T25236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.418787][T25236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.546108][T25236] team0: Port device team_slave_0 added [ 1684.569137][T25236] team0: Port device team_slave_1 added [ 1684.618946][T25433] loop8: detected capacity change from 0 to 512 [ 1684.707090][T25433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1684.810405][T25433] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.883658][T25236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.956446][T25236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.436716][T25236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.737389][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.770663][T25236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.794818][T25236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.821170][T25236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.025389][T25236] hsr_slave_0: entered promiscuous mode [ 1686.044617][T25236] hsr_slave_1: entered promiscuous mode [ 1686.124962][T25236] debugfs: 'hsr0' already exists in 'hsr' [ 1686.298762][T25236] Cannot create hsr debugfs directory [ 1688.501372][T25496] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5485'. [ 1688.568614][T25496] xt_recent: Unsupported userspace flags (000000b1) [ 1688.608183][T20005] IPVS: starting estimator thread 0... [ 1688.700337][T25505] IPVS: using max 28 ests per chain, 67200 per kthread [ 1688.832085][T25501] loop8: detected capacity change from 0 to 2048 [ 1688.852661][T25504] loop5: detected capacity change from 0 to 1024 [ 1688.873072][T25504] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1688.954991][T25501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.006794][T25501] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.139224][T25515] rdma_rxe: rxe_newlink: failed to add lo [ 1689.145855][T25504] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.5487: Invalid block bitmap block 0 in block_group 0 [ 1689.262830][T25504] __quota_error: 33 callbacks suppressed [ 1689.262861][T25504] Quota error (device loop5): write_blk: dquota write failed [ 1689.310236][T25504] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1689.349595][T25504] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.5487: Failed to acquire dquot type 0 [ 1689.382248][T25504] EXT4-fs error (device loop5): ext4_free_blocks:6705: comm syz.5.5487: Freeing blocks not in datazone - block = 0, count = 4096 [ 1689.429291][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.518930][T25504] EXT4-fs error (device loop5): ext4_read_inode_bitmap:138: comm syz.5.5487: Invalid inode bitmap blk 0 in block_group 0 [ 1689.546524][T19151] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 1689.581312][T19151] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:36: Failed to release dquot type 0 [ 1689.611058][T25504] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 1689.649763][T25504] EXT4-fs (loop5): 1 orphan inode deleted [ 1689.686083][T25504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1690.005856][T25504] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.657593][T25236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1691.748023][T25236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1691.885072][T25236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1691.916087][T25553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1691.997460][T25236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1692.023191][ T30] audit: type=1326 audit(1760308238.319:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.106961][ T30] audit: type=1326 audit(1760308238.319:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.223776][ T30] audit: type=1326 audit(1760308238.319:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.325345][ T30] audit: type=1326 audit(1760308238.349:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.392117][T25578] 9pnet_fd: Insufficient options for proto=fd [ 1692.409571][ T30] audit: type=1326 audit(1760308238.349:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.459766][ T30] audit: type=1326 audit(1760308238.349:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.8.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.575800][T25584] loop1: detected capacity change from 0 to 512 [ 1692.635012][T25584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1692.684286][T25236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.724624][T25584] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.5503: invalid indirect mapped block 4294967295 (level 0) [ 1692.760752][T25236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.783710][T19151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.790935][T19151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.792688][T25584] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #16: comm syz.1.5503: invalid indirect mapped block 4294967295 (level 1) [ 1692.818945][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.826147][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.888520][ T30] audit: type=1326 audit(1760308239.179:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25591 comm="syz.8.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1692.919732][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5505'. [ 1692.930115][T25584] EXT4-fs (loop1): 1 orphan inode deleted [ 1692.947266][T25592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.953803][T25584] EXT4-fs (loop1): 1 truncate cleaned up [ 1692.955873][T25592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.983470][T25592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.986713][T25584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.992772][T25592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.333055][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.347649][T25602] loop8: detected capacity change from 0 to 512 [ 1693.404734][T25602] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1693.572926][T25602] EXT4-fs warning (device loop8): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1693.680509][T25616] rdma_rxe: rxe_newlink: failed to add lo [ 1693.921054][T21540] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1694.088804][T25628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5514'. [ 1694.126364][T25626] loop1: detected capacity change from 0 to 2048 [ 1694.228767][T25626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1694.256473][T25236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.293159][T25630] loop9: detected capacity change from 0 to 2048 [ 1694.495352][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1694.495378][ T30] audit: type=1800 audit(1760308240.789:1786): pid=25626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5513" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1694.856585][T25630] Alternate GPT is invalid, using primary GPT. [ 1694.922669][T25630] loop9: p1 p2 p3 [ 1694.926463][T25630] loop9: partition table partially beyond EOD, truncated [ 1694.977082][T25236] veth0_vlan: entered promiscuous mode [ 1695.028989][T25640] No such timeout policy "syz1" [ 1695.030712][T25236] veth1_vlan: entered promiscuous mode [ 1695.257110][T25236] veth0_macvtap: entered promiscuous mode [ 1695.294127][T25236] veth1_macvtap: entered promiscuous mode [ 1695.405127][T25236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.477579][T25645] team_slave_0: entered promiscuous mode [ 1695.483837][T25645] team_slave_1: entered promiscuous mode [ 1695.505557][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.590779][T25236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.683660][T17575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.711790][T17575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.815805][T17575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.850147][T17575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.144463][T19151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.162561][T25666] rdma_rxe: rxe_newlink: failed to add lo [ 1696.170883][T19151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.244900][T17575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.258058][T17575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.478442][T25671] loop2: detected capacity change from 0 to 512 [ 1696.524342][T25671] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1696.553858][T25671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1696.580924][T25671] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 1696.693677][T25671] loop2: detected capacity change from 0 to 512 [ 1696.713461][T25671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1696.727225][T25671] EXT4-fs: Ignoring removed bh option [ 1696.768827][T25671] EXT4-fs error (device loop2): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1696.791852][T25671] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #11: comm syz.2.5382: corrupted inode contents [ 1696.880380][T25671] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #11: comm syz.2.5382: mark_inode_dirty error [ 1696.969588][T25671] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.5382: invalid indirect mapped block 1 (level 1) [ 1697.051604][T25671] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #11: comm syz.2.5382: corrupted inode contents [ 1697.113928][T25671] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 1697.159722][T25671] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #11: comm syz.2.5382: corrupted inode contents [ 1697.960872][T25671] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.5382: mark_inode_dirty error [ 1698.010240][T25671] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 1698.030338][T25671] EXT4-fs (loop2): 1 truncate cleaned up [ 1698.109756][T25671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.243710][T25691] loop5: detected capacity change from 0 to 512 [ 1698.373350][T25691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1698.454778][T25691] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.613383][T25704] loop1: detected capacity change from 0 to 512 [ 1698.773685][T25704] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1698.810280][T25704] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1698.914726][T25704] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5537: corrupted inode contents [ 1698.962440][T25704] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.5537: mark_inode_dirty error [ 1698.978087][T21069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.039380][T25704] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5537: corrupted inode contents [ 1699.143574][T25704] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5537: mark_inode_dirty error [ 1699.166842][T25704] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5537: corrupted inode contents [ 1699.262773][T25704] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1699.307825][T25704] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.5537: corrupted inode contents [ 1699.315242][T25710] 9pnet_fd: Insufficient options for proto=fd [ 1699.367656][T25704] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.5537: mark_inode_dirty error [ 1699.396033][T25704] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1699.438712][T25704] EXT4-fs (loop1): 1 truncate cleaned up [ 1699.465800][ T37] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1699.500023][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:3: Failed to release dquot type 1 [ 1699.778521][T25704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1700.964982][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.301013][T25727] loop8: detected capacity change from 0 to 128 [ 1701.309299][T25727] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1701.394077][T25727] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1701.611286][T17696] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1701.688330][T25734] loop1: detected capacity change from 0 to 128 [ 1701.723139][T25734] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1701.740985][T25734] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1701.975966][T20638] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1702.011710][ T30] audit: type=1326 audit(1760308248.299:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.192714][ T30] audit: type=1326 audit(1760308248.299:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.235344][T20005] IPVS: starting estimator thread 0... [ 1702.279755][ T30] audit: type=1326 audit(1760308248.299:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.339819][T25745] IPVS: using max 24 ests per chain, 57600 per kthread [ 1702.349263][T25744] loop1: detected capacity change from 0 to 2048 [ 1702.359748][ T30] audit: type=1326 audit(1760308248.299:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.415384][T25744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1702.455762][T25744] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1702.475966][ T30] audit: type=1326 audit(1760308248.299:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.484922][T25744] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1702.506141][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1702.563982][ T30] audit: type=1326 audit(1760308248.299:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.590314][ T30] audit: type=1326 audit(1760308248.299:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25739 comm="syz.8.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492eb8eec9 code=0x7ffc0000 [ 1702.737292][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.874375][T25236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.222908][T25755] loop8: detected capacity change from 0 to 128 [ 1703.276629][ T30] audit: type=1326 audit(1760308249.569:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.9.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1703.318212][T25766] Falling back ldisc for ptm0. [ 1703.379780][ T30] audit: type=1326 audit(1760308249.569:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.9.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1703.410999][T25767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1703.414585][ T30] audit: type=1326 audit(1760308249.579:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25758 comm="syz.9.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1703.719854][T25776] loop5: detected capacity change from 0 to 512 [ 1703.754197][T25776] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1703.832897][T25776] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1704.094378][T21069] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1705.368517][T25793] loop2: detected capacity change from 0 to 512 [ 1705.406167][T25793] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1705.473148][T20005] IPVS: starting estimator thread 0... [ 1705.497600][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1705.578623][T25797] loop9: detected capacity change from 0 to 2048 [ 1705.621361][T25798] IPVS: using max 22 ests per chain, 52800 per kthread [ 1705.732804][T25797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1705.769885][T25797] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.796856][T25797] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1705.804256][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1705.974324][T22034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.405168][T25810] loop9: detected capacity change from 0 to 128 [ 1706.445519][T25810] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1706.512941][T25810] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1706.784916][T22034] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1707.923125][T25834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5581'. [ 1708.352905][T25836] loop5: detected capacity change from 0 to 128 [ 1708.398887][T25836] FAT-fs (loop5): Directory bread(block 162) failed [ 1708.405797][T25836] FAT-fs (loop5): Directory bread(block 163) failed [ 1708.429961][T25836] FAT-fs (loop5): Directory bread(block 164) failed [ 1708.436633][T25836] FAT-fs (loop5): Directory bread(block 165) failed [ 1708.476048][T25836] FAT-fs (loop5): Directory bread(block 166) failed [ 1708.493727][T25836] FAT-fs (loop5): Directory bread(block 167) failed [ 1708.513851][T25836] FAT-fs (loop5): Directory bread(block 168) failed [ 1708.560485][T25836] FAT-fs (loop5): Directory bread(block 169) failed [ 1709.446316][T25836] FAT-fs (loop5): Directory bread(block 162) failed [ 1709.483982][T25836] FAT-fs (loop5): Directory bread(block 163) failed [ 1709.520354][T25836] bio_check_eod: 11 callbacks suppressed [ 1709.520380][T25836] syz.5.5582: attempt to access beyond end of device [ 1709.520380][T25836] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1709.600115][T25836] syz.5.5582: attempt to access beyond end of device [ 1709.600115][T25836] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1709.662175][T25855] rdma_rxe: rxe_newlink: failed to add lo [ 1709.898739][T25865] loop8: detected capacity change from 0 to 512 [ 1709.915551][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1709.915578][ T30] audit: type=1326 audit(1760308256.199:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.008385][T25868] loop9: detected capacity change from 0 to 512 [ 1710.019404][ T30] audit: type=1326 audit(1760308256.199:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.067519][T25868] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1710.077983][ T30] audit: type=1326 audit(1760308256.249:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.164413][T25865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.188963][ T30] audit: type=1326 audit(1760308256.249:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.213649][T25865] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.232116][T22034] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1710.280706][ T30] audit: type=1326 audit(1760308256.249:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.349092][ T30] audit: type=1326 audit(1760308256.249:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1710.432856][ T30] audit: type=1326 audit(1760308256.249:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1711.221225][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.239732][ T30] audit: type=1326 audit(1760308256.249:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1711.287074][ T30] audit: type=1326 audit(1760308256.249:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1711.400938][ T30] audit: type=1326 audit(1760308256.249:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25861 comm="syz.5.5591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eed38eec9 code=0x7ffc0000 [ 1711.563113][T25891] loop8: detected capacity change from 0 to 1024 [ 1711.599402][T25891] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1711.666156][T25891] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:482: comm syz.8.5600: Invalid block bitmap block 0 in block_group 0 [ 1711.736250][T25891] EXT4-fs error (device loop8): ext4_acquire_dquot:6943: comm syz.8.5600: Failed to acquire dquot type 0 [ 1711.807473][T25891] EXT4-fs error (device loop8): ext4_free_blocks:6705: comm syz.8.5600: Freeing blocks not in datazone - block = 0, count = 4096 [ 1711.870016][T25891] EXT4-fs error (device loop8): ext4_read_inode_bitmap:138: comm syz.8.5600: Invalid inode bitmap blk 0 in block_group 0 [ 1711.900204][ T36] EXT4-fs error (device loop8): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 1711.923522][T25891] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1711.944943][T25891] EXT4-fs (loop8): 1 orphan inode deleted [ 1711.973148][T25891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.052210][T25891] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.261304][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1712.284276][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1712.307850][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1712.318525][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1712.327949][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1712.348986][T25906] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1712.381783][T25911] loop2: detected capacity change from 0 to 512 [ 1712.396779][T25911] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1712.515704][T25908] lo speed is unknown, defaulting to 1000 [ 1712.551707][T25908] lo speed is unknown, defaulting to 1000 [ 1712.566234][T25916] loop8: detected capacity change from 0 to 128 [ 1712.592226][T25236] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1712.922585][T25928] loop1: detected capacity change from 0 to 512 [ 1713.014202][T25928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.045782][T25928] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.185545][T25935] loop8: detected capacity change from 0 to 2048 [ 1713.308552][T25935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1713.368387][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.582109][T21540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.374346][T16903] Bluetooth: hci5: command tx timeout [ 1714.686625][T25956] 9pnet: Could not find request transport: f [ 1714.726913][T25908] chnl_net:caif_netlink_parms(): no params data found [ 1715.538521][T25975] syzkaller0: entered promiscuous mode [ 1715.569960][T25975] syzkaller0: entered allmulticast mode [ 1715.796579][T25985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1716.449943][T16903] Bluetooth: hci5: command tx timeout [ 1716.566226][T26001] loop1: detected capacity change from 0 to 512 [ 1716.578401][T26001] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1716.697385][T26001] __quota_error: 7 callbacks suppressed [ 1716.697431][T26001] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1716.775599][T26001] EXT4-fs warning (device loop1): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1716.856800][T26004] loop5: detected capacity change from 0 to 4096 [ 1716.947743][T26004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.033362][T20638] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1717.265341][T21069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.306729][T26013] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5643'. [ 1717.561448][T26015] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5645'. [ 1718.360621][T26037] loop1: detected capacity change from 0 to 512 [ 1718.389564][T26037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1718.457271][T26037] EXT4-fs (loop1): 1 truncate cleaned up [ 1718.465229][T26037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.522299][T26040] loop2: detected capacity change from 0 to 2048 [ 1718.531477][T16903] Bluetooth: hci5: command tx timeout [ 1718.594146][T26040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.662075][T26040] EXT4-fs error (device loop2): ext4_ext_precache:647: inode #2: comm syz.2.5651: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1718.710681][T20638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.725567][T26051] loop9: detected capacity change from 0 to 512 [ 1719.795181][T26051] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1719.857174][T26051] Quota error (device loop9): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1719.868391][T26051] EXT4-fs warning (device loop9): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1720.013424][T22034] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1720.662913][T16903] Bluetooth: hci5: command tx timeout [ 1721.920020][T25908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.927291][T25908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.935725][T25908] bridge_slave_0: entered allmulticast mode [ 1721.944742][T25908] bridge_slave_0: entered promiscuous mode [ 1721.978658][T25663] syz_tun (unregistering): left allmulticast mode [ 1722.016518][T26047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.064925][T25908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.074735][T25908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.082299][T25908] bridge_slave_1: entered allmulticast mode [ 1722.094892][T25908] bridge_slave_1: entered promiscuous mode [ 1722.310010][T26009] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1722.381816][T25908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.440200][T26047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.553783][T25236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.580940][ T30] audit: type=1326 audit(1760308268.879:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26072 comm="syz.9.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1722.627820][ T30] audit: type=1326 audit(1760308268.899:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26072 comm="syz.9.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1722.708435][ T30] audit: type=1326 audit(1760308268.899:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26072 comm="syz.9.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1722.768732][ T30] audit: type=1326 audit(1760308268.909:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26072 comm="syz.9.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1722.794909][T26075] loop5: detected capacity change from 0 to 512 [ 1722.823380][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.828603][ T30] audit: type=1326 audit(1760308268.909:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26072 comm="syz.9.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1722.919338][T25908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.929287][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5663'. [ 1722.976055][T26075] [ 1722.978433][T26075] ====================================================== [ 1722.985455][T26075] WARNING: possible circular locking dependency detected [ 1722.992484][T26075] syzkaller #0 Not tainted [ 1722.996905][T26075] ------------------------------------------------------ [ 1723.003939][T26075] syz.5.5661/26075 is trying to acquire lock: [ 1723.010015][T26075] ffff88805f320b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 1723.019924][T26075] [ 1723.019924][T26075] but task is already holding lock: [ 1723.027315][T26075] ffff8880573fe9f8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 1723.037323][T26075] [ 1723.037323][T26075] which lock already depends on the new lock. [ 1723.037323][T26075] [ 1723.047737][T26075] [ 1723.047737][T26075] the existing dependency chain (in reverse order) is: [ 1723.056761][T26075] [ 1723.056761][T26075] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 1723.064364][T26075] down_write+0x92/0x200 [ 1723.069143][T26075] ext4_inline_data_truncate+0x1b3/0xc80 [ 1723.075312][T26075] ext4_truncate+0x9b4/0x1210 [ 1723.080548][T26075] ext4_evict_inode+0x7a8/0x18e0 [ 1723.086011][T26075] evict+0x3e6/0x920 [ 1723.090445][T26075] iput.part.0+0x6a9/0xb00 [ 1723.095400][T26075] iput+0x35/0x40 [ 1723.099659][T26075] dentry_unlink_inode+0x29c/0x480 [ 1723.105306][T26075] __dentry_kill+0x1d0/0x600 [ 1723.110437][T26075] dput.part.0+0x4b1/0x9b0 [ 1723.115396][T26075] dput+0x1f/0x30 [ 1723.119565][T26075] do_renameat2+0x7e8/0xc20 [ 1723.124609][T26075] __x64_sys_rename+0x7d/0xa0 [ 1723.129822][T26075] do_syscall_64+0xcd/0xfa0 [ 1723.134872][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.141290][T26075] [ 1723.141290][T26075] -> #1 (sb_internal){.+.+}-{0:0}: [ 1723.148610][T26075] ext4_evict_inode+0xe3e/0x18e0 [ 1723.154074][T26075] evict+0x3e6/0x920 [ 1723.158510][T26075] iput.part.0+0x6a9/0xb00 [ 1723.163473][T26075] iput+0x35/0x40 [ 1723.167751][T26075] ext4_ext_migrate+0xc6f/0x1ee0 [ 1723.173260][T26075] __ext4_ioctl+0x3178/0x4410 [ 1723.178521][T26075] __x64_sys_ioctl+0x18e/0x210 [ 1723.183847][T26075] do_syscall_64+0xcd/0xfa0 [ 1723.188909][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.195338][T26075] [ 1723.195338][T26075] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1723.203794][T26075] __lock_acquire+0x126f/0x1c90 [ 1723.209182][T26075] lock_acquire+0x179/0x350 [ 1723.214220][T26075] ext4_writepages+0x224/0x7d0 [ 1723.219529][T26075] do_writepages+0x27a/0x600 [ 1723.224658][T26075] __writeback_single_inode+0x160/0xfb0 [ 1723.230769][T26075] writeback_single_inode+0x2bc/0x550 [ 1723.236704][T26075] write_inode_now+0x170/0x1e0 [ 1723.241990][T26075] iput.part.0+0x487/0xb00 [ 1723.246943][T26075] iput+0x35/0x40 [ 1723.251117][T26075] ext4_xattr_block_set+0x67c/0x3650 [ 1723.256939][T26075] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 1723.263375][T26075] __ext4_expand_extra_isize+0x346/0x480 [ 1723.269542][T26075] __ext4_mark_inode_dirty+0x544/0x870 [ 1723.275548][T26075] ext4_evict_inode+0x74e/0x18e0 [ 1723.281014][T26075] evict+0x3e6/0x920 [ 1723.285449][T26075] iput.part.0+0x6a9/0xb00 [ 1723.290410][T26075] iput+0x35/0x40 [ 1723.294581][T26075] ext4_orphan_cleanup+0x731/0x11e0 [ 1723.300323][T26075] ext4_fill_super+0x8db7/0xaf70 [ 1723.305790][T26075] get_tree_bdev_flags+0x38c/0x620 [ 1723.311437][T26075] vfs_get_tree+0x8e/0x340 [ 1723.316394][T26075] path_mount+0x7b9/0x23a0 [ 1723.321342][T26075] __x64_sys_mount+0x293/0x310 [ 1723.326674][T26075] do_syscall_64+0xcd/0xfa0 [ 1723.331724][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.338144][T26075] [ 1723.338144][T26075] other info that might help us debug this: [ 1723.338144][T26075] [ 1723.348456][T26075] Chain exists of: [ 1723.348456][T26075] &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem [ 1723.348456][T26075] [ 1723.361875][T26075] Possible unsafe locking scenario: [ 1723.361875][T26075] [ 1723.369323][T26075] CPU0 CPU1 [ 1723.374682][T26075] ---- ---- [ 1723.380038][T26075] lock(&ei->xattr_sem); [ 1723.384379][T26075] lock(sb_internal); [ 1723.390969][T26075] lock(&ei->xattr_sem); [ 1723.397823][T26075] rlock(&sbi->s_writepages_rwsem); [ 1723.403109][T26075] [ 1723.403109][T26075] *** DEADLOCK *** [ 1723.403109][T26075] [ 1723.411269][T26075] 3 locks held by syz.5.5661/26075: [ 1723.416460][T26075] #0: ffff88803371c0e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 1723.426628][T26075] #1: ffff88803371c610 (sb_internal){.+.+}-{0:0}, at: evict+0x3e6/0x920 [ 1723.435129][T26075] #2: ffff8880573fe9f8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 1723.445460][T26075] [ 1723.445460][T26075] stack backtrace: [ 1723.451348][T26075] CPU: 1 UID: 0 PID: 26075 Comm: syz.5.5661 Not tainted syzkaller #0 PREEMPT(full) [ 1723.451396][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1723.451417][T26075] Call Trace: [ 1723.451430][T26075] [ 1723.451444][T26075] dump_stack_lvl+0x116/0x1f0 [ 1723.451500][T26075] print_circular_bug+0x275/0x350 [ 1723.451542][T26075] check_noncircular+0x14c/0x170 [ 1723.451587][T26075] __lock_acquire+0x126f/0x1c90 [ 1723.451631][T26075] ? __lock_acquire+0x622/0x1c90 [ 1723.451674][T26075] lock_acquire+0x179/0x350 [ 1723.451713][T26075] ? do_writepages+0x27a/0x600 [ 1723.451759][T26075] ? __pfx___might_resched+0x10/0x10 [ 1723.451816][T26075] ext4_writepages+0x224/0x7d0 [ 1723.451869][T26075] ? do_writepages+0x27a/0x600 [ 1723.451912][T26075] ? __pfx_ext4_writepages+0x10/0x10 [ 1723.451963][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452003][T26075] ? __lock_acquire+0xb8a/0x1c90 [ 1723.452050][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452091][T26075] ? __pfx_ext4_writepages+0x10/0x10 [ 1723.452145][T26075] do_writepages+0x27a/0x600 [ 1723.452191][T26075] ? __pfx_do_writepages+0x10/0x10 [ 1723.452240][T26075] __writeback_single_inode+0x160/0xfb0 [ 1723.452295][T26075] ? __pfx___writeback_single_inode+0x10/0x10 [ 1723.452347][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452390][T26075] ? do_raw_spin_unlock+0x172/0x230 [ 1723.452438][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452481][T26075] writeback_single_inode+0x2bc/0x550 [ 1723.452537][T26075] write_inode_now+0x170/0x1e0 [ 1723.452567][T26075] ? __pfx_write_inode_now+0x10/0x10 [ 1723.452621][T26075] ? find_held_lock+0x2b/0x80 [ 1723.452674][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452715][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452758][T26075] iput.part.0+0x487/0xb00 [ 1723.452808][T26075] iput+0x35/0x40 [ 1723.452851][T26075] ext4_xattr_block_set+0x67c/0x3650 [ 1723.452904][T26075] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 1723.452950][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.452989][T26075] ? xattr_find_entry+0x289/0x330 [ 1723.453031][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.453071][T26075] ? ext4_xattr_block_find+0x59/0x430 [ 1723.453113][T26075] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 1723.453174][T26075] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1723.453228][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.453267][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.453306][T26075] ? dquot_initialize_needed+0x183/0x2a0 [ 1723.453355][T26075] __ext4_expand_extra_isize+0x346/0x480 [ 1723.453405][T26075] __ext4_mark_inode_dirty+0x544/0x870 [ 1723.453461][T26075] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1723.453516][T26075] ? __pfx___might_resched+0x10/0x10 [ 1723.453573][T26075] ? ext4_journal_check_start+0x22b/0x340 [ 1723.453623][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.453662][T26075] ? __ext4_journal_start_sb+0x19e/0x690 [ 1723.453711][T26075] ? ext4_evict_inode+0x5cf/0x18e0 [ 1723.453743][T26075] ext4_evict_inode+0x74e/0x18e0 [ 1723.453776][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1723.453807][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.453850][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1723.453881][T26075] evict+0x3e6/0x920 [ 1723.453926][T26075] ? __pfx_evict+0x10/0x10 [ 1723.453968][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454013][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454058][T26075] iput.part.0+0x6a9/0xb00 [ 1723.454102][T26075] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1723.454150][T26075] iput+0x35/0x40 [ 1723.454193][T26075] ext4_orphan_cleanup+0x731/0x11e0 [ 1723.454252][T26075] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1723.454310][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454349][T26075] ? ext4_register_li_request+0xec/0x9b0 [ 1723.454391][T26075] ext4_fill_super+0x8db7/0xaf70 [ 1723.454441][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1723.454475][T26075] ? do_raw_spin_lock+0x12c/0x2b0 [ 1723.454522][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454561][T26075] ? find_held_lock+0x2b/0x80 [ 1723.454617][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454656][T26075] ? sb_set_blocksize+0x176/0x1d0 [ 1723.454696][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454735][T26075] ? setup_bdev_super+0x369/0x730 [ 1723.454768][T26075] get_tree_bdev_flags+0x38c/0x620 [ 1723.454803][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1723.454839][T26075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1723.454877][T26075] ? apparmor_capable+0x114/0x1d0 [ 1723.454912][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454952][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.454991][T26075] ? security_capable+0x7e/0x260 [ 1723.455046][T26075] vfs_get_tree+0x8e/0x340 [ 1723.455097][T26075] path_mount+0x7b9/0x23a0 [ 1723.455143][T26075] ? __pfx_path_mount+0x10/0x10 [ 1723.455187][T26075] ? putname+0x154/0x1a0 [ 1723.455235][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.455274][T26075] ? putname+0x154/0x1a0 [ 1723.455319][T26075] ? __x64_sys_mount+0x293/0x310 [ 1723.455360][T26075] __x64_sys_mount+0x293/0x310 [ 1723.455408][T26075] ? __pfx___x64_sys_mount+0x10/0x10 [ 1723.455450][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1723.455496][T26075] do_syscall_64+0xcd/0xfa0 [ 1723.455548][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.455582][T26075] RIP: 0033:0x7f6eed39066a [ 1723.455608][T26075] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.455641][T26075] RSP: 002b:00007f6eee300e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1723.455672][T26075] RAX: ffffffffffffffda RBX: 00007f6eee300ef0 RCX: 00007f6eed39066a [ 1723.455695][T26075] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6eee300eb0 [ 1723.455717][T26075] RBP: 0000200000000180 R08: 00007f6eee300ef0 R09: 0000000000800718 [ 1723.455738][T26075] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1723.455760][T26075] R13: 00007f6eee300eb0 R14: 0000000000000473 R15: 0000200000000680 [ 1723.455794][T26075] [ 1724.033569][ T30] audit: type=1326 audit(1760308269.159:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.9.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1724.057056][ T30] audit: type=1326 audit(1760308269.159:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.9.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1724.079585][ T30] audit: type=1326 audit(1760308269.159:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.9.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1724.102865][ T30] audit: type=1326 audit(1760308269.169:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.9.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1724.126101][ T30] audit: type=1326 audit(1760308269.169:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26077 comm="syz.9.5663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aaf8eec9 code=0x7ffc0000 [ 1724.171509][T26075] ------------[ cut here ]------------ [ 1724.177187][T26075] EA inode 11 i_nlink=2 [ 1724.177675][T26075] WARNING: CPU: 0 PID: 26075 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.193134][T26075] Modules linked in: [ 1724.197059][T26075] CPU: 0 UID: 0 PID: 26075 Comm: syz.5.5661 Not tainted syzkaller #0 PREEMPT(full) [ 1724.207423][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1724.217739][T26075] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.224407][T26075] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 5d a8 8b e8 35 00 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 36 cb 2e ff 44 0f b6 2d e2 8a dd 0d [ 1724.244207][T26075] RSP: 0018:ffffc9000461f178 EFLAGS: 00010282 [ 1724.250359][T26075] RAX: 0000000000000000 RBX: ffff88805526e238 RCX: ffffc9000c329000 [ 1724.258359][T26075] RDX: 0000000000080000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1724.266616][T26075] RBP: ffffc9000461f240 R08: 0000000000000001 R09: 0000000000000000 [ 1724.274912][T26075] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 1724.282958][T26075] R13: 0000000000000000 R14: 1ffff920008c3e32 R15: ffff88805526e428 [ 1724.292017][T26075] FS: 00007f6eee3016c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 1724.301978][T26075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1724.308594][T26075] CR2: 00007f492f9156c0 CR3: 000000005a355000 CR4: 0000000000350ef0 [ 1724.316680][T26075] Call Trace: [ 1724.320018][T26075] [ 1724.322970][T26075] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1724.329345][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.335098][T26075] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1724.340649][T26075] ext4_xattr_set_entry+0x158f/0x1f00 [ 1724.346081][T26075] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1724.351886][T26075] ? xattr_find_entry+0x289/0x330 [ 1724.356958][T26075] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 1724.362698][T26075] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 1724.368663][T26075] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1724.375008][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.380721][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.386406][T26075] ? dquot_initialize_needed+0x183/0x2a0 [ 1724.393125][T26075] __ext4_expand_extra_isize+0x346/0x480 [ 1724.398820][T26075] __ext4_mark_inode_dirty+0x544/0x870 [ 1724.405266][T26075] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1724.411373][T26075] ? __pfx___might_resched+0x10/0x10 [ 1724.416728][T26075] ? ext4_journal_check_start+0x22b/0x340 [ 1724.422551][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.428236][T26075] ? __ext4_journal_start_sb+0x19e/0x690 [ 1724.433983][T26075] ? ext4_evict_inode+0x5cf/0x18e0 [ 1724.439139][T26075] ext4_evict_inode+0x74e/0x18e0 [ 1724.444184][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1724.449851][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.455545][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1724.461167][T26075] evict+0x3e6/0x920 [ 1724.465154][T26075] ? __pfx_evict+0x10/0x10 [ 1724.469676][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.475367][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.481105][T26075] iput.part.0+0x6a9/0xb00 [ 1724.485576][T26075] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1724.492048][T26075] iput+0x35/0x40 [ 1724.495742][T26075] ext4_orphan_cleanup+0x731/0x11e0 [ 1724.501949][T26075] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1724.507849][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.513662][T26075] ? ext4_register_li_request+0xec/0x9b0 [ 1724.519364][T26075] ext4_fill_super+0x8db7/0xaf70 [ 1724.524439][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1724.529969][T26075] ? do_raw_spin_lock+0x12c/0x2b0 [ 1724.535139][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.540881][T26075] ? find_held_lock+0x2b/0x80 [ 1724.545639][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.551377][T26075] ? sb_set_blocksize+0x176/0x1d0 [ 1724.556456][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.562188][T26075] ? setup_bdev_super+0x369/0x730 [ 1724.567253][T26075] get_tree_bdev_flags+0x38c/0x620 [ 1724.572478][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1724.577806][T26075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1724.583522][T26075] ? apparmor_capable+0x114/0x1d0 [ 1724.588601][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.595426][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.602020][T26075] ? security_capable+0x7e/0x260 [ 1724.607031][T26075] vfs_get_tree+0x8e/0x340 [ 1724.611556][T26075] path_mount+0x7b9/0x23a0 [ 1724.616034][T26075] ? __pfx_path_mount+0x10/0x10 [ 1724.620998][T26075] ? putname+0x154/0x1a0 [ 1724.625292][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.631030][T26075] ? putname+0x154/0x1a0 [ 1724.635339][T26075] ? __x64_sys_mount+0x293/0x310 [ 1724.640354][T26075] __x64_sys_mount+0x293/0x310 [ 1724.645175][T26075] ? __pfx___x64_sys_mount+0x10/0x10 [ 1724.650550][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.656248][T26075] do_syscall_64+0xcd/0xfa0 [ 1724.660894][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.666824][T26075] RIP: 0033:0x7f6eed39066a SYZFAIL: failed to send rpc fd=3 want=528 sent=0 n=-1 (errno 32: Broken pipe) [ 1724.671325][T26075] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1724.691194][T26075] RSP: 002b:00007f6eee300e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1724.700939][T26075] RAX: ffffffffffffffda RBX: 00007f6eee300ef0 RCX: 00007f6eed39066a [ 1724.710391][T26075] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6eee300eb0 [ 1724.718661][T26075] RBP: 0000200000000180 R08: 00007f6eee300ef0 R09: 0000000000800718 [ 1724.726798][T26075] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1724.734878][T26075] R13: 00007f6eee300eb0 R14: 0000000000000473 R15: 0000200000000680 [ 1724.743204][T26075] [ 1724.746246][T26075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1724.753540][T26075] CPU: 0 UID: 0 PID: 26075 Comm: syz.5.5661 Not tainted syzkaller #0 PREEMPT(full) [ 1724.762950][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1724.773027][T26075] Call Trace: [ 1724.776315][T26075] [ 1724.779253][T26075] dump_stack_lvl+0x3d/0x1f0 [ 1724.783885][T26075] vpanic+0x640/0x6f0 [ 1724.787892][T26075] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.793890][T26075] panic+0xca/0xd0 [ 1724.797633][T26075] ? __pfx_panic+0x10/0x10 [ 1724.802092][T26075] check_panic_on_warn+0xab/0xb0 [ 1724.807061][T26075] __warn+0xf6/0x3c0 [ 1724.810972][T26075] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.816982][T26075] report_bug+0x3c3/0x580 [ 1724.821335][T26075] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.827337][T26075] handle_bug+0x184/0x210 [ 1724.831766][T26075] exc_invalid_op+0x17/0x50 [ 1724.836295][T26075] asm_exc_invalid_op+0x1a/0x20 [ 1724.841153][T26075] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 1724.847764][T26075] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 5d a8 8b e8 35 00 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 36 cb 2e ff 44 0f b6 2d e2 8a dd 0d [ 1724.867386][T26075] RSP: 0018:ffffc9000461f178 EFLAGS: 00010282 [ 1724.873473][T26075] RAX: 0000000000000000 RBX: ffff88805526e238 RCX: ffffc9000c329000 [ 1724.881449][T26075] RDX: 0000000000080000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1724.889446][T26075] RBP: ffffc9000461f240 R08: 0000000000000001 R09: 0000000000000000 [ 1724.897432][T26075] R10: 0000000000000000 R11: 000000002d2d2d2d R12: 0000000000000002 [ 1724.905414][T26075] R13: 0000000000000000 R14: 1ffff920008c3e32 R15: ffff88805526e428 [ 1724.913408][T26075] ? __warn_printk+0x1a5/0x350 [ 1724.918198][T26075] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 1724.924199][T26075] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 1724.930557][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.936223][T26075] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 1724.941705][T26075] ext4_xattr_set_entry+0x158f/0x1f00 [ 1724.947109][T26075] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 1724.952848][T26075] ? xattr_find_entry+0x289/0x330 [ 1724.957893][T26075] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 1724.963114][T26075] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 1724.969049][T26075] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1724.975325][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.980985][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.986641][T26075] ? dquot_initialize_needed+0x183/0x2a0 [ 1724.992564][T26075] __ext4_expand_extra_isize+0x346/0x480 [ 1724.998226][T26075] __ext4_mark_inode_dirty+0x544/0x870 [ 1725.003720][T26075] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1725.009741][T26075] ? __pfx___might_resched+0x10/0x10 [ 1725.015086][T26075] ? ext4_journal_check_start+0x22b/0x340 [ 1725.020842][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.026494][T26075] ? __ext4_journal_start_sb+0x19e/0x690 [ 1725.032153][T26075] ? ext4_evict_inode+0x5cf/0x18e0 [ 1725.037297][T26075] ext4_evict_inode+0x74e/0x18e0 [ 1725.042259][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1725.047646][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.053304][T26075] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1725.058689][T26075] evict+0x3e6/0x920 [ 1725.062612][T26075] ? __pfx_evict+0x10/0x10 [ 1725.067058][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.072712][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.078364][T26075] iput.part.0+0x6a9/0xb00 [ 1725.082803][T26075] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1725.088115][T26075] iput+0x35/0x40 [ 1725.091773][T26075] ext4_orphan_cleanup+0x731/0x11e0 [ 1725.097027][T26075] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1725.102697][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.108357][T26075] ? ext4_register_li_request+0xec/0x9b0 [ 1725.114016][T26075] ext4_fill_super+0x8db7/0xaf70 [ 1725.118990][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1725.124289][T26075] ? do_raw_spin_lock+0x12c/0x2b0 [ 1725.129340][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.134990][T26075] ? find_held_lock+0x2b/0x80 [ 1725.139718][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.145458][T26075] ? sb_set_blocksize+0x176/0x1d0 [ 1725.150502][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.156151][T26075] ? setup_bdev_super+0x369/0x730 [ 1725.161187][T26075] get_tree_bdev_flags+0x38c/0x620 [ 1725.166324][T26075] ? __pfx_ext4_fill_super+0x10/0x10 [ 1725.171623][T26075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1725.177270][T26075] ? apparmor_capable+0x114/0x1d0 [ 1725.182307][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.187954][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.193609][T26075] ? security_capable+0x7e/0x260 [ 1725.198582][T26075] vfs_get_tree+0x8e/0x340 [ 1725.203032][T26075] path_mount+0x7b9/0x23a0 [ 1725.207488][T26075] ? __pfx_path_mount+0x10/0x10 [ 1725.212375][T26075] ? putname+0x154/0x1a0 [ 1725.216837][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.222501][T26075] ? putname+0x154/0x1a0 [ 1725.226772][T26075] ? __x64_sys_mount+0x293/0x310 [ 1725.231730][T26075] __x64_sys_mount+0x293/0x310 [ 1725.236520][T26075] ? __pfx___x64_sys_mount+0x10/0x10 [ 1725.241822][T26075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.247482][T26075] do_syscall_64+0xcd/0xfa0 [ 1725.252035][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.257940][T26075] RIP: 0033:0x7f6eed39066a [ 1725.262359][T26075] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.281988][T26075] RSP: 002b:00007f6eee300e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1725.290422][T26075] RAX: ffffffffffffffda RBX: 00007f6eee300ef0 RCX: 00007f6eed39066a [ 1725.298410][T26075] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6eee300eb0 [ 1725.306392][T26075] RBP: 0000200000000180 R08: 00007f6eee300ef0 R09: 0000000000800718 [ 1725.314375][T26075] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 1725.322366][T26075] R13: 00007f6eee300eb0 R14: 0000000000000473 R15: 0000200000000680 [ 1725.330362][T26075] [ 1725.333637][T26075] Kernel Offset: disabled [ 1725.337963][T26075] Rebooting in 86400 seconds..