last executing test programs: 8m21.755917716s ago: executing program 2 (id=223): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 8m13.407793346s ago: executing program 2 (id=284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 8m12.855757784s ago: executing program 2 (id=288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 8m12.587880498s ago: executing program 2 (id=291): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c) listen(r0, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) 8m12.187500524s ago: executing program 2 (id=294): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 8m7.738822708s ago: executing program 3 (id=301): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x80001, 0xd1) writev(r0, &(0x7f0000000940), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(r2) 8m6.492161096s ago: executing program 3 (id=304): r0 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4084, 0xff4}], &(0x7f0000000200), 0x1}, 0x20) 8m5.919400804s ago: executing program 2 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffffffff85000000860000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) 8m5.567332739s ago: executing program 3 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) 8m4.040527561s ago: executing program 3 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 8m2.676573161s ago: executing program 3 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1000000100}, 0x18) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setpriority(0x1, 0xff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x826, 0x787235c4}}]}}}]}, 0x74}}, 0x0) 8m1.957122111s ago: executing program 3 (id=316): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 7m50.539716466s ago: executing program 32 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffffffff85000000860000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) 7m46.512886194s ago: executing program 33 (id=316): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 3m41.551679407s ago: executing program 5 (id=979): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00'}, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@block_validity}, {@dioread_lock}, {@usrquota}, {@abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) umount2(&(0x7f0000000340)='./file0\x00', 0x8) sendmsg$NL80211_CMD_DISCONNECT(r1, 0x0, 0x40) fallocate(r1, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r1, 0x0, 0x478) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3m39.734142613s ago: executing program 5 (id=982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r5, @ANYBLOB="31e9711389bd1e847a3e2e48a31b71141d4dd9a943ff64600b61f914af0b7ec94d0af6d63aa6787c79de1eb6a6f3c1ca7f314d3e6d6dadabd6c11608c107e5537fd5abd6ea30101a292e1a6e4d7058008792ba8b3456eccae42042e66a78a8ae2f659c87c594a7"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000640)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x60, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0xfffffffffffffeec, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0xc080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m33.932047678s ago: executing program 5 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x68f}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) 3m29.66584871s ago: executing program 5 (id=997): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 3m28.862447091s ago: executing program 5 (id=1003): unshare(0x66000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 3m23.912577704s ago: executing program 5 (id=1022): syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) ioctl$TCSETSW2(r5, 0x5453, 0x0) 3m8.526775777s ago: executing program 34 (id=1022): syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) ioctl$TCSETSW2(r5, 0x5453, 0x0) 2m25.03330616s ago: executing program 1 (id=1157): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m22.604772355s ago: executing program 1 (id=1160): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 2m22.109798242s ago: executing program 1 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 2m21.530470231s ago: executing program 1 (id=1164): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0xaa03af3a50072d16, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d697400"], 0x548}}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000480)={0x1d, 0x1c, 0xe, 0x4, 0x9, 0x4, 0x4, 0x140, 0xffffffffffffffff}) 2m20.19803448s ago: executing program 1 (id=1168): unshare(0x22020600) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x0, 0x8, 0x42}, 0x8, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0}) 2m19.335394873s ago: executing program 1 (id=1171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@acl}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@nodelalloc}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x17}}]}, 0x2, 0x58e, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_gettime(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000900c000000000000000009009500000000000000c2e409a5c5f89536521056ce2decaa6856ae9219fa"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 2m4.166590424s ago: executing program 35 (id=1171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@acl}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@nodelalloc}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x17}}]}, 0x2, 0x58e, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_gettime(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000900c000000000000000009009500000000000000c2e409a5c5f89536521056ce2decaa6856ae9219fa"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 9.176770637s ago: executing program 0 (id=2011): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 9.035730598s ago: executing program 0 (id=2013): r0 = creat(0x0, 0x248) close(r0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 8.93216982s ago: executing program 0 (id=2015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r0, 0x16) 8.676330734s ago: executing program 0 (id=2020): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000002000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x18) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20088844) 8.447971177s ago: executing program 0 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.067924886s ago: executing program 6 (id=2040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff060000000000000014f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x12) 4.015974161s ago: executing program 4 (id=2050): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 2.960037237s ago: executing program 4 (id=2056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0x6a) 1.619713116s ago: executing program 6 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x48002) 1.491312278s ago: executing program 4 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x68f}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) 1.470849769s ago: executing program 6 (id=2061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.33637912s ago: executing program 6 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 1.104999934s ago: executing program 6 (id=2066): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 868.656228ms ago: executing program 8 (id=2069): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 836.894058ms ago: executing program 7 (id=2070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0x6a) 769.282779ms ago: executing program 0 (id=2071): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x40c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="befc5e1ecb6761", 0x7}], 0x1}}], 0x1, 0x84004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 751.882979ms ago: executing program 4 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f00000005c0), 0x20000000}, 0x20) 690.75571ms ago: executing program 8 (id=2073): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) 624.513651ms ago: executing program 4 (id=2074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) 623.689151ms ago: executing program 7 (id=2075): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 543.830052ms ago: executing program 8 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 521.480282ms ago: executing program 4 (id=2077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000dc58bb264cd9deadd2f1"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xfdef) 428.163804ms ago: executing program 7 (id=2078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8adb4500000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 350.699555ms ago: executing program 7 (id=2079): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2122) 349.877195ms ago: executing program 8 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 200.023737ms ago: executing program 7 (id=2081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020020008500000082"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 199.791117ms ago: executing program 8 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 134.418318ms ago: executing program 6 (id=2083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x68f}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) 104.324518ms ago: executing program 8 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40200, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000380)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 0s ago: executing program 7 (id=2085): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): xt4_validate_block_bitmap:438: comm syz.1.1118: bg 0: block 393: padding at end of block bitmap is not set [ 453.626383][ T7922] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 453.662723][ T7927] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.956093][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 453.980052][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.144309][ T26] audit: type=1326 audit(1747105732.438:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.236591][ T26] audit: type=1326 audit(1747105732.468:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.362974][ T26] audit: type=1326 audit(1747105732.468:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.455931][ T7935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.474975][ T26] audit: type=1326 audit(1747105732.468:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.578955][ T26] audit: type=1326 audit(1747105732.478:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.660970][ T7931] tipc: Started in network mode [ 454.675451][ T26] audit: type=1326 audit(1747105732.478:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.675713][ T7931] tipc: Node identity 52abfd8aa33e, cluster identity 4711 [ 454.713724][ T26] audit: type=1326 audit(1747105732.478:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.832940][ T7931] tipc: Enabled bearer , priority 0 [ 454.853836][ T26] audit: type=1326 audit(1747105732.488:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.901971][ T7934] tipc: Disabling bearer [ 454.919115][ T26] audit: type=1326 audit(1747105732.488:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.948592][ T26] audit: type=1326 audit(1747105732.488:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 454.959451][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 454.993564][ T26] audit: type=1326 audit(1747105732.498:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.6.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 455.030954][ T7939] loop4: detected capacity change from 0 to 512 [ 455.054185][ T7939] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.066318][ T7939] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 455.094188][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1119'. [ 455.128170][ T7939] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 455.147639][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.198996][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.237224][ T7939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 455.254129][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 455.282245][ T7939] System zones: 0-2, 18-18, 34-34 [ 455.363966][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 455.427012][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.435394][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.463458][ T7939] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 455.487317][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 455.498473][ T7939] EXT4-fs (loop4): 1 truncate cleaned up [ 455.505249][ T7939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 455.725168][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1122'. [ 455.778219][ T7948] loop0: detected capacity change from 0 to 256 [ 455.810366][ T7950] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1122: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 455.869779][ T7949] 9pnet_fd: Insufficient options for proto=fd [ 456.859171][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.909509][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.957932][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.027179][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.035543][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.246991][ T6153] device hsr_slave_0 left promiscuous mode [ 457.306362][ T6153] device hsr_slave_1 left promiscuous mode [ 457.369539][ T6153] device bridge_slave_1 left promiscuous mode [ 457.393316][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.467474][ T6153] device bridge_slave_0 left promiscuous mode [ 457.475274][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.644454][ T7965] loop0: detected capacity change from 0 to 1024 [ 457.653133][ T7965] EXT4-fs: Ignoring removed oldalloc option [ 457.668710][ T7965] EXT4-fs: Ignoring removed i_version option [ 457.705733][ T26] audit: type=1800 audit(1747105735.998:1445): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1122" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 459.452557][ T6153] device veth1_macvtap left promiscuous mode [ 459.470483][ T6153] device veth0_macvtap left promiscuous mode [ 459.508823][ T6153] device veth1_vlan left promiscuous mode [ 459.555848][ T6153] device veth0_vlan left promiscuous mode [ 459.581142][ T7965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 459.961322][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 460.164836][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 462.441754][ T7986] 9pnet_fd: Insufficient options for proto=fd [ 463.533024][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 463.559697][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 463.735664][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 463.812508][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 463.884036][ T6153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.955476][ T6153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.773990][ T6153] bond0 (unregistering): Released all slaves [ 464.912854][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.926031][ T7959] device veth1_to_team entered promiscuous mode [ 464.947231][ T7960] device veth1_to_team left promiscuous mode [ 465.081850][ T7961] team0: Port device team_slave_1 removed [ 465.216321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.247807][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 465.280251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.366885][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.443692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.459628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.522901][ T8001] loop0: detected capacity change from 0 to 128 [ 465.552456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.571726][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.588469][ T8001] EXT4-fs: Ignoring removed nobh option [ 465.658755][ T8001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 465.671696][ T8001] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 465.694670][ T7795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.747814][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.763214][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.781963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.794445][ T8001] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 465.878364][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 465.988661][ T8001] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 466.015817][ T8001] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1140'. [ 466.063309][ T8001] device team0 entered promiscuous mode [ 466.090173][ T8001] device team_slave_0 entered promiscuous mode [ 466.136310][ T8001] device team_slave_1 entered promiscuous mode [ 466.158361][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.224756][ T8001] bridge0: port 3(team0) entered blocking state [ 466.256445][ T8001] bridge0: port 3(team0) entered disabled state [ 466.597004][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 470.826897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.874823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.931586][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.497233][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 472.510604][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 472.610707][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 473.152431][ T8055] loop6: detected capacity change from 0 to 1024 [ 473.289893][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1155'. [ 473.335075][ T8055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 473.445440][ T8055] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.070576][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 476.491554][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.976419][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.168605][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.210160][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.311345][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.328354][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.342503][ T7795] device veth0_vlan entered promiscuous mode [ 477.456217][ T7795] device veth1_vlan entered promiscuous mode [ 477.458637][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 477.512080][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.667247][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.702266][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.754792][ T7795] device veth0_macvtap entered promiscuous mode [ 477.820395][ T7795] device veth1_macvtap entered promiscuous mode [ 477.925772][ T7482] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 478.021265][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.042927][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.071138][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.105802][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.130409][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.148305][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.173694][ T7482] usb 7-1: Using ep0 maxpacket: 32 [ 478.205842][ T26] audit: type=1326 audit(1747105756.508:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 478.277873][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.288928][ T8089] loop6: detected capacity change from 0 to 256 [ 478.316893][ T26] audit: type=1326 audit(1747105756.508:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 478.358778][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.377882][ T8089] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 478.389616][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.397048][ T8099] loop0: detected capacity change from 0 to 1024 [ 478.403599][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.430930][ T8099] EXT4-fs: Ignoring removed nobh option [ 478.445178][ T26] audit: type=1326 audit(1747105756.508:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 478.445508][ T8099] EXT4-fs: Ignoring removed bh option [ 478.478380][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.489156][ T26] audit: type=1326 audit(1747105756.508:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 478.489317][ T26] audit: type=1326 audit(1747105756.508:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a9e58e9a3 code=0x7ffc0000 [ 478.489477][ T26] audit: type=1326 audit(1747105756.538:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a9e58d41f code=0x7ffc0000 [ 478.489617][ T26] audit: type=1326 audit(1747105756.558:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8a9e58e9f7 code=0x7ffc0000 [ 478.489775][ T26] audit: type=1326 audit(1747105756.558:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9e58d2d0 code=0x7ffc0000 [ 478.489915][ T26] audit: type=1326 audit(1747105756.588:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a9e58e56b code=0x7ffc0000 [ 478.490076][ T26] audit: type=1326 audit(1747105756.598:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.6.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a9e58d5ca code=0x7ffc0000 [ 478.519606][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.615605][ T8099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 478.626883][ T7482] usb 7-1: unable to get BOS descriptor or descriptor too short [ 478.705161][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.733532][ T6175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.744139][ T8099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 478.783352][ T7795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.790627][ T7482] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 478.793781][ T7503] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 478.822045][ T7482] usb 7-1: can't read configurations, error -71 [ 478.830140][ T7795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.877426][ T8099] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.1170: Allocating blocks 385-513 which overlap fs metadata [ 478.894411][ T7795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.904870][ T7795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.950402][ T8099] EXT4-fs (loop0): pa ffff888073661380: logic 16, phys. 129, len 24 [ 478.961214][ T8099] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 478.962787][ T8106] loop1: detected capacity change from 0 to 1024 [ 478.986013][ T7503] usb 5-1: device descriptor read/64, error -71 [ 479.103820][ T8106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 479.189570][ T6179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.231481][ T6179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.275456][ T7503] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 479.343644][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.353742][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.374418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.423828][ T6199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.494508][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 479.546191][ T7503] usb 5-1: device descriptor read/64, error -71 [ 479.672335][ T7503] usb usb5-port1: attempt power cycle [ 479.966991][ T8117] xt_hashlimit: size too large, truncated to 1048576 [ 480.145702][ T7503] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 480.213249][ T7503] usb 5-1: device descriptor read/8, error -71 [ 480.508255][ T7503] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 480.589448][ T7503] usb 5-1: device descriptor read/8, error -71 [ 480.725914][ T7503] usb usb5-port1: unable to enumerate USB device [ 481.124160][ T8125] 9pnet_fd: Insufficient options for proto=fd [ 481.194650][ T8127] loop6: detected capacity change from 0 to 1024 [ 481.320019][ T8127] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 481.401224][ T8127] EXT4-fs (loop6): invalid journal inode [ 481.465082][ T8127] EXT4-fs (loop6): can't get journal size [ 481.547029][ T8127] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 17104912: comm syz.6.1175: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 481.683871][ T8131] tipc: Enabled bearer , priority 0 [ 481.734296][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 481.754162][ T8127] EXT4-fs (loop6): failed to initialize system zone (-117) [ 481.796059][ T8127] EXT4-fs (loop6): mount failed [ 481.821134][ T8134] tipc: Disabling bearer [ 483.373388][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1184'. [ 484.021901][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 484.114541][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 484.330081][ T8164] loop4: detected capacity change from 0 to 1024 [ 484.465972][ T8164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 484.523252][ T8164] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.563681][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 484.596188][ T8167] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 484.708484][ T8167] EXT4-fs (loop4): Remounting filesystem read-only [ 484.775563][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 484.775596][ T26] audit: type=1326 audit(1747105763.048:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 484.936455][ T26] audit: type=1326 audit(1747105763.078:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 485.105542][ T26] audit: type=1326 audit(1747105763.078:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 485.255751][ T26] audit: type=1326 audit(1747105763.078:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 485.403654][ T26] audit: type=1326 audit(1747105763.078:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 485.510413][ T26] audit: type=1326 audit(1747105763.088:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 485.725997][ T26] audit: type=1326 audit(1747105763.088:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f362f98e9a3 code=0x7ffc0000 [ 485.779930][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 485.924837][ T26] audit: type=1326 audit(1747105763.178:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f362f98d41f code=0x7ffc0000 [ 487.621697][ T26] audit: type=1326 audit(1747105763.318:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f362f98e9f7 code=0x7ffc0000 [ 487.865613][ T26] audit: type=1326 audit(1747105763.318:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f362f98d2d0 code=0x7ffc0000 [ 490.006022][ T8211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1206'. [ 490.144402][ T8214] loop4: detected capacity change from 0 to 1024 [ 490.188282][ T8214] EXT4-fs: Ignoring removed nobh option [ 490.194966][ T8214] EXT4-fs: Ignoring removed bh option [ 490.285408][ T8214] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 490.488695][ T8214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.624549][ T8214] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1208: Allocating blocks 385-513 which overlap fs metadata [ 490.722236][ T8214] EXT4-fs (loop4): pa ffff8880737688c0: logic 16, phys. 129, len 24 [ 490.731795][ T8214] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 491.184135][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 491.341846][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 491.341902][ T26] audit: type=1326 audit(1747105769.638:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 491.555523][ T26] audit: type=1326 audit(1747105769.688:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 491.695668][ T26] audit: type=1326 audit(1747105769.688:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 491.854268][ T26] audit: type=1326 audit(1747105769.688:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 495.021515][ T26] audit: type=1326 audit(1747105773.318:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 495.092630][ T7482] kernel write not supported for file /42/attr/sockcreate (pid: 7482 comm: kworker/1:11) [ 495.215441][ T26] audit: type=1326 audit(1747105773.378:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 495.385610][ T26] audit: type=1326 audit(1747105773.378:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 495.570815][ T26] audit: type=1326 audit(1747105773.378:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 495.809885][ T26] audit: type=1326 audit(1747105773.378:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 496.008463][ T26] audit: type=1326 audit(1747105773.378:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 496.577611][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.600117][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.626824][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.639182][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.656873][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 496.667425][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.746398][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 498.281021][ T8309] tipc: New replicast peer: 255.255.255.255 [ 498.308447][ T8309] tipc: Enabled bearer , priority 10 [ 498.715686][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 498.828022][ T7503] kernel write not supported for file /683/attr/sockcreate (pid: 7503 comm: kworker/0:15) [ 499.263278][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 499.263332][ T26] audit: type=1326 audit(1747105777.558:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 499.437630][ T41] tipc: Node number set to 4053138826 [ 499.499441][ T26] audit: type=1326 audit(1747105777.568:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 499.587840][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 499.717633][ T26] audit: type=1326 audit(1747105777.568:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 499.905531][ T26] audit: type=1326 audit(1747105777.568:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.076767][ T26] audit: type=1326 audit(1747105777.568:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.145520][ T26] audit: type=1326 audit(1747105777.568:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.239235][ T26] audit: type=1326 audit(1747105777.918:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.266095][ T26] audit: type=1326 audit(1747105777.998:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.293930][ T8330] netlink: 'syz.6.1248': attribute type 21 has an invalid length. [ 500.295834][ T26] audit: type=1326 audit(1747105777.998:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d0dc1225 code=0x7ffc0000 [ 500.336068][ T8330] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1248'. [ 500.513893][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.545518][ T26] audit: type=1326 audit(1747105778.038:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.7.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 500.595649][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.685827][ T8288] device bridge_slave_0 entered promiscuous mode [ 500.754998][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.795801][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 500.804220][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.931684][ T8288] device bridge_slave_1 entered promiscuous mode [ 501.352490][ T8349] IPv6: Can't replace route, no match found [ 501.366546][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.386307][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.493924][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.916101][ T8288] team0: Port device team_slave_0 added [ 502.011554][ T8288] team0: Port device team_slave_1 added [ 502.299361][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.364368][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.516774][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.594074][ T8359] tipc: Enabled bearer , priority 0 [ 502.626543][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.651057][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.808578][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.875580][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 503.307004][ T8358] tipc: Disabling bearer [ 504.607178][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 504.607232][ T26] audit: type=1326 audit(1747105782.808:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.0.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 505.850715][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 506.258818][ T8288] device hsr_slave_0 entered promiscuous mode [ 506.358690][ T8288] device hsr_slave_1 entered promiscuous mode [ 506.429139][ T8288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.585931][ T8288] Cannot create hsr debugfs directory [ 507.509923][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 508.598316][ T8288] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 508.965609][ T8288] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.494833][ T8288] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 510.551681][ T8110] EXT4-fs (loop1): unmounting filesystem. [ 510.615129][ T8288] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.725413][ T8407] syz.0.1273[8407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.725711][ T8407] syz.0.1273[8407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.772764][ T26] audit: type=1326 audit(1747105789.068:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 511.004202][ T26] audit: type=1326 audit(1747105789.068:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 511.068593][ T8405] loop0: detected capacity change from 0 to 2048 [ 511.194715][ T8405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 511.244071][ T26] audit: type=1326 audit(1747105789.068:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 511.395985][ T8405] EXT4-fs error (device loop0): ext4_ext_precache:645: inode #2: comm syz.0.1273: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 511.453910][ T8405] EXT4-fs (loop0): Remounting filesystem read-only [ 511.457914][ T26] audit: type=1326 audit(1747105789.068:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 511.720349][ T26] audit: type=1326 audit(1747105789.068:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 511.833563][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.944226][ T26] audit: type=1326 audit(1747105789.068:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 512.046696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.082205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.126145][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.155078][ T26] audit: type=1326 audit(1747105789.068:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 512.240276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.258601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.297423][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.305824][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.345858][ T26] audit: type=1326 audit(1747105789.068:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 512.432463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.476205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.497182][ T26] audit: type=1326 audit(1747105789.358:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 512.537196][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.601419][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.611506][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.628347][ T26] audit: type=1326 audit(1747105789.358:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 512.663051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.172149][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 516.692794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 516.769407][ T8425] tipc: Enabled bearer , priority 0 [ 517.517828][ T8422] tipc: Disabling bearer [ 517.955671][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.010564][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.350984][ T6169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.482285][ T8458] loop4: detected capacity change from 0 to 1024 [ 519.448347][ T8288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.542662][ T8288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.643818][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.682358][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.787767][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.892294][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.022117][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.062816][ T8458] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 520.186809][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 520.256443][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.411569][ T6169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.548573][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.828446][ T6169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.470892][ T6169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.175978][ T6169] tipc: Disabling bearer [ 523.672177][ T6169] tipc: Left network mode [ 525.286569][ T7498] kernel write not supported for file /94/attr/sockcreate (pid: 7498 comm: kworker/0:10) [ 525.328566][ T8520] loop6: detected capacity change from 0 to 1024 [ 525.355734][ T8520] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 526.143185][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.166579][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.370029][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.092504][ T8541] batman_adv: batadv0: Adding interface: dummy0 [ 527.136616][ T8541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.295500][ T8541] batman_adv: batadv0: Interface activated: dummy0 [ 527.507904][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1310'. [ 527.771745][ T8547] device bond1 entered promiscuous mode [ 527.816870][ T8547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.211847][ T8564] loop0: detected capacity change from 0 to 512 [ 530.720673][ T8573] tipc: Enabled bearer , priority 0 [ 530.833302][ T8570] tipc: Disabling bearer [ 531.989908][ T6169] device hsr_slave_0 left promiscuous mode [ 532.027067][ T6169] device hsr_slave_1 left promiscuous mode [ 532.096476][ T6169] batman_adv: batadv0: Interface deactivated: dummy0 [ 532.150531][ T6169] batman_adv: batadv0: Removing interface: dummy0 [ 532.190368][ T8591] loop6: detected capacity change from 0 to 764 [ 532.217546][ T6169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.233304][ T8591] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 532.288156][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.358840][ T6169] device bridge_slave_1 left promiscuous mode [ 532.419598][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.493224][ T6169] device bridge_slave_0 left promiscuous mode [ 532.536415][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.747299][ T6169] device veth1_vlan left promiscuous mode [ 532.774791][ T6169] device veth0_vlan left promiscuous mode [ 533.154022][ T6169] bond1 (unregistering): Released all slaves [ 533.654644][ T6169] team0 (unregistering): Port device team_slave_1 removed [ 533.713975][ T6169] team0 (unregistering): Port device team_slave_0 removed [ 533.782360][ T6169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.886386][ T6169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.763220][ T6169] bond0 (unregistering): Released all slaves [ 535.136580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.166420][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.246460][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.280407][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.308374][ T8288] device veth0_vlan entered promiscuous mode [ 535.326448][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.354159][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.397613][ T8288] device veth1_vlan entered promiscuous mode [ 536.153571][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.199477][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.252911][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.266496][ T6179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.312263][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 536.336505][ T8288] device veth0_macvtap entered promiscuous mode [ 536.377066][ T8288] device veth1_macvtap entered promiscuous mode [ 536.451400][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 536.451437][ T26] audit: type=1326 audit(1747105814.688:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.485311][ T26] audit: type=1326 audit(1747105814.688:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.512293][ T26] audit: type=1326 audit(1747105814.688:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.519244][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.554588][ T26] audit: type=1326 audit(1747105814.688:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.735154][ T26] audit: type=1326 audit(1747105814.688:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.757756][ T26] audit: type=1326 audit(1747105814.688:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.780219][ T26] audit: type=1326 audit(1747105814.688:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.806716][ T8622] loop6: detected capacity change from 0 to 764 [ 536.813084][ T26] audit: type=1326 audit(1747105814.688:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.842370][ T8622] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 536.850511][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.861439][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.885271][ T26] audit: type=1326 audit(1747105814.688:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 536.914521][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.957219][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.976292][ T26] audit: type=1326 audit(1747105814.918:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 537.015698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.040932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.067955][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.104472][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.126525][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.141041][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.167920][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.209577][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.224950][ T8288] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.238059][ T8288] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.248575][ T8288] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.258832][ T8288] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.358388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.379091][ T8628] loop7: detected capacity change from 0 to 512 [ 537.379554][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.440702][ T8628] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.480507][ T8628] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 537.566887][ T8628] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 537.610161][ T8628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 537.619541][ T8628] System zones: 0-2, 18-18, 34-34 [ 537.646011][ T8628] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 537.819959][ T8628] EXT4-fs (loop7): 1 truncate cleaned up [ 537.839544][ T8628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 538.132458][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1337'. [ 538.745128][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.806875][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.929998][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.981585][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.055102][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.067884][ T8642] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 3: comm syz.7.1337: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 539.133568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.492532][ T8656] loop8: detected capacity change from 0 to 1024 [ 539.506516][ T8655] loop4: detected capacity change from 0 to 1024 [ 539.526472][ T8656] EXT4-fs: Ignoring removed nobh option [ 539.532195][ T8656] EXT4-fs: Ignoring removed bh option [ 539.541085][ T8655] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 539.582889][ T8656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 539.664081][ T8656] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 539.743197][ T8656] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.1226: Allocating blocks 385-513 which overlap fs metadata [ 539.783532][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 539.822270][ T8656] EXT4-fs (loop8): pa ffff8880736618c0: logic 16, phys. 129, len 24 [ 539.830548][ T8656] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 539.921915][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 540.090916][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 540.261780][ T8668] xt_hashlimit: max too large, truncated to 1048576 [ 540.283578][ T8670] loop8: detected capacity change from 0 to 764 [ 540.356222][ T8670] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 540.385067][ T8664] loop7: detected capacity change from 0 to 8192 [ 540.809873][ T8678] loop6: detected capacity change from 0 to 1024 [ 540.841361][ T8678] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 540.898841][ T8678] EXT4-fs (loop6): invalid journal inode [ 540.938768][ T8678] EXT4-fs (loop6): can't get journal size [ 541.030925][ T8678] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 17104912: comm syz.6.1349: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 541.122654][ T8678] EXT4-fs (loop6): failed to initialize system zone (-117) [ 541.162619][ T8678] EXT4-fs (loop6): mount failed [ 541.221628][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1352'. [ 541.270958][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1352'. [ 541.349561][ T8691] loop0: detected capacity change from 0 to 512 [ 541.396516][ T8687] loop4: detected capacity change from 0 to 8192 [ 541.404978][ T8691] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.432597][ T8691] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 541.481475][ T8691] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 541.482562][ T8693] loop8: detected capacity change from 0 to 1024 [ 541.501621][ T8691] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 541.511594][ T8691] System zones: 0-2, 18-18, 34-34 [ 541.534297][ T8695] loop6: detected capacity change from 0 to 1024 [ 541.541958][ T8695] EXT4-fs: Ignoring removed nobh option [ 541.547938][ T8691] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.548564][ T8695] EXT4-fs: Ignoring removed bh option [ 541.570021][ T8695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 541.582691][ T8693] EXT4-fs (loop8): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 541.598076][ T8691] EXT4-fs (loop0): 1 truncate cleaned up [ 541.606306][ T8691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 541.621673][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1357'. [ 541.636431][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 541.636458][ T26] audit: type=1326 audit(1747105819.938:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 541.684835][ T8695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 541.731287][ T26] audit: type=1326 audit(1747105819.968:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 541.744018][ T8702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1354'. [ 541.818421][ T8695] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1356: Allocating blocks 385-513 which overlap fs metadata [ 541.835568][ T8705] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.1354: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 541.874652][ T26] audit: type=1326 audit(1747105819.968:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 541.955306][ T26] audit: type=1326 audit(1747105819.968:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 541.987700][ T8695] EXT4-fs (loop6): pa ffff888073661b60: logic 16, phys. 129, len 24 [ 541.995975][ T8695] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 542.027219][ T4262] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 542.045326][ T4262] FAT-fs (loop4): Filesystem has been set read-only [ 542.074114][ T26] audit: type=1326 audit(1747105819.968:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 542.135683][ T26] audit: type=1326 audit(1747105819.968:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 542.201255][ T26] audit: type=1326 audit(1747105819.998:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 542.260579][ T26] audit: type=1326 audit(1747105820.008:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d0dc1225 code=0x7ffc0000 [ 542.324443][ T26] audit: type=1326 audit(1747105820.058:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 542.435351][ T26] audit: type=1326 audit(1747105820.058:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.7.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0d8e969 code=0x7ffc0000 [ 542.438303][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 542.604819][ T8713] loop4: detected capacity change from 0 to 764 [ 542.634625][ T8713] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 542.660393][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 542.729139][ T8715] tipc: Started in network mode [ 542.734075][ T8715] tipc: Node identity b6d39a8d2c88, cluster identity 4711 [ 542.777020][ T8715] tipc: Enabled bearer , priority 0 [ 542.821140][ T8719] tipc: Disabling bearer [ 542.905631][ T8722] device syzkaller1 entered promiscuous mode [ 543.332029][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1368'. [ 543.424567][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1367'. [ 543.479371][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1367'. [ 543.635110][ T8744] loop8: detected capacity change from 0 to 1024 [ 543.659468][ T8744] EXT4-fs: Ignoring removed nobh option [ 543.672976][ T8744] EXT4-fs: Ignoring removed bh option [ 543.692362][ T8744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.770897][ T8744] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 543.834221][ T8750] loop7: detected capacity change from 0 to 512 [ 543.843328][ T8744] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.1371: Allocating blocks 385-513 which overlap fs metadata [ 543.880300][ T8750] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.908607][ T8744] EXT4-fs (loop8): pa ffff888073661e00: logic 16, phys. 129, len 24 [ 543.917099][ T8744] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 543.948539][ T8750] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 543.978578][ T8750] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 544.013536][ T8750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 544.068007][ T8750] System zones: 0-2, 18-18, 34-34 [ 544.096573][ T8750] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 544.132325][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 544.177742][ T8750] EXT4-fs (loop7): 1 truncate cleaned up [ 544.183442][ T8750] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 544.356770][ T8762] loop8: detected capacity change from 0 to 764 [ 544.364371][ T8763] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1373'. [ 544.388604][ T8762] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 544.434520][ T8766] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 3: comm syz.7.1373: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 544.500790][ T8761] tipc: Enabled bearer , priority 0 [ 544.798807][ T8768] tipc: Disabling bearer [ 544.946836][ T8771] tipc: New replicast peer: 255.255.255.255 [ 544.972899][ T8771] tipc: Enabled bearer , priority 10 [ 545.268147][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 545.419371][ T7497] kernel write not supported for file /770/attr/sockcreate (pid: 7497 comm: kworker/0:9) [ 545.458306][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1383'. [ 545.512522][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1383'. [ 545.727849][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 545.846887][ T8791] loop4: detected capacity change from 0 to 1024 [ 545.887813][ T8791] EXT4-fs: Ignoring removed nobh option [ 545.893435][ T8791] EXT4-fs: Ignoring removed bh option [ 545.957538][ T8791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.066471][ T7499] tipc: Node number set to 2589694605 [ 546.104579][ T8791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 546.243318][ T8800] loop8: detected capacity change from 0 to 764 [ 546.265752][ T8791] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1386: Allocating blocks 385-513 which overlap fs metadata [ 547.212941][ T8800] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 547.223668][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 547.371690][ T8791] EXT4-fs (loop4): pa ffff8880737688c0: logic 16, phys. 129, len 24 [ 547.381243][ T8791] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 547.420770][ T8804] IPv6: Can't replace route, no match found [ 547.808094][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 547.932001][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1395'. [ 547.995496][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 547.995552][ T26] audit: type=1326 audit(1747105826.278:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.115528][ T26] audit: type=1326 audit(1747105826.278:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.218603][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1397'. [ 548.232638][ T26] audit: type=1326 audit(1747105826.278:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.269451][ T7500] kernel write not supported for file /776/attr/sockcreate (pid: 7500 comm: kworker/0:12) [ 548.299950][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1397'. [ 548.347558][ T26] audit: type=1326 audit(1747105826.278:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.469028][ T26] audit: type=1326 audit(1747105826.278:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.534858][ T8825] netlink: 'syz.8.1399': attribute type 4 has an invalid length. [ 548.554335][ T26] audit: type=1326 audit(1747105826.278:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.661986][ T26] audit: type=1326 audit(1747105826.358:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.795442][ T26] audit: type=1326 audit(1747105826.358:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 548.922349][ T26] audit: type=1326 audit(1747105826.368:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 549.013020][ T26] audit: type=1326 audit(1747105826.368:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.8.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 550.012985][ T8845] loop7: detected capacity change from 0 to 764 [ 550.042755][ T8845] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 550.545001][ T7500] kernel write not supported for file /151/attr/sockcreate (pid: 7500 comm: kworker/0:12) [ 550.870339][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 550.921413][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 551.429557][ T8867] loop7: detected capacity change from 0 to 1024 [ 551.463818][ T8867] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 551.548700][ T8867] EXT4-fs (loop7): invalid journal inode [ 551.554478][ T8867] EXT4-fs (loop7): can't get journal size [ 551.575700][ T8867] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 17104912: comm syz.7.1418: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 551.614570][ T8876] syz.0.1420[8876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.614682][ T8876] syz.0.1420[8876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.625960][ T8867] EXT4-fs (loop7): failed to initialize system zone (-117) [ 551.626152][ T8867] EXT4-fs (loop7): mount failed [ 552.041002][ T7497] kernel write not supported for file /612/attr/sockcreate (pid: 7497 comm: kworker/0:9) [ 552.143434][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1426'. [ 552.194151][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1426'. [ 553.500348][ T8908] netlink: 'syz.4.1432': attribute type 10 has an invalid length. [ 553.700917][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 553.700933][ T26] audit: type=1326 audit(1747105831.998:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 553.715476][ T8914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.775437][ T26] audit: type=1326 audit(1747105831.998:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 553.835351][ T26] audit: type=1326 audit(1747105831.998:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 553.890471][ T26] audit: type=1326 audit(1747105831.998:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 553.928257][ T26] audit: type=1326 audit(1747105831.998:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 553.961412][ T26] audit: type=1326 audit(1747105831.998:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 554.029441][ T26] audit: type=1326 audit(1747105831.998:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 554.073767][ T41] kernel write not supported for file /623/attr/sockcreate (pid: 41 comm: kworker/1:1) [ 554.100707][ T26] audit: type=1326 audit(1747105831.998:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 554.140027][ T26] audit: type=1326 audit(1747105831.998:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 554.181045][ T26] audit: type=1326 audit(1747105831.998:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 554.450801][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1443'. [ 554.493520][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1443'. [ 555.359269][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 555.391546][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 557.137209][ T8995] tipc: New replicast peer: 255.255.255.255 [ 557.143694][ T8995] tipc: Enabled bearer , priority 10 [ 557.302924][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1472'. [ 557.333238][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1472'. [ 557.462905][ T9011] loop9: detected capacity change from 0 to 7 [ 557.479393][ T9011] Dev loop9: unable to read RDB block 7 [ 557.495342][ T9011] loop9: unable to read partition table [ 557.503558][ T9011] loop9: partition table beyond EOD, truncated [ 557.519248][ T9011] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 557.519248][ T9011] U) failed (rc=-5) [ 560.519499][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 560.560237][ T7500] tipc: Node number set to 1284656451 [ 560.952765][ T9043] loop6: detected capacity change from 0 to 1024 [ 560.995411][ T9043] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 561.045562][ T9048] loop8: detected capacity change from 0 to 512 [ 561.085532][ T9048] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 561.152461][ T9048] EXT4-fs (loop8): 1 truncate cleaned up [ 561.162096][ T9048] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 561.227199][ T9058] IPv6: Can't replace route, no match found [ 561.263188][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 562.576337][ T9076] tipc: Enabled bearer , priority 0 [ 562.605012][ T9076] tipc: Disabling bearer [ 562.630747][ T9082] loop4: detected capacity change from 0 to 1024 [ 562.639084][ T9082] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 562.653766][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1501'. [ 562.816087][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.974840][ T9093] loop7: detected capacity change from 0 to 512 [ 563.176510][ T9093] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 563.185964][ T9093] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.817626][ T9102] loop8: detected capacity change from 0 to 764 [ 563.855641][ T9102] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 564.960136][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 565.202251][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1520'. [ 565.203556][ T9121] tipc: Enabled bearer , priority 0 [ 565.257555][ T9121] tipc: Disabling bearer [ 565.295102][ T9125] loop6: detected capacity change from 0 to 2048 [ 565.381034][ T9125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 565.410800][ T9135] loop8: detected capacity change from 0 to 764 [ 565.433553][ T9135] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 565.481793][ T9140] IPv6: Can't replace route, no match found [ 565.521039][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 565.733766][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 565.733782][ T26] audit: type=1326 audit(1747105844.028:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 565.803297][ T26] audit: type=1326 audit(1747105844.028:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 565.860078][ T26] audit: type=1326 audit(1747105844.028:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 565.917215][ T26] audit: type=1326 audit(1747105844.038:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 565.980956][ T26] audit: type=1326 audit(1747105844.038:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.046733][ T26] audit: type=1326 audit(1747105844.038:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.125650][ T26] audit: type=1326 audit(1747105844.098:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.174992][ T26] audit: type=1326 audit(1747105844.098:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.201059][ T9166] IPv6: Can't replace route, no match found [ 566.226084][ T26] audit: type=1326 audit(1747105844.128:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.294626][ T26] audit: type=1326 audit(1747105844.128:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff041d8e969 code=0x7ffc0000 [ 566.409092][ T9174] device pim6reg1 entered promiscuous mode [ 566.419222][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.438693][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.467758][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.481396][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.501257][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.521468][ T7499] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 566.545922][ T7499] hid-generic FFFC:0003:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 566.666296][ T9186] loop7: detected capacity change from 0 to 512 [ 567.620556][ T9197] IPv6: Can't replace route, no match found [ 567.856939][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1559'. [ 568.019082][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 568.242966][ T9233] loop8: detected capacity change from 0 to 512 [ 568.372637][ T9241] loop4: detected capacity change from 0 to 256 [ 568.425525][ T9241] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 568.435631][ T9241] FAT-fs (loop4): Filesystem has been set read-only [ 569.068133][ T9267] loop6: detected capacity change from 0 to 1024 [ 569.075930][ T9267] EXT4-fs: Ignoring removed nobh option [ 569.081656][ T9267] EXT4-fs: Ignoring removed bh option [ 569.088007][ T9267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 569.110122][ T9267] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 569.131108][ T9267] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1580: Allocating blocks 385-513 which overlap fs metadata [ 569.153351][ T9267] EXT4-fs (loop6): pa ffff8880737687e0: logic 16, phys. 129, len 24 [ 569.162136][ T9267] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 569.228170][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 569.408593][ T9276] loop6: detected capacity change from 0 to 512 [ 569.416842][ T9276] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 569.426086][ T9276] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 569.438205][ T9276] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 569.447715][ T9276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 569.455984][ T9276] System zones: 0-2, 18-18, 34-34 [ 569.462822][ T9276] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 569.481529][ T9276] EXT4-fs (loop6): 1 truncate cleaned up [ 569.487356][ T9276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 569.556114][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 570.000529][ T9299] netlink: 'syz.6.1594': attribute type 4 has an invalid length. [ 570.055430][ T9299] netlink: 'syz.6.1594': attribute type 4 has an invalid length. [ 570.341106][ T9313] loop0: detected capacity change from 0 to 512 [ 570.355365][ T9313] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 570.367302][ T9313] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 570.386682][ T9313] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 570.403150][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1602'. [ 570.415143][ T9313] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 570.429747][ T9313] System zones: 0-2, 18-18, 34-34 [ 570.441747][ T9313] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 570.481430][ T9313] EXT4-fs (loop0): 1 truncate cleaned up [ 570.508035][ T9313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 570.600119][ T9325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'. [ 570.629627][ T9324] loop6: detected capacity change from 0 to 1024 [ 570.652086][ T9324] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.686393][ T9326] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.1601: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 570.912761][ T9324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 570.915567][ T9333] loop7: detected capacity change from 0 to 512 [ 570.997540][ T9333] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 571.016587][ T9333] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.028618][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 571.162328][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 571.172034][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 571.172049][ T26] audit: type=1800 audit(1747105849.468:1717): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1601" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 571.300457][ T9340] loop9: detected capacity change from 0 to 7 [ 571.319539][ T9340] Dev loop9: unable to read RDB block 7 [ 571.336507][ T9340] loop9: unable to read partition table [ 571.352902][ T9340] loop9: partition table beyond EOD, truncated [ 571.368199][ T9340] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 571.368199][ T9340] U) failed (rc=-5) [ 571.434812][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 571.690679][ T9354] loop8: detected capacity change from 0 to 512 [ 571.733105][ T9354] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 571.752577][ T9354] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.848818][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 571.876234][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 571.914571][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.938451][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.947854][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.960601][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.968514][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.980047][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 571.989002][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.013672][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.030395][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.047226][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.062931][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.084587][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.097894][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.109824][ T41] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 572.128690][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 572.137041][ T41] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 572.139344][ T9371] loop7: detected capacity change from 0 to 512 [ 572.183018][ T9371] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.202454][ T9371] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 572.235100][ T9371] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 572.275484][ T9371] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 572.293903][ T9371] System zones: 0-2, 18-18, 34-34 [ 572.304141][ T9371] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 572.327743][ T9376] loop4: detected capacity change from 0 to 1024 [ 572.331015][ T9371] EXT4-fs (loop7): 1 truncate cleaned up [ 572.343469][ T9371] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 572.399513][ T9376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 572.472791][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1624'. [ 572.700864][ T9387] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 3: comm syz.7.1624: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 572.732359][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 572.979698][ T26] audit: type=1800 audit(1747105851.278:1718): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1624" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 573.189309][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 573.414114][ T9406] loop8: detected capacity change from 0 to 1024 [ 573.446491][ T9406] EXT4-fs: inline encryption not supported [ 573.455972][ T9406] EXT4-fs: Ignoring removed bh option [ 573.461971][ T9406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 573.508074][ T9406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 573.563714][ T9418] loop6: detected capacity change from 0 to 764 [ 573.572964][ T9418] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 573.664689][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 573.893520][ T9434] 9pnet_fd: Insufficient options for proto=fd [ 574.090061][ T9444] loop8: detected capacity change from 0 to 1024 [ 574.116151][ T9444] EXT4-fs: Ignoring removed orlov option [ 574.160925][ T9444] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 574.233724][ T9448] loop7: detected capacity change from 0 to 764 [ 574.272936][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 574.291205][ T9452] loop6: detected capacity change from 0 to 512 [ 574.298568][ T9452] EXT4-fs: Ignoring removed i_version option [ 574.311819][ T9448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 574.424572][ T9452] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 574.648551][ T9452] EXT4-fs (loop6): 1 truncate cleaned up [ 574.654971][ T9452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 574.695147][ T9452] EXT4-fs (loop6): shut down requested (0) [ 574.773821][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 574.793135][ T26] audit: type=1107 audit(1747105853.088:1719): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 574.903107][ T9471] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 575.134930][ T9482] loop8: detected capacity change from 0 to 764 [ 575.147556][ T9482] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 575.683104][ T9505] IPv6: Can't replace route, no match found [ 575.960794][ T26] audit: type=1326 audit(1747105854.258:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.054218][ T26] audit: type=1326 audit(1747105854.258:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.301523][ T26] audit: type=1326 audit(1747105854.258:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.340632][ T26] audit: type=1326 audit(1747105854.258:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.405154][ T26] audit: type=1326 audit(1747105854.258:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.435489][ T26] audit: type=1326 audit(1747105854.258:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.473595][ T26] audit: type=1326 audit(1747105854.258:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.498823][ T26] audit: type=1326 audit(1747105854.258:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 576.522661][ T26] audit: type=1326 audit(1747105854.258:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 577.427718][ T26] audit: type=1326 audit(1747105854.258:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 577.482558][ T26] audit: type=1326 audit(1747105854.258:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 577.585574][ T26] audit: type=1326 audit(1747105854.258:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9e58e969 code=0x7ffc0000 [ 577.818692][ T9547] loop4: detected capacity change from 0 to 1764 [ 578.068690][ T9554] sd 0:0:1:0: device reset [ 578.400927][ T9564] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 578.821430][ T9573] loop8: detected capacity change from 0 to 512 [ 578.865322][ T9573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 578.895273][ T9573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.943697][ T9573] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1707: invalid block [ 578.968102][ T9573] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1707: invalid indirect mapped block 4294967295 (level 1) [ 579.035424][ T9573] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1707: invalid indirect mapped block 4294967295 (level 1) [ 579.066232][ T9573] EXT4-fs (loop8): 2 truncates cleaned up [ 579.072209][ T9573] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 579.111619][ T9573] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.8.1707: path /75/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 579.210086][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 579.763361][ T9596] loop6: detected capacity change from 0 to 764 [ 579.777890][ T9596] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 580.021305][ T9613] loop8: detected capacity change from 0 to 2048 [ 580.036072][ T9613] ext4: Unknown parameter 'pcr' [ 580.119232][ T9617] loop6: detected capacity change from 0 to 512 [ 580.391401][ T9617] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 580.401884][ T9617] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.512178][ T9624] loop7: detected capacity change from 0 to 512 [ 581.565021][ T9624] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 581.598814][ T9624] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.954305][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 582.101461][ T9638] loop8: detected capacity change from 0 to 512 [ 582.250012][ T9642] loop0: detected capacity change from 0 to 764 [ 582.259908][ T9642] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 582.451061][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 582.871896][ T9661] tipc: Enabled bearer , priority 0 [ 582.902332][ T9661] tipc: Disabling bearer [ 583.127164][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 583.127180][ T26] audit: type=1326 audit(1747105861.428:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 583.162964][ T9676] loop7: detected capacity change from 0 to 764 [ 583.164556][ T9679] loop0: detected capacity change from 0 to 512 [ 583.181402][ T9676] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 583.193033][ T9677] loop4: detected capacity change from 0 to 512 [ 583.200637][ T26] audit: type=1326 audit(1747105861.458:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 583.227334][ T9677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 583.257721][ T26] audit: type=1326 audit(1747105861.458:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 583.259366][ T9679] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.298136][ T9677] EXT4-fs (loop4): 1 truncate cleaned up [ 583.305380][ T9679] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 583.318141][ T9677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 583.347844][ T26] audit: type=1326 audit(1747105861.468:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 583.362226][ T9679] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 583.370348][ T26] audit: type=1326 audit(1747105861.468:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f362f990887 code=0x7ffc0000 [ 583.404381][ T26] audit: type=1326 audit(1747105861.468:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f362f9907fc code=0x7ffc0000 [ 583.426825][ T26] audit: type=1326 audit(1747105861.468:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f362f990734 code=0x7ffc0000 [ 583.449498][ T26] audit: type=1326 audit(1747105861.468:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f362f990734 code=0x7ffc0000 [ 583.477485][ T9679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 583.477857][ T26] audit: type=1326 audit(1747105861.468:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f362f98d5ca code=0x7ffc0000 [ 583.511938][ T9679] System zones: 0-2, 18-18, 34-34 [ 583.517180][ T26] audit: type=1326 audit(1747105861.468:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 583.548244][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 583.562700][ T9679] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 583.583381][ T9677] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.603923][ T9679] EXT4-fs (loop0): 1 truncate cleaned up [ 583.614274][ T9679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 583.672344][ T9677] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.698167][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 583.771027][ T9677] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.851219][ T9677] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.101435][ T9677] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.151946][ T9677] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.199186][ T9677] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.228950][ T9677] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.263206][ T9702] tipc: Enabled bearer , priority 0 [ 584.278333][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 584.279163][ T9702] tipc: Disabling bearer [ 585.637674][ T9717] Cannot find add_set index 0 as target [ 585.651012][ T9716] loop4: detected capacity change from 0 to 764 [ 585.717800][ T9716] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 586.500369][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 586.597038][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1768'. [ 588.148006][ T9767] loop6: detected capacity change from 0 to 512 [ 588.166544][ T9767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 588.195502][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 588.195518][ T26] audit: type=1326 audit(1747105866.498:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.242763][ T9767] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 588.242790][ T26] audit: type=1326 audit(1747105866.498:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.273639][ T26] audit: type=1326 audit(1747105866.528:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.278817][ T9767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 588.296365][ T26] audit: type=1326 audit(1747105866.528:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.327037][ T26] audit: type=1326 audit(1747105866.528:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.349677][ T26] audit: type=1326 audit(1747105866.528:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.372024][ T26] audit: type=1326 audit(1747105866.528:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.394545][ T26] audit: type=1326 audit(1747105866.528:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.394565][ T9767] System zones: 0-1 [ 588.417193][ T26] audit: type=1326 audit(1747105866.528:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.424029][ T26] audit: type=1326 audit(1747105866.718:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.8.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862d8e969 code=0x7ffc0000 [ 588.506486][ T9767] , 15-15, 18-18, 34-34 [ 588.512085][ T9767] EXT4-fs (loop6): orphan cleanup on readonly fs [ 588.519957][ T9767] EXT4-fs warning (device loop6): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 588.635449][ T9767] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 588.644079][ T9779] tipc: Enabled bearer , priority 0 [ 588.662470][ T9767] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1783: bg 0: block 40: padding at end of block bitmap is not set [ 588.684262][ T9779] tipc: Disabling bearer [ 588.694702][ T9767] EXT4-fs (loop6): Remounting filesystem read-only [ 588.719277][ T9767] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 588.731230][ T9767] EXT4-fs (loop6): Remounting filesystem read-only [ 588.743525][ T9767] EXT4-fs (loop6): 1 truncate cleaned up [ 588.774759][ T9767] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 588.901796][ T9767] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1783: bad symlink. [ 588.989906][ T9785] loop8: detected capacity change from 0 to 8192 [ 589.005030][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 589.100328][ T8288] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 589.123706][ T8288] FAT-fs (loop8): Filesystem has been set read-only [ 589.363147][ T9807] loop4: detected capacity change from 0 to 512 [ 589.380788][ T9807] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 589.393782][ T9807] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 589.404200][ T9807] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 589.413739][ T9807] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 589.422021][ T9807] System zones: 0-2, 18-18, 34-34 [ 589.434321][ T9807] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 589.449989][ T9807] EXT4-fs (loop4): 1 truncate cleaned up [ 589.455759][ T9807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 589.536736][ T9815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1799'. [ 589.751977][ T9818] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1799: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 590.149995][ T9827] loop8: detected capacity change from 0 to 8192 [ 590.283188][ T8288] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 590.304352][ T8288] FAT-fs (loop8): Filesystem has been set read-only [ 590.600900][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 591.949622][ T9866] loop4: detected capacity change from 0 to 1024 [ 591.963180][ T9866] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 593.146947][ T9888] loop6: detected capacity change from 0 to 512 [ 593.175052][ T9888] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.194618][ T9888] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 593.229033][ T9888] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 593.251997][ T9888] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 593.288899][ T9888] System zones: 0-2, 18-18, 34-34 [ 593.322183][ T9888] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 593.346486][ T9888] EXT4-fs (loop6): 1 truncate cleaned up [ 593.369239][ T9888] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 593.429889][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 593.429903][ T26] audit: type=1800 audit(1747105871.728:1861): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1831" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 593.505276][ T26] audit: type=1800 audit(1747105871.748:1862): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1831" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 593.550909][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 594.850090][ T9926] IPv6: Can't replace route, no match found [ 595.137788][ T9937] loop7: detected capacity change from 0 to 512 [ 595.169555][ T9937] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.180129][ T9937] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 595.299096][ T9937] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 595.321016][ T9937] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 595.375391][ T9937] System zones: 0-2, 18-18, 34-34 [ 595.392240][ T9937] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 595.453527][ T9937] EXT4-fs (loop7): 1 truncate cleaned up [ 595.459289][ T9937] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 595.491741][ T26] audit: type=1800 audit(1747105873.788:1863): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1850" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 595.529215][ T9949] loop4: detected capacity change from 0 to 1024 [ 595.533114][ T26] audit: type=1800 audit(1747105873.808:1864): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1850" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 595.578614][ T9949] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 595.610749][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 595.677550][ T9955] tun0: tun_chr_ioctl cmd 1074025692 [ 596.149346][ T9972] loop7: detected capacity change from 0 to 512 [ 596.159772][ T9972] EXT4-fs: Ignoring removed i_version option [ 596.180857][ T9972] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 596.214928][ T9972] EXT4-fs (loop7): 1 truncate cleaned up [ 596.232252][ T9972] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 596.284395][ T26] audit: type=1800 audit(1747105874.578:1865): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1867" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 596.289890][ T7497] kernel write not supported for file /254/attr/sockcreate (pid: 7497 comm: kworker/0:9) [ 596.406889][ T9986] loop4: detected capacity change from 0 to 1024 [ 596.414802][ T9986] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 596.439438][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 596.623347][ T9995] loop4: detected capacity change from 0 to 512 [ 596.631618][ T9995] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 596.645540][ T9995] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 596.660479][ T9995] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 596.671182][ T9995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 596.679459][ T9995] System zones: 0-2, 18-18, 34-34 [ 596.687486][ T9995] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 596.720686][ T9995] EXT4-fs (loop4): 1 truncate cleaned up [ 596.727043][ T9995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 596.797932][T10001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1875'. [ 596.852390][T10004] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1875: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 597.360762][ T41] kernel write not supported for file /845/attr/sockcreate (pid: 41 comm: kworker/1:1) [ 597.516816][T10021] loop6: detected capacity change from 0 to 1024 [ 597.535941][T10021] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 597.564222][ T26] audit: type=1800 audit(1747105875.858:1866): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1875" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 597.591956][T10023] loop8: detected capacity change from 0 to 512 [ 597.649413][T10023] EXT4-fs: Ignoring removed i_version option [ 597.663904][T10023] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 597.679698][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 597.720349][T10023] EXT4-fs (loop8): 1 truncate cleaned up [ 597.726177][T10023] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 597.745885][ T26] audit: type=1800 audit(1747105876.048:1867): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1886" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 597.790199][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 597.914427][T10034] loop8: detected capacity change from 0 to 1024 [ 597.929439][T10034] EXT4-fs: Ignoring removed nobh option [ 597.942057][T10034] EXT4-fs: Ignoring removed bh option [ 597.956861][T10034] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 598.017568][T10034] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 598.050918][T10034] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.1891: Allocating blocks 385-513 which overlap fs metadata [ 598.060993][ T4297] kernel write not supported for file /1087/attr/sockcreate (pid: 4297 comm: kworker/1:3) [ 598.095811][T10034] EXT4-fs (loop8): pa ffff888073661ee0: logic 16, phys. 129, len 24 [ 598.103963][T10034] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 598.192407][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 598.312484][T10056] loop7: detected capacity change from 0 to 512 [ 598.323026][T10056] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.338628][T10056] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 598.362633][T10056] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 598.380589][T10056] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 598.394585][T10056] System zones: 0-2, 18-18, 34-34 [ 598.418952][T10056] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 598.428744][T10061] loop0: detected capacity change from 0 to 512 [ 598.440751][T10061] EXT4-fs: Ignoring removed i_version option [ 598.447667][T10061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 598.458278][T10056] EXT4-fs (loop7): 1 truncate cleaned up [ 598.464191][T10056] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 598.489899][T10061] EXT4-fs (loop0): 1 truncate cleaned up [ 598.503822][T10061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 598.527392][ T26] audit: type=1800 audit(1747105876.828:1868): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1902" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 598.568910][T10063] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1900'. [ 598.631425][T10067] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 3: comm syz.7.1900: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 598.838970][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 598.921890][T10074] device macsec0 entered promiscuous mode [ 599.069077][ T7499] kernel write not supported for file /855/attr/sockcreate (pid: 7499 comm: kworker/0:11) [ 599.163034][ T26] audit: type=1800 audit(1747105877.458:1869): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1900" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 599.196482][T10083] loop8: detected capacity change from 0 to 1024 [ 599.203941][T10083] EXT4-fs: Ignoring removed nobh option [ 599.229727][T10083] EXT4-fs: Ignoring removed bh option [ 599.245898][T10083] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 599.303384][T10083] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 599.335128][T10091] IPv6: Can't replace route, no match found [ 599.336599][T10083] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.1910: Allocating blocks 385-513 which overlap fs metadata [ 599.418547][T10083] EXT4-fs (loop8): pa ffff888073661e00: logic 16, phys. 129, len 24 [ 599.426719][T10083] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 599.443190][ T7795] EXT4-fs (loop7): unmounting filesystem. [ 599.489301][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 599.835038][T10109] 9pnet_fd: Insufficient options for proto=fd [ 600.743405][T10119] IPv6: Can't replace route, no match found [ 600.919230][T10129] loop8: detected capacity change from 0 to 512 [ 600.941591][T10127] loop4: detected capacity change from 0 to 512 [ 600.989307][T10127] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.008546][T10127] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 601.040094][T10127] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 601.067816][T10127] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 601.079799][T10127] System zones: 0-2, 18-18, 34-34 [ 601.086639][T10127] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 601.106249][T10127] EXT4-fs (loop4): 1 truncate cleaned up [ 601.112094][T10127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 601.252621][T10141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1927'. [ 601.273677][T10144] loop8: detected capacity change from 0 to 512 [ 601.292229][T10144] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.321349][T10144] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 601.400967][T10149] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1927: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 601.504835][T10144] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 601.522155][T10144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 601.554266][T10144] System zones: 0-2, 18-18, 34-34 [ 601.573874][T10144] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 601.630599][T10144] EXT4-fs (loop8): 1 truncate cleaned up [ 601.646858][T10144] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 601.710249][ T26] audit: type=1800 audit(1747105880.008:1870): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1934" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 601.776854][ T26] audit: type=1800 audit(1747105880.048:1871): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1934" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 601.825453][ T26] audit: type=1800 audit(1747105880.078:1872): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1927" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 601.918267][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 602.039577][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 603.337849][T10175] loop0: detected capacity change from 0 to 512 [ 604.013416][T10189] loop4: detected capacity change from 0 to 8192 [ 604.174252][ T4262] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 604.196080][ T4262] FAT-fs (loop4): Filesystem has been set read-only [ 604.462147][T10210] loop8: detected capacity change from 0 to 512 [ 605.226884][T10225] loop7: detected capacity change from 0 to 8192 [ 605.325010][ T7795] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 605.365213][ T7795] FAT-fs (loop7): Filesystem has been set read-only [ 605.577565][T10242] loop6: detected capacity change from 0 to 512 [ 605.920392][ T26] audit: type=1326 audit(1747105884.218:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.424761][ T26] audit: type=1326 audit(1747105884.248:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.692235][ T26] audit: type=1326 audit(1747105884.248:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.815244][ T26] audit: type=1326 audit(1747105884.248:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.875764][ T26] audit: type=1326 audit(1747105884.248:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.889389][T10265] loop6: detected capacity change from 0 to 512 [ 606.899160][T10259] device pim6reg1 entered promiscuous mode [ 606.933848][T10265] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 606.945576][ T26] audit: type=1326 audit(1747105884.248:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 606.963120][T10265] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 607.009490][T10265] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 607.015564][ T26] audit: type=1326 audit(1747105884.528:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 607.026541][T10265] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 607.052441][T10265] System zones: 0-2, 18-18, 34-34 [ 607.070450][T10265] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 607.081581][ T26] audit: type=1326 audit(1747105884.538:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 607.112357][T10265] EXT4-fs (loop6): 1 truncate cleaned up [ 607.118353][T10265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 607.182122][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 607.198847][ T26] audit: type=1326 audit(1747105884.648:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f362f9c1225 code=0x7ffc0000 [ 607.285304][ T26] audit: type=1326 audit(1747105884.908:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f362f98e969 code=0x7ffc0000 [ 607.401862][T10281] loop8: detected capacity change from 0 to 512 [ 607.505574][T10285] loop7: detected capacity change from 0 to 1024 [ 607.525658][T10285] EXT4-fs (loop7): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 607.843746][T10299] loop4: detected capacity change from 0 to 512 [ 607.856118][T10299] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 607.868850][T10299] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 607.880549][T10299] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 607.893409][T10299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 607.904325][T10299] System zones: 0-2, 18-18, 34-34 [ 607.917786][T10299] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 607.936008][T10299] EXT4-fs (loop4): 1 truncate cleaned up [ 607.951268][T10299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 608.075533][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 608.307356][ T4340] kernel write not supported for file /902/attr/sockcreate (pid: 4340 comm: kworker/1:8) [ 608.370384][T10317] loop4: detected capacity change from 0 to 512 [ 608.487980][T10321] loop6: detected capacity change from 0 to 1024 [ 608.496491][T10321] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 608.736351][T10330] loop6: detected capacity change from 0 to 512 [ 608.744373][T10330] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.757792][T10330] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 608.779402][T10330] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 608.809679][T10330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 608.832021][T10330] System zones: 0-2, 18-18, 34-34 [ 608.857820][T10330] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 608.900225][T10330] EXT4-fs (loop6): 1 truncate cleaned up [ 608.921039][T10330] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 609.070789][ T5411] EXT4-fs (loop6): unmounting filesystem. [ 609.156188][ T4297] kernel write not supported for file /909/attr/sockcreate (pid: 4297 comm: kworker/1:3) [ 609.334398][T10353] loop4: detected capacity change from 0 to 1024 [ 609.364415][T10353] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 609.894430][T10371] loop8: detected capacity change from 0 to 512 [ 609.911601][T10371] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.926634][T10371] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 609.940807][T10371] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 609.954472][T10371] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 609.962879][T10371] System zones: 0-2, 18-18, 34-34 [ 610.046099][T10371] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 610.143914][T10371] EXT4-fs (loop8): 1 truncate cleaned up [ 610.149717][T10371] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 610.289112][ T8288] EXT4-fs (loop8): unmounting filesystem. [ 610.624941][ T7498] kernel write not supported for file /334/attr/sockcreate (pid: 7498 comm: kworker/0:10) [ 611.794364][T10390] loop6: detected capacity change from 0 to 1024 [ 611.806333][T10390] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 612.222879][T10395] loop8: detected capacity change from 0 to 8192 [ 612.278592][ T8288] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 612.289599][ T8288] FAT-fs (loop8): Filesystem has been set read-only [ 612.790004][T10403] loop4: detected capacity change from 0 to 512 [ 612.807134][T10403] EXT4-fs: Ignoring removed i_version option [ 612.813857][T10403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 612.836954][T10403] EXT4-fs (loop4): 1 truncate cleaned up [ 612.842804][T10403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 612.875892][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 612.875908][ T26] audit: type=1800 audit(1747105891.178:1894): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2038" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 612.968651][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 616.310107][T10453] device veth1_macvtap left promiscuous mode [ 616.584296][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.760967][T10476] loop6: detected capacity change from 0 to 1024 [ 616.778556][T10476] EXT4-fs (loop6): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 617.256036][T10492] 9pnet_fd: Insufficient options for proto=fd [ 617.523634][T10505] loop8: detected capacity change from 0 to 1024 [ 617.541208][T10505] EXT4-fs (loop8): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 618.055279][T10524] [ 618.058230][T10524] ============================= [ 618.063126][T10524] WARNING: suspicious RCU usage [ 618.068203][T10524] 6.1.138-syzkaller #0 Not tainted [ 618.073350][T10524] ----------------------------- [ 618.078701][T10524] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 618.087282][T10524] [ 618.087282][T10524] other info that might help us debug this: [ 618.087282][T10524] [ 618.097575][T10524] [ 618.097575][T10524] rcu_scheduler_active = 2, debug_locks = 1 [ 618.105956][T10524] 1 lock held by syz.7.2085/10524: [ 618.111089][T10524] #0: ffffffff8c92aae0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 618.121396][T10524] [ 618.121396][T10524] stack backtrace: [ 618.127377][T10524] CPU: 0 PID: 10524 Comm: syz.7.2085 Not tainted 6.1.138-syzkaller #0 [ 618.135560][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 618.145817][T10524] Call Trace: [ 618.149103][T10524] [ 618.152043][T10524] dump_stack_lvl+0x168/0x22e [ 618.156768][T10524] ? show_regs_print_info+0x12/0x12 [ 618.161980][T10524] ? load_image+0x3b0/0x3b0 [ 618.166497][T10524] lockdep_rcu_suspicious+0x1dd/0x300 [ 618.171888][T10524] get_callchain_entry+0x2a5/0x3b0 [ 618.177017][T10524] get_perf_callchain+0x9f/0x480 [ 618.181969][T10524] ? put_callchain_entry+0xb0/0xb0 [ 618.187101][T10524] ? plist_add+0x3d4/0x480 [ 618.191530][T10524] ? verify_lock_unused+0x140/0x140 [ 618.196740][T10524] __bpf_get_stack+0x2ce/0x4f0 [ 618.201560][T10524] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 618.207726][T10524] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 618.213374][T10524] bpf_get_stack_raw_tp+0x175/0x1d0 [ 618.218587][T10524] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 618.224048][T10524] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 618.229432][T10524] bpf_prog_test_run_syscall+0x30d/0x490 [ 618.235076][T10524] ? sock_gen_cookie+0x60/0x60 [ 618.239855][T10524] ? sock_gen_cookie+0x60/0x60 [ 618.244627][T10524] bpf_prog_test_run+0x31e/0x390 [ 618.249586][T10524] __sys_bpf+0x593/0x6d0 [ 618.253841][T10524] ? bpf_link_show_fdinfo+0x310/0x310 [ 618.259237][T10524] ? lock_chain_count+0x20/0x20 [ 618.264108][T10524] __x64_sys_bpf+0x78/0x90 [ 618.268534][T10524] do_syscall_64+0x4c/0xa0 [ 618.272960][T10524] ? clear_bhb_loop+0x45/0xa0 [ 618.277644][T10524] ? clear_bhb_loop+0x45/0xa0 [ 618.282336][T10524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.288245][T10524] RIP: 0033:0x7f37d0d8e969 [ 618.292674][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.312294][T10524] RSP: 002b:00007f37d1bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.320715][T10524] RAX: ffffffffffffffda RBX: 00007f37d0fb5fa0 RCX: 00007f37d0d8e969 [ 618.328692][T10524] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 618.336669][T10524] RBP: 00007f37d0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 618.344640][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.352618][T10524] R13: 0000000000000000 R14: 00007f37d0fb5fa0 R15: 00007ffeefe51518 [ 618.360615][T10524] [ 618.460285][T10522] loop8: detected capacity change from 0 to 8192 [ 618.540029][ T8288] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 618.552883][ T8288] FAT-fs (loop8): Filesystem has been set read-only [ 621.195489][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 624.236749][ T1276] ieee802154 phy0 wpan0: encryption failed: -22