last executing test programs: 43m31.869661126s ago: executing program 32 (id=2821): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = accept(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @private}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r6, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 31m9.337857336s ago: executing program 33 (id=4719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 25m16.693579581s ago: executing program 34 (id=5624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a80)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r4}) 24m19.793582238s ago: executing program 35 (id=5783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0xfffffff2) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x355b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @buffer={0xfb, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x0, 0x0}) 24m18.025200366s ago: executing program 1 (id=5789): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 24m17.82936039s ago: executing program 1 (id=5790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 24m16.752566177s ago: executing program 1 (id=5791): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 24m16.59324104s ago: executing program 1 (id=5792): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) 24m15.385455509s ago: executing program 3 (id=5795): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x40400) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 24m13.849748443s ago: executing program 3 (id=5798): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') pread64(r1, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) 24m13.385560961s ago: executing program 3 (id=5799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 24m13.211862954s ago: executing program 3 (id=5800): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 24m12.961318598s ago: executing program 3 (id=5801): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 24m12.623627953s ago: executing program 6 (id=5802): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x4, 0xa1, 0x46}, 0x10) 24m12.469467816s ago: executing program 6 (id=5803): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 24m11.720370538s ago: executing program 1 (id=5804): r0 = getpid() setpriority(0x2, r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=[@uexit={0x0, 0x18, 0x10001}, @code={0x1, 0x60, {"c4e22daae548b800980000000000000f23d00f21f835300000070f23f842c12f120fc72ab92a030000b862250000ba000000000f3066b8ab008ec86643d9faccb8010000000f01d966b8ee000f00d8"}}, @cpuid={0x2, 0x18, {0xdf7, 0x3}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x9, 0x1000}}, @cpuid={0x2, 0x18, {0x2}}, @cpuid={0x2, 0x18, {0x50000, 0x4}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x64, {"64366fb9a7030000b8f7ffffffbaffffff7f0f3066b813000f00d036f344ded0430fc774e60067656765f30fc77200663666440f38805b4b66b846008ec066baf80cb8661d5680ef66bafc0cb00fee0f005b00"}}, @uexit={0x0, 0x18}, @code={0x1, 0x46, {"66b8fd000f00d866b861000f00d0410f01cff20f07f2400f38f07000c443cd42ebb299420f01cf8fa9b094b500000000c4e2e94502"}}, @cpuid={0x2, 0x18, {0x4, 0xdc}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x10001}, @cpuid={0x2, 0x18, {0x6, 0xff}}, @code={0x1, 0x56, {"8f09609a82dfb5bf1a0f01c4450f788f008000006736460f2280440f20c0350c000000440f22c03e410fc77248c4a1c0563066b80b010f00d00fc79daa6f0000470f017205"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0x45d}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x62, {"66b83d018ed0c744240002000000c7442402ee000000ff1c24b9800000c00f3235004000000f30410f070f0766baf80cb8122ce885ef66bafc0c66ed430f009f4236ffff40abc4435902d412470fc5f64a"}}, @cpuid={0x2, 0x18, {0xa, 0x1}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @uexit={0x0, 0x18, 0x6}], 0x3a2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x1}, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x0) 24m11.349528284s ago: executing program 36 (id=5804): r0 = getpid() setpriority(0x2, r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=[@uexit={0x0, 0x18, 0x10001}, @code={0x1, 0x60, {"c4e22daae548b800980000000000000f23d00f21f835300000070f23f842c12f120fc72ab92a030000b862250000ba000000000f3066b8ab008ec86643d9faccb8010000000f01d966b8ee000f00d8"}}, @cpuid={0x2, 0x18, {0xdf7, 0x3}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x9, 0x1000}}, @cpuid={0x2, 0x18, {0x2}}, @cpuid={0x2, 0x18, {0x50000, 0x4}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x64, {"64366fb9a7030000b8f7ffffffbaffffff7f0f3066b813000f00d036f344ded0430fc774e60067656765f30fc77200663666440f38805b4b66b846008ec066baf80cb8661d5680ef66bafc0cb00fee0f005b00"}}, @uexit={0x0, 0x18}, @code={0x1, 0x46, {"66b8fd000f00d866b861000f00d0410f01cff20f07f2400f38f07000c443cd42ebb299420f01cf8fa9b094b500000000c4e2e94502"}}, @cpuid={0x2, 0x18, {0x4, 0xdc}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x10001}, @cpuid={0x2, 0x18, {0x6, 0xff}}, @code={0x1, 0x56, {"8f09609a82dfb5bf1a0f01c4450f788f008000006736460f2280440f20c0350c000000440f22c03e410fc77248c4a1c0563066b80b010f00d00fc79daa6f0000470f017205"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0x45d}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x62, {"66b83d018ed0c744240002000000c7442402ee000000ff1c24b9800000c00f3235004000000f30410f070f0766baf80cb8122ce885ef66bafc0c66ed430f009f4236ffff40abc4435902d412470fc5f64a"}}, @cpuid={0x2, 0x18, {0xa, 0x1}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @uexit={0x0, 0x18, 0x6}], 0x3a2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x1}, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x0) 24m11.297514615s ago: executing program 3 (id=5806): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 24m11.127321608s ago: executing program 37 (id=5806): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 24m9.376491556s ago: executing program 6 (id=5808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 24m9.11336358s ago: executing program 6 (id=5809): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 24m8.890989533s ago: executing program 6 (id=5810): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x40400) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) syz_io_uring_setup(0x80000497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x2, 0xd0}, &(0x7f0000000000), &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 24m8.381554672s ago: executing program 6 (id=5812): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x12, r1, 0x0) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 24m7.572336025s ago: executing program 38 (id=5812): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x12, r1, 0x0) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 20m56.075184782s ago: executing program 0 (id=6386): r0 = io_uring_setup(0x194e, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 20m55.801102726s ago: executing program 0 (id=6390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xdddd1000, 0x10e000}) 20m54.551539596s ago: executing program 0 (id=6395): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0x3) 20m54.388464549s ago: executing program 0 (id=6396): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 20m52.941578482s ago: executing program 0 (id=6400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 20m52.837838774s ago: executing program 5 (id=6402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xf2e7}, 0x8) 20m52.569433019s ago: executing program 5 (id=6405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xdddd1000, 0x10e000}) 20m51.460942286s ago: executing program 0 (id=6407): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 20m51.22126523s ago: executing program 5 (id=6408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b80), 0xa2800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20m50.823377876s ago: executing program 39 (id=6407): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 20m50.798015146s ago: executing program 5 (id=6411): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 20m49.530410057s ago: executing program 5 (id=6417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x0, 0x2}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) sync() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2804, 0xd59f83, 0x19f2, 0x42, 0xdd7, 0x3, 0x9, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x10, {0x7f, 0xffffffff}, 0xd0, 0x9}}) 20m47.379954342s ago: executing program 5 (id=6426): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 20m46.102317293s ago: executing program 40 (id=6426): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 16.957972792s ago: executing program 8 (id=10939): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) unshare(0x400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000500)}, 0x10) 16.956519862s ago: executing program 8 (id=10942): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [{0x20, 'ext4\x00'}, {0x20, '#! '}, {}], 0xa, "7d34af1b05efb08bb847ecf6ed3c95543461e8b5897b0a61571c497d60bc830cc39939"}, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r2, 0x8, 0x4000, 0x4000) 16.955685422s ago: executing program 8 (id=10947): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0xa, &(0x7f0000000340)={[{@clone_children}]}) 16.679118206s ago: executing program 8 (id=10950): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x23, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1d3) 15.7919461s ago: executing program 8 (id=10956): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) unshare(0x400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000500)}, 0x10) 10.825450836s ago: executing program 8 (id=10972): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) socket$inet6(0xa, 0x1, 0x0) unshare(0x400) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x6, 0x900}}) 10.496941611s ago: executing program 41 (id=10972): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) socket$inet6(0xa, 0x1, 0x0) unshare(0x400) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x6, 0x900}}) 5.605073045s ago: executing program 7 (id=11003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 5.502939637s ago: executing program 7 (id=11004): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getrlimit(0x2, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410484, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") 4.065537809s ago: executing program 4 (id=11011): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0xa00, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) 3.731479104s ago: executing program 4 (id=11015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x40}}, 0x0) 3.525485547s ago: executing program 4 (id=11017): set_mempolicy(0x4000, &(0x7f0000000000)=0x3a3713a1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) keyctl$read(0xb, r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018"], 0x54}}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000002c0)) 3.27945186s ago: executing program 4 (id=11019): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) 3.093442223s ago: executing program 4 (id=11021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) 2.784624818s ago: executing program 4 (id=11023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.449592173s ago: executing program 2 (id=11027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 2.092865069s ago: executing program 2 (id=11029): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x400) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000500)}, 0x10) 1.938045861s ago: executing program 2 (id=11030): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) 1.721219825s ago: executing program 2 (id=11033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.577601156s ago: executing program 9 (id=11034): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.397417689s ago: executing program 2 (id=11035): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.218535502s ago: executing program 9 (id=11036): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [{0x20, 'ext4\x00'}, {}, {0x20, '#! '}], 0xa, "7d34af1b05efb08bb847ecf6ed3c95543461e8b5897b0a61571c497d60bc830cc39939"}, 0x39) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r2, 0x8, 0x4000, 0x4000) 1.207978042s ago: executing program 2 (id=11037): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 754.415719ms ago: executing program 7 (id=11038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18f90000000000001a1811000000000200000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 753.620039ms ago: executing program 9 (id=11039): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x400) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000500)}, 0x10) 373.522175ms ago: executing program 9 (id=11040): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(0xffffffffffffffff, 0x1) unshare(0x20800) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq\x01\x00\x00\x00\x00\x00\x00\x00\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xe2$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 373.324535ms ago: executing program 7 (id=11041): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES32=r1], 0x44}}, 0x0) 348.923505ms ago: executing program 1 (id=10973): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 184.476028ms ago: executing program 7 (id=11042): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) 125.595068ms ago: executing program 9 (id=11043): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(r0) 26.98673ms ago: executing program 9 (id=11044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e6430"], 0x2c}}, 0x40006) 0s ago: executing program 7 (id=11045): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): eneric 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.724304][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.744088][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.759970][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.767491][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.775353][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.789837][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.797712][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.805672][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.819578][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.827104][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.834949][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.842691][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.850517][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.863421][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.874599][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.885934][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.895069][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.907283][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.916175][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.927180][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.936592][T32615] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 3425.969913][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3425.993576][T32615] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3426.535673][ T4839] fido_id[4839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3426.799900][ T4853] loop7: detected capacity change from 0 to 512 [ 3427.159257][ T4853] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3427.169043][ T4853] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3427.642098][ T4858] loop8: detected capacity change from 0 to 512 [ 3427.771432][ T4858] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3427.859987][ T4858] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3428.149763][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 3428.149781][ T26] audit: type=1800 audit(2000001562.451:1205): pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10059" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 3428.337041][ T26] audit: type=1800 audit(2000001562.501:1206): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10059" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 3428.476374][ T26] audit: type=1326 audit(2000001562.672:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3428.603310][ T26] audit: type=1326 audit(2000001562.672:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3428.754412][ T26] audit: type=1326 audit(2000001562.672:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b82d8d290 code=0x7ffc0000 [ 3428.786309][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3428.794009][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3428.928553][ T26] audit: type=1326 audit(2000001562.672:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3429.020801][ T4882] syz.4.10068[4882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3429.020938][ T4882] syz.4.10068[4882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3429.043470][ T26] audit: type=1326 audit(2000001562.672:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3429.045202][ T4881] netem: change failed [ 3429.098126][ T4882] loop4: detected capacity change from 0 to 164 [ 3429.101072][ T26] audit: type=1326 audit(2000001562.682:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3429.149681][ T4882] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 3429.188471][ T26] audit: type=1326 audit(2000001562.682:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3429.190771][ T4882] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 3429.293543][ T4882] Symlink component flag not implemented [ 3429.312598][ T26] audit: type=1326 audit(2000001562.682:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3429.338062][ T4882] Symlink component flag not implemented [ 3430.206042][ T4916] loop7: detected capacity change from 0 to 512 [ 3430.546316][ T4916] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3430.555798][ T4916] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3431.715275][ T4928] loop2: detected capacity change from 0 to 2048 [ 3431.867583][ T4928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3432.341225][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3432.444873][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3432.612955][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10090'. [ 3432.643291][ T4941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3432.684681][ T4941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3432.982532][ T4955] loop7: detected capacity change from 0 to 128 [ 3433.066258][ T4955] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 3433.075950][ T4955] FAT-fs (loop7): Filesystem has been set read-only [ 3433.082772][ T4955] syz.7.10095: attempt to access beyond end of device [ 3433.082772][ T4955] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 3433.139997][ T26] kauditd_printk_skb: 123 callbacks suppressed [ 3433.140014][ T26] audit: type=1326 audit(2000001567.565:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b89858e7 code=0x7ffc0000 [ 3433.235891][ T26] audit: type=1326 audit(2000001567.565:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b892ab19 code=0x7ffc0000 [ 3433.286469][ T4955] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 3433.294435][ T4955] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 3433.308586][ T4955] syz.7.10095: attempt to access beyond end of device [ 3433.308586][ T4955] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3433.322440][ T4955] syz.7.10095: attempt to access beyond end of device [ 3433.322440][ T4955] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3433.350367][ T4955] syz.7.10095: attempt to access beyond end of device [ 3433.350367][ T4955] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3433.440454][ T4965] loop9: detected capacity change from 0 to 512 [ 3433.501847][ T26] audit: type=1326 audit(2000001567.565:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3433.732603][ T4965] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3433.742119][ T4965] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3434.261064][ T4964] syz.7.10095: attempt to access beyond end of device [ 3434.261064][ T4964] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 3434.323576][ T26] audit: type=1326 audit(2000001567.595:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b89858e7 code=0x7ffc0000 [ 3434.421832][ T26] audit: type=1326 audit(2000001567.595:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b892ab19 code=0x7ffc0000 [ 3434.528862][ T26] audit: type=1326 audit(2000001567.595:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3434.590816][ T26] audit: type=1326 audit(2000001567.605:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b89858e7 code=0x7ffc0000 [ 3434.644113][ T26] audit: type=1326 audit(2000001567.605:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0b892ab19 code=0x7ffc0000 [ 3434.720929][ T26] audit: type=1326 audit(2000001567.605:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3434.774688][ T26] audit: type=1326 audit(2000001567.615:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0b89858e7 code=0x7ffc0000 [ 3435.459276][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3435.661965][ T4978] loop9: detected capacity change from 0 to 512 [ 3435.762266][ T4978] EXT4-fs warning (device loop9): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 3435.871379][ T4978] EXT4-fs (loop9): mount failed [ 3435.992849][ T4992] siw: device registration error -23 [ 3436.237148][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10114'. [ 3436.322894][ T5002] device team1 entered promiscuous mode [ 3436.542818][ T5009] loop9: detected capacity change from 0 to 512 [ 3436.800164][ T5009] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3436.809764][ T5009] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3437.986113][ T5023] loop7: detected capacity change from 0 to 1024 [ 3438.064420][ T5023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3438.127425][ T5023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e01c, mo2=0000] [ 3438.175408][ T5023] System zones: 0-1, 3-12 [ 3438.236083][ T5028] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 3438.262782][ T5023] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #3: block 1: comm syz.7.10120: lblock 1 mapped to illegal pblock 1 (length 1) [ 3438.336070][ T5023] __quota_error: 62 callbacks suppressed [ 3438.336089][ T5023] Quota error (device loop7): write_blk: dquota write failed [ 3438.394671][ T5023] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 3438.449873][ T5023] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.10120: Failed to acquire dquot type 0 [ 3438.479380][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3438.507740][ T5023] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.10120: Freeing blocks not in datazone - block = 0, count = 4096 [ 3438.580510][ T5023] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.10120: Invalid inode bitmap blk 0 in block_group 0 [ 3438.593608][ T3038] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 3438.634985][ T5023] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 3438.667744][ T5023] EXT4-fs (loop7): 1 orphan inode deleted [ 3438.676828][ T3038] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 3438.689915][ T5023] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3438.709784][ T3038] EXT4-fs error (device loop7): ext4_release_dquot:6850: comm kworker/u4:17: Failed to release dquot type 0 [ 3438.879996][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3439.042496][ T5047] syz.7.10130[5047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3439.042609][ T5047] syz.7.10130[5047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3439.072113][ T5049] netlink: 208 bytes leftover after parsing attributes in process `syz.2.10131'. [ 3439.226539][ T5055] 9pnet_fd: Insufficient options for proto=fd [ 3439.787547][ T5061] loop8: detected capacity change from 0 to 512 [ 3439.827342][ T5061] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3439.836684][ T5061] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3440.596747][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3440.833575][ T5083] loop4: detected capacity change from 0 to 128 [ 3440.872876][ T5083] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 3440.937289][ T5083] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 3441.004428][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10143'. [ 3441.217497][ T26] audit: type=1326 audit(2000001575.670:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3441.296691][ T26] audit: type=1326 audit(2000001575.710:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3441.347354][ T26] audit: type=1326 audit(2000001575.710:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3441.403222][ T26] audit: type=1326 audit(2000001575.710:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3441.446487][ T26] audit: type=1326 audit(2000001575.710:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.4.10145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3441.528263][ T4298] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 3441.842084][ T5108] loop9: detected capacity change from 0 to 512 [ 3441.892773][ T4298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3441.912715][ T5108] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3441.921838][ T5108] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3441.977175][ T4298] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3442.029639][ T4298] usb 3-1: can't read configurations, error -71 [ 3442.500087][ T5133] tipc: Enabled bearer , priority 0 [ 3442.513770][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3442.517276][ T5133] syzkaller0: MTU too low for tipc bearer [ 3442.528686][ T5133] tipc: Disabling bearer [ 3442.764248][ T5141] loop2: detected capacity change from 0 to 512 [ 3442.801925][ T5141] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 3442.829850][ T5141] EXT4-fs (loop2): orphan cleanup on readonly fs [ 3442.849103][ T5141] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 3442.919769][ T5141] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 3442.935788][ T5141] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.10162: iget: immutable or append flags not allowed on symlinks [ 3442.986430][ T5141] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10162: couldn't read orphan inode 16 (err -117) [ 3443.021638][ T5141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3443.065881][ T5141] xt_hashlimit: size too large, truncated to 1048576 [ 3443.207053][ T5150] loop8: detected capacity change from 0 to 128 [ 3443.274101][ T26] audit: type=1800 audit(2000001577.738:1414): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10167" name="bus" dev="loop8" ino=1048672 res=0 errno=0 [ 3443.320935][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10168'. [ 3443.339658][ T5152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3443.358322][ T5152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3443.401118][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10169'. [ 3443.968771][ T5163] loop4: detected capacity change from 0 to 512 [ 3444.020263][ T5163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3444.029407][ T5163] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3444.140389][ T5161] syz.8.10167: attempt to access beyond end of device [ 3444.140389][ T5161] loop8: rw=2049, sector=441, nr_sectors = 592 limit=128 [ 3445.135235][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3445.280051][ T26] audit: type=1326 audit(2000001579.756:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3445.360512][ T26] audit: type=1326 audit(2000001579.796:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3445.405693][ T5179] loop8: detected capacity change from 0 to 512 [ 3445.428421][ T5179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3445.456216][ T5178] loop9: detected capacity change from 0 to 2048 [ 3445.463336][ T26] audit: type=1326 audit(2000001579.796:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3445.504210][ T5178] loop9: p1 < > p4 [ 3445.526303][ T5179] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3445.539412][ T5178] loop9: p4 size 8388608 extends beyond EOD, truncated [ 3445.556535][ T5179] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3445.624579][ T5179] EXT4-fs error (device loop8): ext4_xattr_block_get:546: inode #15: comm syz.8.10175: corrupted xattr block 19 [ 3445.989550][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3445.997858][ T26] audit: type=1326 audit(2000001580.468:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.4.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3446.082837][ T26] audit: type=1326 audit(2000001580.468:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.4.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3446.167039][ T26] audit: type=1326 audit(2000001580.468:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.4.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3446.240319][ T26] audit: type=1326 audit(2000001580.498:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.4.10183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3446.513759][ T26] audit: type=1326 audit(2000001580.990:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.9.10187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3446.518710][ T5203] loop4: detected capacity change from 0 to 512 [ 3446.559681][ T26] audit: type=1326 audit(2000001581.030:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.9.10187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3446.582973][ T26] audit: type=1326 audit(2000001581.030:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.9.10187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3446.611223][ T5203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3446.620298][ T5203] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3446.939072][ T5216] loop8: detected capacity change from 0 to 512 [ 3446.941069][ T5219] loop7: detected capacity change from 0 to 128 [ 3447.020766][ T5216] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.10191: Parent and EA inode have the same ino 15 [ 3447.034821][ T5216] EXT4-fs (loop8): Remounting filesystem read-only [ 3447.136859][T23897] Bluetooth: hci0: command 0x0406 tx timeout [ 3447.159114][ T5216] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.10191: Parent and EA inode have the same ino 15 [ 3447.205273][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3447.250239][ T5216] EXT4-fs (loop8): Remounting filesystem read-only [ 3447.259807][ T5216] EXT4-fs (loop8): 1 orphan inode deleted [ 3447.269162][ T5216] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3447.426702][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3448.067300][ T5232] lo speed is unknown, defaulting to 1000 [ 3449.297410][ T5250] loop8: detected capacity change from 0 to 512 [ 3449.343552][ T5250] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3449.352674][ T5250] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3449.604218][ T5259] loop7: detected capacity change from 0 to 2048 [ 3449.818107][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3450.025256][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3450.033657][ T5267] loop7: detected capacity change from 0 to 512 [ 3450.051816][ T5267] EXT4-fs: Ignoring removed oldalloc option [ 3450.096420][ T5267] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3450.108782][ T5269] smc: net device bond0 applied user defined pnetid SYZ2 [ 3450.131158][ T5267] EXT4-fs (loop7): 1 truncate cleaned up [ 3450.146085][ T5267] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3450.156163][ T5273] smc: net device bond0 erased user defined pnetid SYZ2 [ 3450.168651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.202892][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3450.382468][ T5279] device ipvlan2 entered promiscuous mode [ 3450.418128][ T5279] bridge0: port 3(ipvlan2) entered blocking state [ 3450.437036][ T5279] bridge0: port 3(ipvlan2) entered disabled state [ 3450.685009][ T5293] loop2: detected capacity change from 0 to 512 [ 3450.737144][ T5293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3450.746422][ T5293] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3450.771353][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 3450.771370][ T26] audit: type=1800 audit(2000001585.265:1439): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10220" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3450.861519][ T26] audit: type=1800 audit(2000001585.265:1440): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10220" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 3450.888676][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3451.177724][ T5306] loop9: detected capacity change from 0 to 1024 [ 3451.211485][ T5306] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 3451.249009][ T5306] EXT4-fs error (device loop9): ext4_get_journal_inode:5735: inode #32: comm syz.9.10225: iget: special inode unallocated [ 3451.253582][ T5309] loop7: detected capacity change from 0 to 512 [ 3451.274171][ T5309] EXT4-fs: Ignoring removed oldalloc option [ 3451.282817][ T5306] EXT4-fs (loop9): no journal found [ 3451.288101][ T5306] EXT4-fs (loop9): can't get journal size [ 3451.302043][ T5309] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3451.316430][ T5306] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.10225: iget: special inode unallocated [ 3451.338893][ T5310] loop2: detected capacity change from 0 to 512 [ 3451.342868][ T5306] EXT4-fs (loop9): failed to initialize system zone (-117) [ 3451.357821][ T5306] EXT4-fs (loop9): mount failed [ 3451.364273][ T5309] EXT4-fs (loop7): 1 truncate cleaned up [ 3451.371213][ T5309] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3451.424591][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3451.434137][ T5310] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3451.613643][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3451.656057][ T5318] netlink: 'syz.4.10228': attribute type 10 has an invalid length. [ 3451.789511][ T5318] team0: Port device dummy0 added [ 3451.795906][ T5321] netlink: 'syz.4.10228': attribute type 10 has an invalid length. [ 3451.859164][ T5321] team0: Port device dummy0 removed [ 3451.873099][ T5321] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3451.882886][ T5320] smc: net device bond0 applied user defined pnetid SYZ2 [ 3451.892785][ T5324] smc: net device bond0 erased user defined pnetid SYZ2 [ 3452.021593][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3452.172127][ T5330] device ipvlan2 entered promiscuous mode [ 3452.193059][ T5330] bridge0: port 4(ipvlan2) entered blocking state [ 3452.224901][ T5330] bridge0: port 4(ipvlan2) entered disabled state [ 3452.306822][ T5331] loop9: detected capacity change from 0 to 512 [ 3452.350729][ T5331] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3452.359818][ T5331] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3452.625139][ T5341] loop4: detected capacity change from 0 to 512 [ 3452.678646][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3452.716594][ T5341] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3452.788104][ T26] audit: type=1800 audit(2000001587.292:1441): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10235" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 3452.815779][ T26] audit: type=1800 audit(2000001587.292:1442): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10235" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 3452.939055][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3452.971891][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3453.118816][ T5357] netlink: 208 bytes leftover after parsing attributes in process `syz.9.10241'. [ 3453.126287][ T5356] loop4: detected capacity change from 0 to 512 [ 3453.135088][ T5356] EXT4-fs: Ignoring removed oldalloc option [ 3453.155594][ T5356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3453.188643][ T5356] EXT4-fs (loop4): 1 truncate cleaned up [ 3453.204467][ T5356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3453.268504][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3453.294571][ T5365] netlink: 'syz.8.10245': attribute type 10 has an invalid length. [ 3453.338875][ T5363] loop2: detected capacity change from 0 to 1024 [ 3453.347549][ T5365] team0: Port device dummy0 added [ 3453.354680][ T5363] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 3453.388225][ T5365] netlink: 'syz.8.10245': attribute type 10 has an invalid length. [ 3453.399113][ T5363] EXT4-fs error (device loop2): ext4_get_journal_inode:5735: inode #32: comm syz.2.10244: iget: special inode unallocated [ 3453.425055][ T5363] EXT4-fs (loop2): no journal found [ 3453.430313][ T5363] EXT4-fs (loop2): can't get journal size [ 3453.438089][ T5365] team0: Port device dummy0 removed [ 3453.445403][ T5363] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.10244: iget: special inode unallocated [ 3453.451639][ T5365] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3453.459999][ T5363] EXT4-fs (loop2): failed to initialize system zone (-117) [ 3453.482142][ T5369] smc: net device bond0 applied user defined pnetid SYZ2 [ 3453.484790][ T5363] EXT4-fs (loop2): mount failed [ 3453.490786][ T5370] smc: net device bond0 erased user defined pnetid SYZ2 [ 3453.592990][ T26] audit: type=1326 audit(2000001588.095:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3453.621278][ T26] audit: type=1326 audit(2000001588.125:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3453.655483][ T26] audit: type=1326 audit(2000001588.155:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3453.709500][ T26] audit: type=1326 audit(2000001588.155:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3453.735554][ T26] audit: type=1326 audit(2000001588.155:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3453.786049][ T26] audit: type=1326 audit(2000001588.155:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.8.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3454.193158][ T5379] lo speed is unknown, defaulting to 1000 [ 3454.902669][ T5381] device ipvlan2 entered promiscuous mode [ 3454.934339][ T5381] bridge0: port 3(ipvlan2) entered blocking state [ 3454.976996][ T5381] bridge0: port 3(ipvlan2) entered disabled state [ 3455.337745][ T5395] loop9: detected capacity change from 0 to 512 [ 3455.566605][ T5397] smc: net device bond0 applied user defined pnetid SYZ2 [ 3455.955266][ T5399] loop2: detected capacity change from 0 to 512 [ 3456.096732][ T5395] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3456.147663][ T5399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3456.156959][ T5399] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3456.220304][ T5395] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3456.438050][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 3456.438066][ T26] audit: type=1800 audit(2000001590.954:1454): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10253" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3456.627369][ T26] audit: type=1800 audit(2000001590.984:1455): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10253" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 3456.767959][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3457.179082][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3457.368021][ T5414] netlink: 'syz.7.10258': attribute type 10 has an invalid length. [ 3457.376763][ T5417] loop9: detected capacity change from 0 to 512 [ 3457.395044][ T5417] EXT4-fs: Ignoring removed oldalloc option [ 3457.424929][ T5417] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 3457.464124][ T5414] team0: Port device dummy0 added [ 3457.500160][ T5420] netlink: 'syz.7.10258': attribute type 10 has an invalid length. [ 3457.510378][ T5417] EXT4-fs (loop9): 1 truncate cleaned up [ 3457.529160][ T5417] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3457.645654][ T5420] team0: Port device dummy0 removed [ 3457.672804][ T5420] device dummy0 entered promiscuous mode [ 3457.679625][ T5420] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 3457.702163][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3457.900633][ T5428] loop4: detected capacity change from 0 to 1024 [ 3457.922316][ T5428] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 3457.952905][ T5428] EXT4-fs error (device loop4): ext4_get_journal_inode:5735: inode #32: comm syz.4.10259: iget: special inode unallocated [ 3457.989963][ T5428] EXT4-fs (loop4): no journal found [ 3458.013634][ T5428] EXT4-fs (loop4): can't get journal size [ 3458.048705][ T5428] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.10259: iget: special inode unallocated [ 3458.063044][ T5428] EXT4-fs (loop4): failed to initialize system zone (-117) [ 3458.073792][ T5428] EXT4-fs (loop4): mount failed [ 3458.078806][ T5434] netlink: 208 bytes leftover after parsing attributes in process `syz.7.10263'. [ 3458.325189][ T5435] lo speed is unknown, defaulting to 1000 [ 3459.619305][ T5442] program syz.9.10265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3460.302962][ T5454] loop7: detected capacity change from 0 to 512 [ 3460.425617][ T5454] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3460.435223][ T5454] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3460.489865][ T5455] loop4: detected capacity change from 0 to 1024 [ 3460.533140][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10270'. [ 3460.670717][ T5451] device bridge0 entered promiscuous mode [ 3460.740211][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3460.819430][ T5451] bridge0: port 1(macvlan3) entered blocking state [ 3460.939512][ T5451] bridge0: port 1(macvlan3) entered disabled state [ 3461.014161][ T5451] device bridge0 left promiscuous mode [ 3461.204714][ T5465] lo speed is unknown, defaulting to 1000 [ 3461.396645][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3461.843692][ T5472] loop2: detected capacity change from 0 to 512 [ 3461.854666][ T5472] EXT4-fs: Ignoring removed oldalloc option [ 3461.891302][ T5472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3461.922714][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3461.943964][ T5472] EXT4-fs (loop2): 1 truncate cleaned up [ 3461.997343][ T5472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3462.025825][ T5475] loop4: detected capacity change from 0 to 164 [ 3462.178799][ T5475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 3462.257254][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3462.412930][ T5481] netlink: 208 bytes leftover after parsing attributes in process `syz.8.10281'. [ 3462.545204][ T5485] loop9: detected capacity change from 0 to 1024 [ 3462.604983][ T5485] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3462.646969][ T26] audit: type=1800 audit(2000001597.183:1456): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10282" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3462.679237][ T26] audit: type=1800 audit(2000001597.213:1457): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10282" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3462.727833][ T5488] loop7: detected capacity change from 0 to 8192 [ 3462.869611][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3463.319044][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10293'. [ 3463.525994][ T26] audit: type=1326 audit(2000001598.065:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.566999][ T26] audit: type=1326 audit(2000001598.065:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.662728][ T26] audit: type=1326 audit(2000001598.065:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.724730][ T26] audit: type=1326 audit(2000001598.065:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.788712][ T5509] lo speed is unknown, defaulting to 1000 [ 3463.805968][ T5520] xt_hashlimit: max too large, truncated to 1048576 [ 3463.818907][ T26] audit: type=1326 audit(2000001598.065:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.901775][ T26] audit: type=1326 audit(2000001598.065:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3463.975538][ T26] audit: type=1326 audit(2000001598.065:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3464.014908][ T5524] loop8: detected capacity change from 0 to 128 [ 3464.090690][ T26] audit: type=1326 audit(2000001598.075:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3464.126948][ T5524] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 3464.137036][ T5524] FAT-fs (loop8): Filesystem has been set read-only [ 3464.152342][ T5522] loop7: detected capacity change from 0 to 8192 [ 3464.175797][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.175797][ T5524] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 3464.253518][ T5524] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 3464.274539][ T5524] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 3464.303100][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.303100][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.333663][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.333663][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.368913][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.368913][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.412939][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.412939][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.460420][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.460420][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.502424][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.502424][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.549815][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.549815][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.595868][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.595868][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.658873][ T5524] syz.8.10300: attempt to access beyond end of device [ 3464.658873][ T5524] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 3464.688775][ T5539] netlink: 208 bytes leftover after parsing attributes in process `syz.7.10308'. [ 3467.481544][ T5560] lo speed is unknown, defaulting to 1000 [ 3467.545760][ T5564] loop4: detected capacity change from 0 to 512 [ 3467.574038][ T5564] EXT4-fs: Ignoring removed oldalloc option [ 3467.595052][ T5564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3467.670548][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 3467.670564][ T26] audit: type=1326 audit(2000001602.207:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3467.726534][ T26] audit: type=1326 audit(2000001602.267:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3467.800012][ T26] audit: type=1326 audit(2000001602.287:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3467.872012][ T26] audit: type=1326 audit(2000001602.287:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3467.913774][ T26] audit: type=1326 audit(2000001602.287:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3467.915728][ T5564] EXT4-fs (loop4): 1 truncate cleaned up [ 3467.966945][ T5564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3467.986884][ T26] audit: type=1326 audit(2000001602.287:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3468.081551][ T26] audit: type=1326 audit(2000001602.287:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3468.145880][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3468.199885][ T26] audit: type=1326 audit(2000001602.287:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3468.283469][ T26] audit: type=1326 audit(2000001602.447:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3468.343078][ T5591] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 3468.344189][ T5586] IPVS: stopping master sync thread 5591 ... [ 3468.390597][ T26] audit: type=1326 audit(2000001602.447:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5567 comm="syz.9.10319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3468.545387][ T5572] 9pnet_fd: p9_fd_create_tcp (5572): problem connecting socket to 127.0.0.1 [ 3470.266007][ T5612] lo speed is unknown, defaulting to 1000 [ 3471.623296][ T5617] loop7: detected capacity change from 0 to 512 [ 3471.634908][ T5617] EXT4-fs: Ignoring removed oldalloc option [ 3471.666309][ T5617] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3471.728910][ T5620] loop2: detected capacity change from 0 to 512 [ 3471.731297][ T5617] EXT4-fs (loop7): 1 truncate cleaned up [ 3471.753623][ T5620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3471.813522][ T5617] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3471.864082][ T5620] EXT4-fs (loop2): 1 truncate cleaned up [ 3471.879106][ T5620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3472.016223][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3473.605425][ T5661] loop4: detected capacity change from 0 to 512 [ 3473.618736][ T5661] EXT4-fs: Ignoring removed oldalloc option [ 3473.641109][ T5661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3473.674124][ T5661] EXT4-fs (loop4): 1 truncate cleaned up [ 3473.688462][ T5661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3473.736171][ T5667] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 3473.803690][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3474.393673][ T41] Process accounting resumed [ 3475.651241][ T5692] loop4: detected capacity change from 0 to 512 [ 3475.684092][ T5692] EXT4-fs: Ignoring removed oldalloc option [ 3475.697214][ T5688] loop8: detected capacity change from 0 to 1024 [ 3475.720985][ T5692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3475.728370][ T5688] EXT4-fs: Ignoring removed orlov option [ 3475.787151][ T5692] EXT4-fs (loop4): 1 truncate cleaned up [ 3475.802342][ T5692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3475.829195][ T5688] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3475.844247][ T5698] netlink: 'syz.9.10368': attribute type 10 has an invalid length. [ 3475.863655][ T5698] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10368'. [ 3475.885470][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 3475.885489][ T26] audit: type=1800 audit(2000001610.447:1578): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10365" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 3475.934787][ T5698] device dummy0 entered promiscuous mode [ 3475.943540][ T26] audit: type=1804 audit(2000001610.477:1579): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.10365" name="/newroot/249/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 3475.968904][ T5698] bridge0: port 3(dummy0) entered blocking state [ 3475.970180][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3475.975749][ T5698] bridge0: port 3(dummy0) entered disabled state [ 3476.187779][ T5707] loop4: detected capacity change from 0 to 512 [ 3476.242419][ T5707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.10370: invalid indirect mapped block 256 (level 2) [ 3476.258184][ T5707] EXT4-fs (loop4): 2 truncates cleaned up [ 3476.264884][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3476.286661][ T5707] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.10370: bg 0: block 5: invalid block bitmap [ 3476.314902][ T5707] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 3476.333151][ T5707] EXT4-fs (loop4): This should not happen!! Data will be lost [ 3476.333151][ T5707] [ 3476.343679][ T5707] EXT4-fs (loop4): Total free blocks count 0 [ 3476.350028][ T5707] EXT4-fs (loop4): Free/Dirty block details [ 3476.356468][ T5707] EXT4-fs (loop4): free_blocks=0 [ 3476.361829][ T5707] EXT4-fs (loop4): dirty_blocks=16 [ 3476.367155][ T5707] EXT4-fs (loop4): Block reservation details [ 3476.373517][ T5707] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 3476.508715][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3476.587290][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3477.013593][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3477.929941][ T5726] device vlan3 entered promiscuous mode [ 3477.976299][ T5726] device ip6gretap0 entered promiscuous mode [ 3478.388804][ T26] audit: type=1326 audit(2000001612.963:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.8.10386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3478.447605][ T26] audit: type=1326 audit(2000001612.963:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.8.10386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3478.483992][ T26] audit: type=1326 audit(2000001612.963:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.8.10386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3478.525419][ T26] audit: type=1326 audit(2000001612.963:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.8.10386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3479.322943][ T26] audit: type=1326 audit(2000001613.895:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.7.10389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7fc00000 [ 3479.654366][ T26] audit: type=1326 audit(2000001613.925:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.7.10389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f698878e929 code=0x7fc00000 [ 3479.805593][ T26] audit: type=1326 audit(2000001613.925:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.7.10389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7fc00000 [ 3479.828244][ T26] audit: type=1326 audit(2000001613.925:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.7.10389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7fc00000 [ 3480.131860][ T5780] loop7: detected capacity change from 0 to 256 [ 3481.185108][ T5791] lo speed is unknown, defaulting to 1000 [ 3482.293379][ T5816] loop2: detected capacity change from 0 to 512 [ 3482.570872][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 3482.591503][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 3482.660793][ T5816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3482.677434][ T5816] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3482.690259][ T5827] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 3483.796307][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3484.076918][ T5852] loop8: detected capacity change from 0 to 512 [ 3484.129460][ T5852] EXT4-fs: Ignoring removed oldalloc option [ 3484.198608][ T5852] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 3484.248691][ T5852] EXT4-fs (loop8): 1 truncate cleaned up [ 3484.254515][ T5852] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3484.588496][ T5859] lo speed is unknown, defaulting to 1000 [ 3485.123425][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3485.270869][ T5869] loop2: detected capacity change from 0 to 512 [ 3485.332572][ T5869] EXT4-fs: Ignoring removed mblk_io_submit option [ 3485.339121][ T5869] ext4: Unknown parameter 'seclabel' [ 3485.656171][ T5877] loop8: detected capacity change from 0 to 512 [ 3485.719596][ T5877] EXT4-fs: Ignoring removed mblk_io_submit option [ 3485.760516][ T5877] EXT4-fs: Ignoring removed mblk_io_submit option [ 3485.820936][ T5877] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 3485.854575][ T5883] blktrace: Concurrent blktraces are not allowed on loop18 [ 3485.897108][ T5877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 3485.926181][ T5877] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.10438: corrupted in-inode xattr [ 3485.957418][ T5877] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.10438: couldn't read orphan inode 15 (err -117) [ 3485.974355][ T5877] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3486.098847][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3486.109987][ T5892] loop4: detected capacity change from 0 to 512 [ 3486.176299][ T5892] EXT4-fs: Ignoring removed oldalloc option [ 3486.188924][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10445'. [ 3486.205027][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10445'. [ 3486.216938][ T5892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3486.246516][ T5892] EXT4-fs (loop4): 1 truncate cleaned up [ 3486.254663][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3486.375226][ T5895] loop8: detected capacity change from 0 to 4096 [ 3486.497148][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3486.532177][ T5895] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3486.748924][ T5907] lo speed is unknown, defaulting to 1000 [ 3487.462222][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10449'. [ 3487.504444][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 3487.504460][ T26] audit: type=1326 audit(2000001622.092:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3487.619623][ T26] audit: type=1326 audit(2000001622.102:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3487.692556][ T26] audit: type=1326 audit(2000001622.102:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3487.759708][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3487.789292][ T26] audit: type=1326 audit(2000001622.102:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3487.826641][ T26] audit: type=1326 audit(2000001622.102:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3487.852129][ T5922] futex_wake_op: syz.7.10455 tries to shift op by -1; fix this program [ 3487.979228][ T26] audit: type=1326 audit(2000001622.102:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3488.037130][ T26] audit: type=1326 audit(2000001622.102:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3488.060479][ T26] audit: type=1326 audit(2000001622.102:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3488.094355][ T26] audit: type=1326 audit(2000001622.102:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3488.213591][ T26] audit: type=1326 audit(2000001622.102:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.7.10451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3488.427376][ T5929] lo speed is unknown, defaulting to 1000 [ 3489.091343][ T5936] loop9: detected capacity change from 0 to 512 [ 3489.122422][ T5936] EXT4-fs: Ignoring removed oldalloc option [ 3489.149472][ T5936] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 3489.207581][ T5936] EXT4-fs (loop9): 1 truncate cleaned up [ 3489.234354][ T5936] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3489.426626][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3489.600299][ T5949] loop8: detected capacity change from 0 to 1024 [ 3489.638399][ T5951] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10468'. [ 3489.659680][ T3623] udevd[3623]: worker [2528] terminated by signal 33 (Unknown signal 33) [ 3489.719417][ T5949] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3489.900561][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3490.095103][ T5966] program syz.8.10471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3490.245354][ T5970] blktrace: Concurrent blktraces are not allowed on loop15 [ 3490.274063][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10472'. [ 3490.335739][ T5968] bridge0: port 4(macvlan2) entered blocking state [ 3490.370117][ T5968] bridge0: port 4(macvlan2) entered disabled state [ 3490.382395][ T5971] loop8: detected capacity change from 0 to 1024 [ 3490.598449][ T5971] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3490.690788][ T5981] loop4: detected capacity change from 0 to 512 [ 3490.792798][ T5981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3490.801986][ T5981] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3491.003113][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3491.288359][ T5988] loop7: detected capacity change from 0 to 512 [ 3491.497089][ T5989] lo speed is unknown, defaulting to 1000 [ 3492.194811][ T5988] EXT4-fs: Ignoring removed oldalloc option [ 3492.247901][ T5988] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3492.363856][ T5988] EXT4-fs (loop7): 1 truncate cleaned up [ 3492.368572][ T5992] loop2: detected capacity change from 0 to 1024 [ 3492.388641][ T5988] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3492.481434][ T5992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3492.547060][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 3492.547076][ T26] audit: type=1800 audit(2000001627.141:1627): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10480" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3492.678550][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3492.705889][ T26] audit: type=1800 audit(2000001627.181:1628): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10480" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3492.796856][ T6003] program syz.9.10482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3492.811600][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3492.973530][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3493.977239][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10490'. [ 3493.994256][ T6029] bridge0: port 3(macvlan2) entered blocking state [ 3494.031816][ T6029] bridge0: port 3(macvlan2) entered disabled state [ 3494.081754][ T6030] loop7: detected capacity change from 0 to 1024 [ 3494.183887][ T6038] loop4: detected capacity change from 0 to 512 [ 3494.209939][ T6030] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3494.223081][ T6031] lo speed is unknown, defaulting to 1000 [ 3494.224031][ T6038] EXT4-fs: Ignoring removed oldalloc option [ 3494.279458][ T6041] loop9: detected capacity change from 0 to 1024 [ 3494.290720][ T6038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3494.495213][ T6038] EXT4-fs (loop4): 1 truncate cleaned up [ 3494.507433][ T6038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3494.571071][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3494.700700][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3495.068214][ T6049] loop8: detected capacity change from 0 to 512 [ 3495.152021][ T6049] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3495.161151][ T6049] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3495.308403][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3495.359289][ T6041] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3495.393487][ T26] audit: type=1800 audit(2000001630.006:1629): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10495" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3495.535535][ T26] audit: type=1800 audit(2000001630.046:1630): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10495" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3495.970350][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3496.103360][ T6067] program syz.9.10502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3496.282051][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10509'. [ 3496.315885][ T6076] bridge0: port 4(macvlan2) entered blocking state [ 3496.322853][ T6076] bridge0: port 4(macvlan2) entered disabled state [ 3496.323979][ T6078] loop2: detected capacity change from 0 to 512 [ 3496.337426][ T6078] EXT4-fs: Ignoring removed oldalloc option [ 3496.344315][ T6078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3496.370814][ T6078] EXT4-fs (loop2): 1 truncate cleaned up [ 3496.380019][ T6078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3496.420107][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3496.710214][ T6083] loop9: detected capacity change from 0 to 512 [ 3496.777961][ T6086] lo speed is unknown, defaulting to 1000 [ 3496.784864][ T6083] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3496.794054][ T6083] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3497.005065][ T6088] loop7: detected capacity change from 0 to 1024 [ 3497.025060][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3497.140514][ T6088] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3497.219975][ T26] audit: type=1800 audit(2000001631.799:1631): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10513" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3497.314024][ T26] audit: type=1800 audit(2000001631.799:1632): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10513" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3497.492938][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3497.584847][ T6099] program syz.4.10517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3497.778150][ T6103] loop2: detected capacity change from 0 to 512 [ 3497.822040][ T6103] EXT4-fs: Ignoring removed oldalloc option [ 3497.845826][ T6103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3497.886927][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10523'. [ 3497.902644][ T6103] EXT4-fs (loop2): 1 truncate cleaned up [ 3497.908373][ T6103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3497.935488][ T6107] bridge0: port 4(macvlan2) entered blocking state [ 3497.971062][ T6107] bridge0: port 4(macvlan2) entered disabled state [ 3498.177094][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3498.270079][ T6110] loop4: detected capacity change from 0 to 512 [ 3498.326225][ T6110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3498.335380][ T6110] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3498.492114][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3498.860050][ T6132] lo speed is unknown, defaulting to 1000 [ 3499.398964][ T6135] loop2: detected capacity change from 0 to 1024 [ 3499.523431][ T6135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3499.609474][ T26] audit: type=1800 audit(2000001634.223:1633): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10530" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3499.702492][ T6145] program syz.4.10533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3499.722901][ T26] audit: type=1800 audit(2000001634.253:1634): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10530" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3499.821325][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3499.931279][ T6150] loop9: detected capacity change from 0 to 512 [ 3499.962047][ T6150] EXT4-fs: Ignoring removed oldalloc option [ 3499.985337][ T6150] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 3500.031204][ T6150] EXT4-fs (loop9): 1 truncate cleaned up [ 3500.065383][ T6150] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3500.576787][ T6155] loop7: detected capacity change from 0 to 512 [ 3500.669791][ T6155] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3500.679021][ T6155] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3500.811024][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3501.225184][ T6171] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10545'. [ 3501.244820][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10545'. [ 3501.523312][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10537'. [ 3501.858349][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3502.169978][ T6185] lo speed is unknown, defaulting to 1000 [ 3502.232947][ T6189] program syz.8.10550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3502.321488][ T6193] loop4: detected capacity change from 0 to 1024 [ 3502.331004][ T6192] loop7: detected capacity change from 0 to 512 [ 3502.338144][ T6192] EXT4-fs: Ignoring removed oldalloc option [ 3502.363987][ T6192] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3502.416623][ T6192] EXT4-fs (loop7): 1 truncate cleaned up [ 3502.436263][ T6192] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3502.470464][ T6193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3502.540981][ T26] audit: type=1800 audit(2000001637.148:1635): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10551" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 3502.646486][ T26] audit: type=1800 audit(2000001637.178:1636): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10551" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 3502.796236][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3502.824275][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3502.948438][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10557'. [ 3503.952692][ T6210] loop8: detected capacity change from 0 to 512 [ 3504.016508][ T6210] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3504.025742][ T6210] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3504.791644][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3504.797896][ T6229] program syz.9.10565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3505.157322][ T6237] loop4: detected capacity change from 0 to 512 [ 3505.164846][ T6237] EXT4-fs: Ignoring removed oldalloc option [ 3505.187692][ T6237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3505.229802][ T6236] lo speed is unknown, defaulting to 1000 [ 3505.325509][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10571'. [ 3505.391506][ T6237] EXT4-fs (loop4): 1 truncate cleaned up [ 3505.406836][ T6237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3505.535039][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3505.653012][ T6248] loop2: detected capacity change from 0 to 1024 [ 3506.984705][ T6258] program syz.7.10577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3507.015699][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3507.036746][ T6261] loop8: detected capacity change from 0 to 512 [ 3507.075108][ T26] audit: type=1800 audit(2000001641.704:1637): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10574" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3507.118372][ T6261] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3507.127679][ T6261] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3507.264327][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3507.595265][ T6274] loop7: detected capacity change from 0 to 512 [ 3507.619576][ T6274] EXT4-fs: Ignoring removed oldalloc option [ 3507.647217][ T6274] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 3507.685008][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3507.693082][ T6274] EXT4-fs (loop7): 1 truncate cleaned up [ 3507.699801][ T6274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3507.936767][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3508.236050][ T6293] loop4: detected capacity change from 0 to 1024 [ 3508.289323][ T6293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3508.328322][ T6296] lo speed is unknown, defaulting to 1000 [ 3508.350279][ T6300] program syz.9.10593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3508.414042][ T26] audit: type=1800 audit(2000001643.046:1638): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10590" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 3508.672814][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3509.468348][ T6322] loop2: detected capacity change from 0 to 512 [ 3509.537107][ T6320] loop4: detected capacity change from 0 to 512 [ 3509.549587][ T6322] EXT4-fs: Ignoring removed oldalloc option [ 3509.584054][ T6322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3509.757791][ T6322] EXT4-fs (loop2): 1 truncate cleaned up [ 3509.783571][ T6322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3509.832884][ T6320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3509.931191][ T6320] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3509.971694][ T6335] program syz.7.10604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3510.088875][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3510.329321][ T6343] loop7: detected capacity change from 0 to 1024 [ 3510.388445][ T6343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3510.425960][ T26] audit: type=1800 audit(2000001645.049:1639): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10608" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3510.686714][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3510.878969][ T6354] lo speed is unknown, defaulting to 1000 [ 3511.471867][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.801984][ T6370] program syz.2.10618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3512.237055][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10623'. [ 3512.788204][ T6385] loop2: detected capacity change from 0 to 1024 [ 3512.820327][ T6389] lo speed is unknown, defaulting to 1000 [ 3513.150834][ T6385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3513.217843][ T26] audit: type=1800 audit(2000001647.833:1640): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10624" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3513.408422][ T26] audit: type=1800 audit(2000001647.833:1641): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10624" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3513.523743][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3514.156464][ T6410] program syz.2.10634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3514.360741][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10636'. [ 3515.002621][ T6431] loop7: detected capacity change from 0 to 1024 [ 3515.064033][ T6431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3515.119427][ T6434] lo speed is unknown, defaulting to 1000 [ 3515.440964][ T26] audit: type=1800 audit(2000001650.076:1642): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10642" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3515.839731][ T26] audit: type=1800 audit(2000001650.076:1643): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10642" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3515.974372][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3517.137191][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10649'. [ 3517.249498][ T6482] program syz.9.10651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3517.574641][ T6493] loop8: detected capacity change from 0 to 1024 [ 3517.678247][ T6493] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3517.697974][ T6491] lo speed is unknown, defaulting to 1000 [ 3517.706822][ T26] audit: type=1800 audit(2000001652.348:1644): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10656" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 3517.807853][ T26] audit: type=1800 audit(2000001652.378:1645): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10656" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 3518.052410][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3520.053549][ T6515] program syz.8.10664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3520.280721][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3520.384843][ T6527] loop7: detected capacity change from 0 to 1024 [ 3520.495528][ T6527] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3520.570790][ T6526] lo speed is unknown, defaulting to 1000 [ 3520.643301][ T26] audit: type=1800 audit(2000001655.282:1646): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10668" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3520.920818][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3521.124505][ T6551] program syz.7.10676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3522.546701][ T6575] loop4: detected capacity change from 0 to 512 [ 3522.729848][ T6575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3522.749504][ T6577] lo speed is unknown, defaulting to 1000 [ 3522.785902][ T6582] loop9: detected capacity change from 0 to 1024 [ 3522.802828][ T6575] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3522.872103][ T6582] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3522.996407][ T26] audit: type=1800 audit(2000001657.644:1647): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10687" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3523.077939][ T6588] loop2: detected capacity change from 0 to 128 [ 3523.183360][ T26] audit: type=1800 audit(2000001657.825:1648): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10688" name="bus" dev="loop2" ino=1048680 res=0 errno=0 [ 3524.336864][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3524.490259][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10690'. [ 3524.538828][ T6612] lo speed is unknown, defaulting to 1000 [ 3525.045886][ T6619] lo speed is unknown, defaulting to 1000 [ 3525.139621][ T6623] loop9: detected capacity change from 0 to 1024 [ 3525.333974][ T6623] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3525.522680][ T26] audit: type=1800 audit(2000001660.087:1649): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10702" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3525.706440][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3527.050791][ T26] audit: type=1326 audit(2000001661.699:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.082761][ T6662] lo speed is unknown, defaulting to 1000 [ 3527.084051][ T26] audit: type=1326 audit(2000001661.729:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.115584][ T26] audit: type=1326 audit(2000001661.729:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.142617][ T26] audit: type=1326 audit(2000001661.729:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.179302][ T26] audit: type=1326 audit(2000001661.729:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.209674][ T26] audit: type=1326 audit(2000001661.729:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.234423][ T26] audit: type=1326 audit(2000001661.729:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.311493][ T26] audit: type=1326 audit(2000001661.729:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.356488][ T26] audit: type=1326 audit(2000001661.729:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3527.449106][ T26] audit: type=1326 audit(2000001661.729:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.7.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3528.762540][ T6685] device syzkaller0 entered promiscuous mode [ 3529.024299][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3529.562903][ T6709] program syz.8.10735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3530.073968][ T6717] loop8: detected capacity change from 0 to 512 [ 3530.203761][ T6717] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3530.236186][ T6717] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3532.388960][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3532.532743][ T6711] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 3533.396170][ T6751] program syz.4.10750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3533.477039][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10751'. [ 3533.594313][ T6755] loop9: detected capacity change from 0 to 512 [ 3533.883365][ T6755] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3533.892883][ T6755] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3534.835828][ T6764] loop4: detected capacity change from 0 to 1764 [ 3534.983863][ T6742] tipc: New replicast peer: 10.1.1.2 [ 3535.062932][ T6742] tipc: Enabled bearer , priority 10 [ 3535.548223][ T6770] lo speed is unknown, defaulting to 1000 [ 3535.578149][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3535.867497][ T6782] loop9: detected capacity change from 0 to 1024 [ 3535.915493][ T6788] program syz.2.10763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3535.939746][ T6782] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3535.960730][ T26] kauditd_printk_skb: 153 callbacks suppressed [ 3535.960747][ T26] audit: type=1800 audit(2000001670.607:1813): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10758" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3536.097626][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3536.702318][ T6807] loop9: detected capacity change from 0 to 512 [ 3536.938638][ T6807] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3536.948281][ T6807] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3538.342593][ T6823] program syz.2.10775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3538.493494][ T6825] loop7: detected capacity change from 0 to 1024 [ 3538.587902][ T6825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3538.600598][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3538.659731][ T26] audit: type=1800 audit(2000001673.310:1814): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10776" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3538.785364][ T6840] program syz.4.10782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3538.812828][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3538.903665][ T6836] loop8: detected capacity change from 0 to 8192 [ 3539.100325][ T6851] program syz.4.10788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3539.640075][ T6867] syz.8.10793[6867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3539.640181][ T6867] syz.8.10793[6867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3539.801407][ T6869] loop2: detected capacity change from 0 to 512 [ 3539.976581][ T6869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3539.986412][ T6869] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3540.199432][ T26] audit: type=1326 audit(2000001674.821:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.8.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3540.613486][ T26] audit: type=1326 audit(2000001674.881:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.8.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3540.924803][ T6865] lo speed is unknown, defaulting to 1000 [ 3541.115464][ T26] audit: type=1326 audit(2000001674.901:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.8.10793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6fd8e929 code=0x7ffc0000 [ 3541.387625][ T6875] netlink: 388 bytes leftover after parsing attributes in process `syz.7.10794'. [ 3541.415705][ T6876] loop9: detected capacity change from 0 to 1024 [ 3541.560657][ T6878] device syzkaller1 entered promiscuous mode [ 3541.599950][ T6876] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3541.690302][ T26] audit: type=1800 audit(2000001676.352:1818): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10795" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3541.840139][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3542.015539][ T6884] program syz.7.10799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3542.102255][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3542.694405][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10808'. [ 3542.944997][ T6911] loop2: detected capacity change from 0 to 1024 [ 3542.995064][ T6913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 3542.996429][ T6911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3543.138224][ T26] audit: type=1800 audit(2000001677.804:1819): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10810" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3543.238858][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3543.241057][ T6920] program syz.9.10813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3543.332652][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10814'. [ 3543.361061][ T6923] loop8: detected capacity change from 0 to 512 [ 3543.374966][ T6922] bridge0: port 1(macvlan2) entered blocking state [ 3543.384371][ T6922] bridge0: port 1(macvlan2) entered disabled state [ 3543.445604][ T6923] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3543.454632][ T6923] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3543.845936][ T6941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3544.116418][ T6948] program syz.4.10825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3544.360490][ T6953] loop4: detected capacity change from 0 to 1024 [ 3544.402010][ T6951] lo speed is unknown, defaulting to 1000 [ 3544.429210][ T6953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3544.453435][ T26] audit: type=1800 audit(2000001679.115:1820): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10827" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 3544.608184][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3544.846897][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10831'. [ 3544.879026][ T6966] bridge0: port 4(macvlan2) entered blocking state [ 3544.904831][ T6966] bridge0: port 4(macvlan2) entered disabled state [ 3545.283160][ T26] audit: type=1326 audit(2000001679.945:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.348988][ T26] audit: type=1326 audit(2000001679.945:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.388190][ T6980] program syz.9.10837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3545.422312][ T26] audit: type=1326 audit(2000001679.945:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.505921][ T26] audit: type=1326 audit(2000001679.945:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.585856][ T26] audit: type=1326 audit(2000001679.945:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.621236][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10840'. [ 3545.674044][ T26] audit: type=1326 audit(2000001679.945:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.10836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fb0b898e929 code=0x7ffc0000 [ 3545.798187][ T6989] loop7: detected capacity change from 0 to 1024 [ 3545.866507][ T6989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3546.029782][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3546.158175][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10845'. [ 3546.379528][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 3546.379544][ T26] audit: type=1326 audit(2000001681.046:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.7.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3546.467752][ T26] audit: type=1326 audit(2000001681.046:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.7.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3546.523132][ T26] audit: type=1326 audit(2000001681.046:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.7.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3546.575405][ T7010] program syz.7.10850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3546.603010][ T26] audit: type=1326 audit(2000001681.076:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.7.10848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698878e929 code=0x7ffc0000 [ 3547.035210][ T7023] loop7: detected capacity change from 0 to 1024 [ 3547.062014][ T7016] loop2: detected capacity change from 0 to 8192 [ 3547.104655][ T7023] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3547.135588][ T7016] loop2: p1 p3 p4 [ 3547.139517][ T7016] loop2: p1 size 8390912 extends beyond EOD, truncated [ 3547.154552][ T26] audit: type=1800 audit(2000001681.817:1834): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10856" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3547.156513][ T7016] loop2: p3 size 589824 extends beyond EOD, [ 3547.177708][ T26] audit: type=1800 audit(2000001681.817:1835): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10856" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3547.206855][ T7016] truncated [ 3547.233183][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10858'. [ 3547.270142][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3547.467119][ T7032] lo speed is unknown, defaulting to 1000 [ 3547.587130][ T26] audit: type=1326 audit(2000001682.247:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3547.590685][ T7039] sd 0:0:1:0: device reset [ 3547.648490][ T26] audit: type=1326 audit(2000001682.247:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3547.678335][ T7041] program syz.9.10862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3547.718182][ T26] audit: type=1326 audit(2000001682.247:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3547.758915][ T26] audit: type=1326 audit(2000001682.247:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b82d8e929 code=0x7ffc0000 [ 3548.296833][ T7057] loop2: detected capacity change from 0 to 1024 [ 3548.375410][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3548.507444][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3548.525405][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3549.111146][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10871'. [ 3550.233385][ T7070] loop8: detected capacity change from 0 to 512 [ 3550.242785][ T7070] EXT4-fs: Ignoring removed mblk_io_submit option [ 3550.249326][ T7070] EXT4-fs: Ignoring removed bh option [ 3550.276814][ T7070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3550.288425][ T7070] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 3550.557660][ T7070] EXT4-fs (loop8): 1 truncate cleaned up [ 3550.563691][ T7070] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3550.690930][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10872'. [ 3550.716609][ T7074] device bridge0 entered promiscuous mode [ 3550.837807][ T7078] program syz.7.10875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3550.907774][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3551.203005][ T7096] loop9: detected capacity change from 0 to 1024 [ 3551.287690][ T7096] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3551.421983][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 3551.422004][ T26] audit: type=1800 audit(2000001685.990:1855): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10882" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3551.465221][ T7104] loop7: detected capacity change from 0 to 512 [ 3551.505330][ T26] audit: type=1800 audit(2000001685.990:1856): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10882" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3551.511515][ T7104] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3551.541090][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3551.588633][ T7104] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3551.780832][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3551.870142][ T7110] lo speed is unknown, defaulting to 1000 [ 3551.883295][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10887'. [ 3551.901309][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10887'. [ 3552.135966][ T7121] program syz.7.10890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3552.203118][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10891'. [ 3552.373978][ T7133] loop2: detected capacity change from 0 to 1024 [ 3552.609558][ T7133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3552.623923][ T26] audit: type=1800 audit(2000001687.291:1857): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10895" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3552.668114][ T26] audit: type=1800 audit(2000001687.321:1858): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10895" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3552.714167][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3552.772880][ T7147] loop9: detected capacity change from 0 to 512 [ 3552.818122][ T7149] loop2: detected capacity change from 0 to 512 [ 3552.844173][ T7147] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3552.857006][ T7149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3552.862851][ T7147] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3552.876422][ T7149] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3553.063539][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3553.277882][ T7158] netlink: 200 bytes leftover after parsing attributes in process `syz.2.10900'. [ 3553.298609][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10901'. [ 3553.320762][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10901'. [ 3553.333168][ T7158] loop2: detected capacity change from 0 to 512 [ 3553.344782][ T7158] journal_path: Lookup failure for './bus' [ 3553.352046][ T7158] EXT4-fs: error: could not find journal device path [ 3553.898934][ T7176] loop7: detected capacity change from 0 to 1024 [ 3553.951343][ T7176] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3553.982575][ T26] audit: type=1800 audit(2000001688.652:1859): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10910" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3554.042756][ T26] audit: type=1800 audit(2000001688.682:1860): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10910" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3554.143735][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3554.162079][ T7187] device syzkaller0 entered promiscuous mode [ 3556.151005][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3556.580976][ T7214] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 3556.580976][ T7214] program syz.9.10922 not setting count and/or reply_len properly [ 3558.150415][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10913'. [ 3558.160751][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10913'. [ 3558.178537][ T7196] lo speed is unknown, defaulting to 1000 [ 3558.363905][ T7223] loop2: detected capacity change from 0 to 1024 [ 3558.470106][ T7223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3558.487415][ T26] audit: type=1800 audit(2000001693.165:1861): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10926" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3558.562369][ T26] audit: type=1800 audit(2000001693.165:1862): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10926" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3558.656144][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3558.984060][ T7247] loop9: detected capacity change from 0 to 512 [ 3559.127707][ T7247] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 3559.136823][ T7247] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3559.567721][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10938'. [ 3559.617886][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10938'. [ 3560.030991][ T7267] loop8: detected capacity change from 0 to 1024 [ 3560.130834][ T7267] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 3560.183330][ T26] audit: type=1800 audit(2000001694.856:1863): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10942" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 3560.251406][ T26] audit: type=1800 audit(2000001694.886:1864): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10942" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 3560.336047][ T1706] EXT4-fs (loop8): unmounting filesystem. [ 3560.484581][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10946'. [ 3560.604181][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3560.690900][ T7283] loop8: detected capacity change from 0 to 512 [ 3560.734710][ T7283] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 3560.775968][ T7283] EXT4-fs (loop8): 1 truncate cleaned up [ 3560.781692][ T7283] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 3560.825068][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10952'. [ 3560.834258][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10952'. [ 3560.896494][ T7292] lo speed is unknown, defaulting to 1000 [ 3561.233119][ T7283] loop8: detected capacity change from 512 to 0 [ 3561.261501][ C1] I/O error, dev loop8, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 3561.272529][ T7291] EXT4-fs error (device loop8): __ext4_find_entry:1685: inode #2: comm syz.8.10950: reading directory lblock 0 [ 3561.335749][ T11] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3561.359846][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 3561.369840][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3561.378447][ T7291] EXT4-fs (loop8): I/O error while writing superblock [ 3561.388599][ T7291] EXT4-fs (loop8): Remounting filesystem read-only [ 3561.537686][ C1] I/O error, dev loop8, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 3561.568322][ C1] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 3561.604956][ T1706] EXT4-fs error (device loop8): ext4_get_inode_loc:4645: inode #2: block 5: comm syz-executor: unable to read itable block [ 3561.632188][ C1] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 3561.671573][ T4504] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3561.841397][ T7302] xt_hashlimit: size too large, truncated to 1048576 [ 3561.877879][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 3561.887821][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3561.899512][ T1706] EXT4-fs (loop8): I/O error while writing superblock [ 3561.912580][ T1706] EXT4-fs (loop8): Remounting filesystem read-only [ 3561.934079][ T7304] loop9: detected capacity change from 0 to 1024 [ 3561.944376][ T1706] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5914: IO failure [ 3561.984552][ T4504] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3562.032110][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 3562.041820][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3562.053088][ T1706] EXT4-fs (loop8): I/O error while writing superblock [ 3562.059917][ T1706] EXT4-fs (loop8): Remounting filesystem read-only [ 3562.090782][ T1706] EXT4-fs error (device loop8): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error [ 3562.126964][ T4504] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3562.149211][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 3562.158821][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3562.167343][ T1706] EXT4-fs (loop8): I/O error while writing superblock [ 3562.178745][ T1706] EXT4-fs (loop8): Remounting filesystem read-only [ 3562.245171][ T7304] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3562.382385][ T26] audit: type=1800 audit(2000001696.957:1865): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10958" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3562.485823][ T26] audit: type=1800 audit(2000001696.957:1866): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10958" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3562.698216][ C0] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 3562.708121][ C0] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 3562.718054][ T4504] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4630: inode #2: block 5: comm kworker/u4:14: unable to read itable block [ 3562.732659][ T4411] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3562.741962][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3562.750767][ T4504] EXT4-fs (loop8): I/O error while writing superblock [ 3562.763048][ T4411] loop: Write error at byte offset 9223372036854776831, length 1024. [ 3562.771201][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 3562.878664][ T7315] loop4: detected capacity change from 0 to 512 [ 3562.890647][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10961'. [ 3562.924722][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3562.934123][ T7315] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3564.557292][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3564.797827][ T7323] loop7: detected capacity change from 0 to 512 [ 3564.817523][ T7323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3564.845840][ T7323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3564.916198][ T7323] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3564.941781][ T7323] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3564.958656][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10964'. [ 3564.983186][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10964'. [ 3565.202967][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3565.520871][T24411] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 3565.546098][ T7334] loop7: detected capacity change from 0 to 1024 [ 3565.564199][T24411] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3565.621198][ T7334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3565.631125][ T7334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3565.653093][ T7334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 3565.716391][ T7334] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3565.783226][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3565.937641][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3566.384064][ T7339] lo speed is unknown, defaulting to 1000 [ 3566.474323][ T7346] loop7: detected capacity change from 0 to 1024 [ 3566.540929][ T7346] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3566.575319][ T26] audit: type=1800 audit(2000001701.249:1867): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10971" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3566.596524][ T26] audit: type=1800 audit(2000001701.249:1868): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10971" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 3566.714836][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3567.348658][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10976'. [ 3567.390908][T32248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3567.404330][T32248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3567.536663][T32248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3567.561925][T32248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3567.574475][T32248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3567.582198][T32248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3567.657034][ T26] audit: type=1326 audit(2000001702.330:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3567.690937][ T7356] lo speed is unknown, defaulting to 1000 [ 3567.698300][ T7363] loop9: detected capacity change from 0 to 1024 [ 3567.726104][ T26] audit: type=1326 audit(2000001702.330:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3567.774764][ T26] audit: type=1326 audit(2000001702.330:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3567.859256][ T26] audit: type=1326 audit(2000001702.330:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fefabf8e963 code=0x7ffc0000 [ 3567.922337][ T26] audit: type=1326 audit(2000001702.350:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefabf8d3df code=0x7ffc0000 [ 3568.011851][ T26] audit: type=1326 audit(2000001702.370:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fefabf8e9b7 code=0x7ffc0000 [ 3568.079454][ T26] audit: type=1326 audit(2000001702.370:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefabf8d290 code=0x7ffc0000 [ 3568.097974][ T7373] loop7: detected capacity change from 0 to 1024 [ 3568.143000][ T26] audit: type=1326 audit(2000001702.370:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.9.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefabf8e52b code=0x7ffc0000 [ 3568.194481][ T7373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3568.283757][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3568.434345][ T7389] loop4: detected capacity change from 0 to 512 [ 3568.540587][ T7389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3568.549923][ T7389] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3568.791643][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10988'. [ 3568.821983][ T7356] chnl_net:caif_netlink_parms(): no params data found [ 3569.241105][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10991'. [ 3569.473037][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 3569.504306][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 3569.547541][ T7356] device bridge_slave_0 entered promiscuous mode [ 3569.593764][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 3569.632723][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 3569.685815][ T7356] device bridge_slave_1 entered promiscuous mode [ 3569.708295][T32248] Bluetooth: hci3: command 0x0409 tx timeout [ 3569.897846][ T7407] lo speed is unknown, defaulting to 1000 [ 3569.985130][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3570.013565][ T4412] device bond1 left promiscuous mode [ 3570.058095][ T4412] bridge0: port 3(bond1) entered disabled state [ 3570.080188][ T4412] device bridge_slave_1 left promiscuous mode [ 3570.086489][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 3570.112675][ T4412] device bridge_slave_0 left promiscuous mode [ 3570.128228][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 3570.350215][ T7419] loop7: detected capacity change from 0 to 1024 [ 3570.423546][ T7419] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 3570.541774][ T4412] bond1 (unregistering): Released all slaves [ 3570.603045][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3571.205412][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 3571.263532][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 3571.327127][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3571.388679][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3571.659623][ T4412] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3571.751070][T23897] Bluetooth: hci3: command 0x041b tx timeout [ 3572.138356][ T4412] bond0 (unregistering): Released all slaves [ 3572.201144][ T7437] loop7: detected capacity change from 0 to 512 [ 3572.277782][ T7437] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 3572.314687][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3572.324765][ T7437] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3572.329944][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3572.360523][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11001'. [ 3572.521099][ T7356] team0: Port device team_slave_0 added [ 3572.545296][ T7356] team0: Port device team_slave_1 added [ 3572.630838][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3572.650206][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3572.679646][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3572.727547][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3572.734713][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3572.800436][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3572.879957][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 3572.924466][ T7451] loop4: detected capacity change from 0 to 1024 [ 3572.951175][ T7356] device hsr_slave_0 entered promiscuous mode [ 3572.958673][ T7356] device hsr_slave_1 entered promiscuous mode [ 3572.999067][ T7451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0002] [ 3573.016800][ T7451] System zones: 0-1, 3-12 [ 3573.022426][ T7451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3573.038569][ T7455] loop2: detected capacity change from 0 to 1024 [ 3573.159362][ T7455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3573.223621][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 3573.223636][ T26] audit: type=1800 audit(2000001707.903:1908): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11010" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3573.224817][ T3204] EXT4-fs (loop4): unmounting filesystem. [ 3573.263836][ T26] audit: type=1800 audit(2000001707.943:1909): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11010" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 3573.463548][ T1500] EXT4-fs (loop2): unmounting filesystem. [ 3573.813953][ T7356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3573.828808][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11016'. [ 3573.834791][T23897] Bluetooth: hci3: command 0x040f tx timeout [ 3573.843991][ T7356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3573.872866][ T7356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3573.894577][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11017'. [ 3573.925591][ T7356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3574.130055][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3574.151359][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3574.161735][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3574.190981][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 3574.202358][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3574.215427][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3574.224680][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 3574.231861][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3574.243814][T22936] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 3574.260562][T22936] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 3574.264835][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3574.283845][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3574.288005][T22936] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 3574.294592][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3574.312272][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 3574.319433][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3574.333863][T22936] hid-generic 0003:0004:0000.0011: hidraw0: USB HID vffffff.ff Device [syz0] on syz1 [ 3574.339345][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3574.388484][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3574.409084][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3574.446693][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3574.480706][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3574.503071][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3574.520366][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3574.537514][ T7483] loop9: detected capacity change from 0 to 1024 [ 3574.566151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3574.576086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3574.597112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3574.617099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3574.628487][ T7483] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3574.643396][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3574.661313][ T26] audit: type=1800 audit(2000001709.344:1910): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11022" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3574.716391][ T26] audit: type=1800 audit(2000001709.364:1911): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11022" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3574.791760][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3574.980859][ T7497] bridge0: port 1(macvlan2) entered blocking state [ 3575.013303][ T7497] bridge0: port 1(macvlan2) entered disabled state [ 3575.100632][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11026'. [ 3575.274784][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11028'. [ 3575.427177][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3575.434696][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3575.470289][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3575.527357][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3575.544164][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3575.592669][ T7356] device veth0_vlan entered promiscuous mode [ 3575.631336][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3575.649593][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3575.676671][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3575.695458][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3575.700348][ T7516] loop2: detected capacity change from 0 to 164 [ 3575.724262][ T7516] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 3575.740885][ T7356] device veth1_vlan entered promiscuous mode [ 3575.814230][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3575.834048][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3575.858639][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3575.863556][ T7518] loop9: detected capacity change from 0 to 128 [ 3575.872406][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3575.905037][T23897] Bluetooth: hci3: command 0x0419 tx timeout [ 3575.921132][ T7356] device veth0_macvtap entered promiscuous mode [ 3575.954150][ T7356] device veth1_macvtap entered promiscuous mode [ 3575.964858][ T7520] netlink: 'syz.2.11035': attribute type 1 has an invalid length. [ 3575.974061][ T7520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11035'. [ 3576.022218][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3576.044992][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3576.056578][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3576.077993][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3576.099072][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3576.145554][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3576.153040][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3576.174759][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3576.210180][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3576.236222][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3576.255647][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3576.264451][ T7524] loop9: detected capacity change from 0 to 1024 [ 3576.272343][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3576.393199][ T7524] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 3576.425484][ T7356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3576.434578][ T7356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3576.443487][ T7356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3576.452697][ T7356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3576.462034][ T26] audit: type=1800 audit(2000001711.144:1912): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11036" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3576.487361][ T26] audit: type=1800 audit(2000001711.144:1913): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11036" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 3576.555309][ T1227] EXT4-fs (loop7): unmounting filesystem. [ 3576.635106][T32674] EXT4-fs (loop9): unmounting filesystem. [ 3576.735904][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3576.744447][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3576.811876][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3576.840159][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3576.871450][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3576.904317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3577.030909][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11041'. [ 3577.051684][ T26] audit: type=1326 audit(2000001711.735:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.9.11040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3577.108334][ T7529] syz.2.11037 (7529) used greatest stack depth: 17088 bytes left [ 3577.120261][ T26] audit: type=1326 audit(2000001711.765:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.9.11040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3577.166675][ T26] audit: type=1326 audit(2000001711.765:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.9.11040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3577.224336][ T26] audit: type=1326 audit(2000001711.765:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.9.11040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefabf8e929 code=0x7ffc0000 [ 3577.422841][ T4411] [ 3577.425224][ T4411] ====================================================== [ 3577.432246][ T4411] WARNING: possible circular locking dependency detected [ 3577.439277][ T4411] 6.1.141-syzkaller #0 Not tainted [ 3577.444412][ T4411] ------------------------------------------------------ [ 3577.451432][ T4411] kworker/u4:11/4411 is trying to acquire lock: [ 3577.457675][ T4411] ffff8880b8e281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 3577.466321][ T4411] [ 3577.466321][ T4411] but task is already holding lock: [ 3577.473685][ T4411] ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 3577.482227][ T4411] [ 3577.482227][ T4411] which lock already depends on the new lock. [ 3577.482227][ T4411] [ 3577.492630][ T4411] [ 3577.492630][ T4411] the existing dependency chain (in reverse order) is: [ 3577.501646][ T4411] [ 3577.501646][ T4411] -> #1 (&base->lock){-.-.}-{2:2}: [ 3577.508960][ T4411] _raw_spin_lock_irqsave+0xa4/0xf0 [ 3577.514697][ T4411] lock_timer_base+0x123/0x270 [ 3577.519999][ T4411] __mod_timer+0x117/0xd20 [ 3577.524951][ T4411] queue_delayed_work_on+0x126/0x1e0 [ 3577.530775][ T4411] kvfree_call_rcu+0x4cb/0x870 [ 3577.536078][ T4411] rtnl_register_internal+0x489/0x590 [ 3577.541978][ T4411] rtnl_register+0x2e/0x70 [ 3577.546923][ T4411] ip_rt_init+0x323/0x3b5 [ 3577.551827][ T4411] ip_init+0xa/0x14 [ 3577.556167][ T4411] inet_init+0x2bd/0x3cf [ 3577.560932][ T4411] do_one_initcall+0x214/0x7a0 [ 3577.566228][ T4411] do_initcall_level+0x137/0x1e4 [ 3577.571701][ T4411] do_initcalls+0x4b/0x8a [ 3577.576553][ T4411] kernel_init_freeable+0x3fa/0x5ac [ 3577.582273][ T4411] kernel_init+0x19/0x1b0 [ 3577.587129][ T4411] ret_from_fork+0x1f/0x30 [ 3577.592074][ T4411] [ 3577.592074][ T4411] -> #0 (krc.lock){..-.}-{2:2}: [ 3577.599114][ T4411] __lock_acquire+0x2cf8/0x7c50 [ 3577.604495][ T4411] lock_acquire+0x1b4/0x490 [ 3577.609528][ T4411] _raw_spin_lock+0x2a/0x40 [ 3577.614566][ T4411] kvfree_call_rcu+0x184/0x870 [ 3577.619861][ T4411] trie_delete_elem+0x52d/0x690 [ 3577.625241][ T4411] bpf_prog_d46ba5bef82912c0+0x3d/0x41 [ 3577.631237][ T4411] bpf_trace_run3+0x1e3/0x400 [ 3577.636446][ T4411] enqueue_timer+0x411/0x5c0 [ 3577.641561][ T4411] __mod_timer+0x8e1/0xd20 [ 3577.646509][ T4411] queue_delayed_work_on+0x126/0x1e0 [ 3577.652338][ T4411] process_one_work+0x898/0x1160 [ 3577.657806][ T4411] worker_thread+0xaa2/0x1250 [ 3577.663030][ T4411] kthread+0x29d/0x330 [ 3577.667629][ T4411] ret_from_fork+0x1f/0x30 [ 3577.672576][ T4411] [ 3577.672576][ T4411] other info that might help us debug this: [ 3577.672576][ T4411] [ 3577.682800][ T4411] Possible unsafe locking scenario: [ 3577.682800][ T4411] [ 3577.690251][ T4411] CPU0 CPU1 [ 3577.695614][ T4411] ---- ---- [ 3577.700977][ T4411] lock(&base->lock); [ 3577.705060][ T4411] lock(krc.lock); [ 3577.711388][ T4411] lock(&base->lock); [ 3577.717981][ T4411] lock(krc.lock); [ 3577.721805][ T4411] [ 3577.721805][ T4411] *** DEADLOCK *** [ 3577.721805][ T4411] [ 3577.729950][ T4411] 4 locks held by kworker/u4:11/4411: [ 3577.735323][ T4411] #0: ffff88814cec3938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 3577.746037][ T4411] #1: ffffc900041a7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 3577.758570][ T4411] #2: ffff8880b8e28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 3577.767547][ T4411] #3: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf0/0x400 [ 3577.776902][ T4411] [ 3577.776902][ T4411] stack backtrace: [ 3577.782828][ T4411] CPU: 0 PID: 4411 Comm: kworker/u4:11 Not tainted 6.1.141-syzkaller #0 [ 3577.791171][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3577.801418][ T4411] Workqueue: bat_events batadv_nc_worker [ 3577.807110][ T4411] Call Trace: [ 3577.810407][ T4411] [ 3577.813347][ T4411] dump_stack_lvl+0x168/0x22e [ 3577.818066][ T4411] ? load_image+0x3b0/0x3b0 [ 3577.822596][ T4411] ? show_regs_print_info+0x12/0x12 [ 3577.827819][ T4411] ? print_circular_bug+0x12b/0x1a0 [ 3577.833133][ T4411] check_noncircular+0x274/0x310 [ 3577.838104][ T4411] ? add_chain_block+0x940/0x940 [ 3577.843066][ T4411] ? lockdep_lock+0xdc/0x1e0 [ 3577.847772][ T4411] ? _find_first_zero_bit+0xcf/0x100 [ 3577.853088][ T4411] __lock_acquire+0x2cf8/0x7c50 [ 3577.857959][ T4411] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 3577.863900][ T4411] ? verify_lock_unused+0x140/0x140 [ 3577.869116][ T4411] ? kasan_save_stack+0x4c/0x60 [ 3577.873986][ T4411] ? kasan_save_stack+0x3a/0x60 [ 3577.878867][ T4411] ? __kasan_record_aux_stack+0xb2/0xc0 [ 3577.884460][ T4411] ? kvfree_call_rcu+0x108/0x870 [ 3577.889414][ T4411] ? trie_delete_elem+0x52d/0x690 [ 3577.894474][ T4411] ? bpf_prog_d46ba5bef82912c0+0x3d/0x41 [ 3577.900115][ T4411] ? bpf_trace_run3+0x1e3/0x400 [ 3577.904985][ T4411] ? enqueue_timer+0x411/0x5c0 [ 3577.909773][ T4411] ? __mod_timer+0x8e1/0xd20 [ 3577.914400][ T4411] ? queue_delayed_work_on+0x126/0x1e0 [ 3577.919879][ T4411] ? process_one_work+0x898/0x1160 [ 3577.925000][ T4411] ? worker_thread+0xaa2/0x1250 [ 3577.929856][ T4411] ? kthread+0x29d/0x330 [ 3577.934110][ T4411] ? ret_from_fork+0x1f/0x30 [ 3577.938751][ T4411] lock_acquire+0x1b4/0x490 [ 3577.943273][ T4411] ? kvfree_call_rcu+0x184/0x870 [ 3577.948230][ T4411] ? read_lock_is_recursive+0x10/0x10 [ 3577.953629][ T4411] ? __phys_addr+0xb6/0x170 [ 3577.958148][ T4411] _raw_spin_lock+0x2a/0x40 [ 3577.962685][ T4411] ? kvfree_call_rcu+0x184/0x870 [ 3577.967641][ T4411] kvfree_call_rcu+0x184/0x870 [ 3577.972438][ T4411] ? rcu_leak_callback+0x10/0x10 [ 3577.977413][ T4411] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 3577.983335][ T4411] ? _raw_spin_unlock+0x40/0x40 [ 3577.988236][ T4411] trie_delete_elem+0x52d/0x690 [ 3577.993112][ T4411] bpf_prog_d46ba5bef82912c0+0x3d/0x41 [ 3577.998606][ T4411] bpf_trace_run3+0x1e3/0x400 [ 3578.003306][ T4411] ? bpf_trace_run3+0xf0/0x400 [ 3578.008084][ T4411] ? bpf_trace_run2+0x3b0/0x3b0 [ 3578.012950][ T4411] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 3578.018861][ T4411] ? _raw_spin_unlock+0x40/0x40 [ 3578.023736][ T4411] ? do_raw_spin_lock+0x11d/0x280 [ 3578.028782][ T4411] ? __rwlock_init+0x140/0x140 [ 3578.033569][ T4411] enqueue_timer+0x411/0x5c0 [ 3578.038170][ T4411] __mod_timer+0x8e1/0xd20 [ 3578.042604][ T4411] ? queue_delayed_work_on+0xc8/0x1e0 [ 3578.047992][ T4411] queue_delayed_work_on+0x126/0x1e0 [ 3578.053295][ T4411] ? delayed_work_timer_fn+0x80/0x80 [ 3578.058600][ T4411] ? batadv_nc_process_nc_paths+0xba/0x390 [ 3578.064421][ T4411] ? __msecs_to_jiffies+0x1a/0x40 [ 3578.069469][ T4411] ? batadv_nc_worker+0x4f4/0x600 [ 3578.074502][ T4411] ? process_one_work+0x7a1/0x1160 [ 3578.079627][ T4411] process_one_work+0x898/0x1160 [ 3578.084579][ T4411] ? worker_detach_from_pool+0x240/0x240 [ 3578.090306][ T4411] ? _raw_spin_lock_irq+0xab/0xe0 [ 3578.095344][ T4411] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 3578.100732][ T4411] ? kthread_data+0x4b/0xc0 [ 3578.105269][ T4411] worker_thread+0xaa2/0x1250 [ 3578.109996][ T4411] kthread+0x29d/0x330 [ 3578.114113][ T4411] ? worker_clr_flags+0x1a0/0x1a0 [ 3578.119259][ T4411] ? kthread_blkcg+0xd0/0xd0 [ 3578.123891][ T4411] ret_from_fork+0x1f/0x30 [ 3578.128347][ T4411]