last executing test programs: 6m53.714887329s ago: executing program 3 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8, 0x1, 0xf, 0x3e8, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x68, 0x0, 0xc3, 0x2f, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x68, [@multicast2, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@broadcast, 0x7}, {@multicast1, 0x4}, {@multicast2, 0x2959}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @private, 0x0}, &(0x7f0000000440)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x1b, 0x1, 0x5, 0x25, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r1, 0x602, 0x70bd26, 0x7fffffff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000240)={{0x81, 0x404003}, {0x8, 0x3ff}, 0x0, 0x3}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r12, 0x29, 0x6, 0x0, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r11, &(0x7f0000000000)=ANY=[], 0x6) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r13, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x2b) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r10, 0x2f}, 0x20) 6m52.156495528s ago: executing program 3 (id=586): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x28) listen(r0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x72, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x30, 0x41}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x10000a0) r8 = dup(r6) inotify_rm_watch(r8, r7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffb}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x203, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xffffffff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x6, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x81000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc004) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840017000600000070087300000000002242d56d1539dc83d731bdbd6f7fc09ba9b65dad28ad10d06cb68600"/66], 0x18}], 0x1, 0x0) 6m51.702847617s ago: executing program 3 (id=588): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x191, 0x4) 6m50.266356235s ago: executing program 3 (id=595): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = syz_open_dev$audion(&(0x7f0000000800), 0x0, 0x40040) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) tkill(r1, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000700)={&(0x7f0000000d80)=ANY=[], 0x1310}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) pwrite64(r2, &(0x7f0000000100)="0a04", 0x2, 0x8000000000000001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_io_uring_setup(0x4d9, &(0x7f0000000780)={0x0, 0x74a6, 0x40, 0x0, 0xb2}, &(0x7f0000000280), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000880)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002ac0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) gettid() process_vm_writev(r1, &(0x7f0000003340)=[{&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000540)=""/48, 0x30}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/73, 0x49}, {&(0x7f00000030c0)=""/123, 0x7b}, {&(0x7f0000003140)=""/242, 0xf2}, {&(0x7f0000000d80)=""/207, 0xcf}], 0x7, &(0x7f0000000240)=[{&(0x7f0000217f28)=""/213, 0xd5}, {&(0x7f00000033c0)=""/4104, 0x1008}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e9f9d0f974a64373da9188cbfdf93c0e45d0fae8cc131d9b9f3e1a97bcbfcffc4cdbdd81b143482e0b7b517c0d20de48fee7531ff7b8b3da1e8f6acc4780bd470447dfff03c1ae32ef9304c7c938de2fdfb965434b016f86164abc558d13a3457cb77ae01e825e578eb87306ed873cb0719d420ec6bbd25a87e78d22744be18fd9bda3ae1c9e40e6c24519"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 6m49.547078567s ago: executing program 3 (id=600): r0 = syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x0, 0x21d, &(0x7f00000004c0)="$eJzsmb9rFEEUx7+zu7d7BhUttLBZi4ARzN7unkoaQW1FEBJRy8OsIbrJyt0WuYBgsLHxD/AfUbjKws5GLKwsYkCwMKWNgiPzy5tkk9U7PZu8TzH7ndl5b9682byBHAiCOLBsffy6+ezq3MI5AIcxjUCPf3aHcxxr/ofnbkPL16tHHw12+2MAOB/2vd+s7wN4dcUFHiu3nH/j9vtp7XMBjtSCm3BwVutbYIhMrFygZAaGO3r4vqWLQ1rkGbtb5Iv3lvMsFk0imlQ0bYDviH97g2ERQFMvwaz4ev31B50c6CqRZ0Y0uFmn8mpUUZc/D1ub4oQuWSkQ53X76ZMN0Y/0eGzlL4GDROs2GOa1nkOAKIpC3c0Sa/+nvKF/Vx2btf8/3Unz7xIxqjg+WzvHbGLSYfzgE/Hsj3UEkxEijtGtnLBq5df4KfZIwhgxs14fx1Tu1Ij4g/415+T24E3V6tO/ztjg/52OLFwAKq/eTeX5dXvk7TUtTuzwc9rOjyXMF7jvJ6HqB/OAM3oqA+eedSu0ypWHrV5/fXZ5pbOULWWradq+GJ+P4wtpS9Zm1dbUv6asT1NW/WuoK2PXPLG4j7VOWXaTNaDsJr7pp6q1Ku78i+KLtHNk/XMw851zc73IbQd7xyPvv0DZMdmbcfcNniAIgiAIgiAIgiAIgiAIoobwvXpeVo8jQIiX0P+rZOY3sSpeekMa/AwAAP//wyRe/Q==") syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@discard}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c400001719000100fcffffff00000000ac141423000000000000000000000000fe800000000000000000f6ffffffffa94e2300004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000001040000000000100000000000000000000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000003000000000000000000000000000000ff0000000000000000000000b16b6e0001000300000000000c0015005b07350007000000"], 0xc4}}, 0x24000010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xffff, 0x2}, &(0x7f0000000080)=0x90) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) getdents64(r2, &(0x7f00000000c0)=""/16, 0x10) openat(r0, &(0x7f0000000040)='./file0\x00', 0xd0001, 0x24) 6m47.442931717s ago: executing program 3 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2040400) r6 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x2000, 0x6, 0x0) syz_open_dev$dri(0x0, 0xfffffffffffffff9, 0x101000) r7 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b86080003400000475108000340000000030800"], 0xdc}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f00000001c0)=""/152, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 6m47.000321145s ago: executing program 32 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2040400) r6 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x2000, 0x6, 0x0) syz_open_dev$dri(0x0, 0xfffffffffffffff9, 0x101000) r7 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b86080003400000475108000340000000030800"], 0xdc}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f00000001c0)=""/152, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 4m23.716853844s ago: executing program 4 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8, 0x1, 0xf, 0x3e8, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x68, 0x0, 0xc3, 0x2f, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x68, [@multicast2, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@broadcast, 0x7}, {@multicast1, 0x4}, {@multicast2, 0x2959}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @private, 0x0}, &(0x7f0000000440)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x1b, 0x1, 0x5, 0x25, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r1, 0x602, 0x70bd26, 0x7fffffff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000240)={{0x81, 0x404003}, {0x8, 0x3ff}, 0x0, 0x3}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r11, 0x29, 0x6, 0x0, 0x0) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000000)=ANY=[], 0x6) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x2b) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r9, r9, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r14, 0x2f, 0x8, 0x4, @void, @value=r9}, 0x20) 4m23.529223657s ago: executing program 4 (id=1384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x17, 0x0, &(0x7f0000000000)) 4m23.38995849s ago: executing program 4 (id=1385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m22.763188802s ago: executing program 4 (id=1389): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x5c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xb, 0x4) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x82c) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000100)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c636f6465706167653d63703835302c63726561746f723d40ff7f5c2c706172743d3078303030303030303030303030303030332c706172743d3078303030303030303030303030303030342c00e48ab395178be648515dde7dbbd8402d28"], 0x11, 0x2c6, &(0x7f0000005bc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x9) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x8, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000003c0)={&(0x7f0000000340)=[r2, r4, 0x0, 0x0], 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000400)={0x2, 0x200, 0xf, 0x8, 0x8, 0x7, 0x0, 0x7fffffff, 0x1, 0x8, 0x5, 0x3, 0x6, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) 4m17.521908061s ago: executing program 4 (id=1399): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c}, 0x28) listen(0xffffffffffffffff, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x72, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x30, 0x41}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) r7 = dup(r5) inotify_rm_watch(r7, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f0000000280)='/dev/audio1\x00', 0x40, 0xfc, &(0x7f00000003c0)={0x8000, 0x37, 0x3, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffb}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x203, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xffffffff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x6, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x81000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc004) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840017000600000070087300000000002242d56d1539dc83d731bdbd6f7fc09ba9b65dad28ad10d06cb68600"/66], 0x18}], 0x1, 0x0) 4m15.047197587s ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 4m14.630243395s ago: executing program 33 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 4.26728636s ago: executing program 2 (id=3017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 4.195997211s ago: executing program 2 (id=3019): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioprio_get$uid(0x3, 0xee01) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.024093582s ago: executing program 5 (id=3043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.885375665s ago: executing program 5 (id=3044): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.645098999s ago: executing program 1 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) 1.58589615s ago: executing program 5 (id=3047): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x80, 0xc, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) 1.467080942s ago: executing program 5 (id=3049): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 982.425132ms ago: executing program 2 (id=3053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 810.862445ms ago: executing program 5 (id=3055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 810.771375ms ago: executing program 2 (id=3056): r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000000)="d2", 0x1, 0x4054, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 764.027205ms ago: executing program 0 (id=3057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x39, 0x0}, 0x4000001) 726.224697ms ago: executing program 1 (id=3058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 659.222067ms ago: executing program 2 (id=3059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 615.015298ms ago: executing program 0 (id=3060): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x27) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') 557.30158ms ago: executing program 1 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 499.153821ms ago: executing program 5 (id=3062): r0 = socket$caif_stream(0x25, 0x1, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000020000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000cda30000000085000000240000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001600010026bd7000ffdbdf", @ANYRES32=0x0, @ANYBLOB="08000a00010000001400010000000000000000000000000000000000080008009004000014000100ff0100000000000000011400060000000000070000000000000009000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000009c0)=';', 0x1) sendfile(r6, r5, 0x0, 0x7fffeffd) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800cfdfa794a9dd63c590a67e2919fa6b3a090d952326fddb22b6238b23a21f5cb0d932d3e3c8425ee4c5d0a7aa33cba05621b8c472a0193e7c750f22189b751058496e4f7bd4104b978294e582f0a23f94981c9a1388b5d4bc6fa2fa6b7f92a405a71e5f8c4fe7", @ANYRES64=r5, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000203b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) socket(0x10, 0x803, 0x0) 498.994271ms ago: executing program 0 (id=3063): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) 415.445952ms ago: executing program 1 (id=3064): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, 0x0, 0x2000007ff) 325.131494ms ago: executing program 2 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) socket$inet6(0x10, 0x3, 0x0) 300.048454ms ago: executing program 0 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) 151.280687ms ago: executing program 1 (id=3067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x4, 0xdffc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 150.964697ms ago: executing program 0 (id=3068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0xf5c6, 0x400, 0x0, 0x10b}, &(0x7f0000ff0000), &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="8b36b11f738e416e07e1eb02818377dd3ccd0169895c8e93d1752fa82adde0b99bb5d029cc151362e94d86d68a9891fb71de7c1245b2f25447b4631d5818"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x218002}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0xfec4}]}, 0x34}}, 0x4004000) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 28.899119ms ago: executing program 1 (id=3069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 0s ago: executing program 0 (id=3070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56741, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5b6a, 0x6, 0x1, 0x9, 0x5, 0x1, 0x1, 0x10000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): comm="syz.5.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 497.704385][ T28] audit: type=1326 audit(2000000013.014:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.5.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 497.764001][ T28] audit: type=1326 audit(2000000013.014:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.5.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 497.809634][ T28] audit: type=1326 audit(2000000013.025:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.5.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 497.836544][ T28] audit: type=1326 audit(2000000013.132:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 497.868780][ T28] audit: type=1326 audit(2000000013.132:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 497.893623][ T28] audit: type=1326 audit(2000000013.132:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 497.920503][ T28] audit: type=1326 audit(2000000013.132:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 497.962288][ T28] audit: type=1326 audit(2000000013.143:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 498.112208][T11990] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 498.381079][T11997] loop2: detected capacity change from 0 to 1024 [ 498.418454][T11997] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 498.469638][T11997] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 498.518576][T11997] JBD2: no valid journal superblock found [ 498.538780][T11997] EXT4-fs (loop2): Could not load journal inode [ 499.018333][T12013] loop1: detected capacity change from 0 to 512 [ 499.102681][T12013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.159772][T12013] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.754920][T12022] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 499.801391][T12013] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1696 with error 28 [ 499.819134][T12013] EXT4-fs (loop1): This should not happen!! Data will be lost [ 499.819134][T12013] [ 499.830784][T12013] EXT4-fs (loop1): Total free blocks count 0 [ 499.837164][T12013] EXT4-fs (loop1): Free/Dirty block details [ 499.843302][T12013] EXT4-fs (loop1): free_blocks=39626 [ 499.849858][T12013] EXT4-fs (loop1): dirty_blocks=1696 [ 499.858932][T12013] EXT4-fs (loop1): Block reservation details [ 499.866602][T12013] EXT4-fs (loop1): i_reserved_data_blocks=1696 [ 500.215531][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.530061][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1996'. [ 501.587879][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 501.697128][T12114] loop9: detected capacity change from 0 to 7 [ 501.713120][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.722382][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.733736][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.736491][ T9] usb 2-1: device descriptor read/64, error -71 [ 501.742970][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.760089][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.769364][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.779096][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.788340][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.801668][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.810906][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.819216][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.828457][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.842006][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.851538][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.862886][T12114] ldm_validate_partition_table(): Disk read failed. [ 501.870599][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.879834][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.888633][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.897912][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.908174][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.917505][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 501.928486][T12114] Dev loop9: unable to read RDB block 0 [ 501.938980][T12114] loop9: unable to read partition table [ 501.948926][T12114] loop9: partition table beyond EOD, truncated [ 501.965496][T12114] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 501.965496][T12114] ) failed (rc=-5) [ 501.984400][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2002'. [ 502.006885][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 502.103785][T12120] loop2: detected capacity change from 0 to 1024 [ 502.119993][T12120] EXT4-fs: Ignoring removed nobh option [ 502.126619][T12120] EXT4-fs: Ignoring removed nobh option [ 502.143731][T12120] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 502.161573][T12120] EXT4-fs error (device loop2): ext4_get_journal_inode:5807: comm syz.2.2003: inode #4294967295: comm syz.2.2003: iget: illegal inode # [ 502.166536][ T9] usb 2-1: device descriptor read/64, error -71 [ 502.190047][T12120] EXT4-fs (loop2): no journal found [ 502.198121][T12120] EXT4-fs (loop2): can't get journal size [ 502.227672][T12120] EXT4-fs (loop2): failed to initialize system zone (-22) [ 502.237313][T12120] EXT4-fs (loop2): mount failed [ 502.311228][ T9] usb usb2-port1: attempt power cycle [ 502.365399][T12130] bridge_slave_0: default FDB implementation only supports local addresses [ 502.472220][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 502.472237][ T28] audit: type=1326 audit(2000000018.271:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.504817][ T28] audit: type=1326 audit(2000000018.271:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.505568][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 502.543712][ T28] audit: type=1326 audit(2000000018.271:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.549696][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 502.573385][ T28] audit: type=1326 audit(2000000018.271:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.647661][ T28] audit: type=1326 audit(2000000018.271:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.687658][ T28] audit: type=1326 audit(2000000018.282:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.725118][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 502.736452][ T28] audit: type=1326 audit(2000000018.282:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.764572][ T28] audit: type=1326 audit(2000000018.282:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.789237][ T28] audit: type=1326 audit(2000000018.282:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.813401][ T28] audit: type=1326 audit(2000000018.282:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12135 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 502.813562][ T9] usb 2-1: device descriptor read/8, error -71 [ 503.097452][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 503.136612][ T9] usb 2-1: device descriptor read/8, error -71 [ 503.190749][T12152] netlink: 'syz.5.2016': attribute type 27 has an invalid length. [ 503.258725][ T9] usb usb2-port1: unable to enumerate USB device [ 504.567062][T12170] syz.1.2020[12170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.673982][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.697323][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.974339][T12152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.002846][T12152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.277556][T12152] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.288073][T12152] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.297114][T12152] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.306133][T12152] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.365672][T12154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.375597][T12154] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.388205][T12154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.424040][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2018'. [ 505.437305][T12172] : renamed from bond0 (while UP) [ 505.541195][T12174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 505.612457][T12200] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 505.963747][T12211] loop2: detected capacity change from 0 to 256 [ 506.012706][T12215] openvswitch: netlink: Message has 8999 unknown bytes. [ 506.116692][T12211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 506.434417][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 507.545196][ T28] kauditd_printk_skb: 236 callbacks suppressed [ 507.545212][ T28] audit: type=1326 audit(2000000023.721:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.2.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 507.617077][ T28] audit: type=1326 audit(2000000023.754:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.2.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 507.690808][ T28] audit: type=1326 audit(2000000023.775:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.2.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 507.739664][ T28] audit: type=1326 audit(2000000023.775:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.2.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 507.798307][ T28] audit: type=1326 audit(2000000023.775:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.2.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.256549][ T28] audit: type=1326 audit(2000000024.472:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.321718][ T28] audit: type=1326 audit(2000000024.472:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.382408][ T28] audit: type=1326 audit(2000000024.526:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.428926][ T28] audit: type=1326 audit(2000000024.526:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.474488][ T28] audit: type=1326 audit(2000000024.526:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 508.612255][T12308] loop1: detected capacity change from 0 to 512 [ 508.623981][T12308] journal_path: Lookup failure for './bus' [ 508.633375][T12308] EXT4-fs: error: could not find journal device path [ 509.195743][T12334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 509.443306][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2087'. [ 509.487220][T12343] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2085'. [ 509.712431][T12355] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 510.061995][T12363] netlink: 'syz.1.2095': attribute type 12 has an invalid length. [ 510.273379][T12373] syz.1.2099[12373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.273526][T12373] syz.1.2099[12373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.082811][T12388] loop1: detected capacity change from 0 to 1024 [ 511.518475][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 511.539809][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2109'. [ 511.539838][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'. [ 511.541295][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2109'. [ 511.541320][T12395] netlink: 'syz.1.2109': attribute type 6 has an invalid length. [ 511.671659][T12394] syz.2.2108[12394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.722064][T12399] netlink: 'syz.1.2111': attribute type 7 has an invalid length. [ 511.955451][T12402] loop2: detected capacity change from 0 to 8192 [ 513.020977][T12428] loop2: detected capacity change from 0 to 8192 [ 513.221284][T12436] loop2: detected capacity change from 0 to 512 [ 513.244568][T12436] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 513.260696][T12436] EXT4-fs (loop2): orphan cleanup on readonly fs [ 513.279772][T12436] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.2123: corrupted inode contents [ 513.296583][T12436] EXT4-fs (loop2): Remounting filesystem read-only [ 513.303499][T12436] EXT4-fs (loop2): 1 truncate cleaned up [ 513.317829][ T1097] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 513.339650][ T1097] __quota_error: 256 callbacks suppressed [ 513.339668][ T1097] Quota error (device loop2): write_blk: dquota write failed [ 513.364203][ T1097] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 513.377346][ T1097] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 513.388481][ T28] audit: type=1326 audit(2000000029.966:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.5.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 513.394329][ T1097] Quota error (device loop2): write_blk: dquota write failed [ 513.418879][ T1097] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 513.433846][ T1097] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 513.448597][ T28] audit: type=1326 audit(2000000029.987:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.5.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 513.448781][ T1097] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 513.490055][ T28] audit: type=1326 audit(2000000030.030:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.5.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 513.508904][ T1097] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.541769][T12436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 513.564621][ T28] audit: type=1326 audit(2000000030.030:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.5.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 513.611470][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 513.682555][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.102226][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 514.111573][T12470] netem: change failed [ 514.391649][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2145'. [ 514.578133][ T27] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 514.603731][ T27] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 514.619483][T12488] lo speed is unknown, defaulting to 1000 [ 514.636183][ T27] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 514.658547][ T27] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 515.355952][T12501] loop2: detected capacity change from 0 to 512 [ 515.384799][T12501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 515.417954][T12501] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2151: iget: bad extended attribute block 1 [ 515.476204][T12501] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2151: couldn't read orphan inode 15 (err -117) [ 515.552191][T12501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.660955][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.842583][ T8] Process accounting resumed [ 516.087566][T12534] syz.1.2167[12534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.087716][T12534] syz.1.2167[12534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.673085][T12548] loop2: detected capacity change from 0 to 128 [ 516.719822][T12548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.729691][T12548] FAT-fs (loop2): Filesystem has been set read-only [ 516.741182][T12548] syz.2.2173: attempt to access beyond end of device [ 516.741182][T12548] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 516.788719][T12548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.798140][T12548] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.812422][T12548] syz.2.2173: attempt to access beyond end of device [ 516.812422][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.837375][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2175'. [ 516.846648][T12548] syz.2.2173: attempt to access beyond end of device [ 516.846648][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.871843][T12548] syz.2.2173: attempt to access beyond end of device [ 516.871843][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.906819][T12548] syz.2.2173: attempt to access beyond end of device [ 516.906819][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.938298][T12548] syz.2.2173: attempt to access beyond end of device [ 516.938298][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.969211][T12548] syz.2.2173: attempt to access beyond end of device [ 516.969211][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 516.998823][T12548] syz.2.2173: attempt to access beyond end of device [ 516.998823][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 517.017501][T12548] syz.2.2173: attempt to access beyond end of device [ 517.017501][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 517.032109][T12548] syz.2.2173: attempt to access beyond end of device [ 517.032109][T12548] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 517.982868][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 518.511894][T12605] loop2: detected capacity change from 0 to 1024 [ 518.519821][T12605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.551758][T12605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.658647][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.992299][T12616] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2201'. [ 519.415982][T12630] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2208'. [ 519.445766][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 519.445781][ T28] audit: type=1326 audit(2000000036.489:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.1.2209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x0 [ 519.694651][ T28] audit: type=1326 audit(2000000036.746:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 519.756096][ T28] audit: type=1326 audit(2000000036.779:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 519.793155][ T28] audit: type=1326 audit(2000000036.789:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 519.845298][ T28] audit: type=1326 audit(2000000036.789:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 519.868610][ T28] audit: type=1326 audit(2000000036.789:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 519.891513][ T28] audit: type=1326 audit(2000000036.843:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 519.915021][ T28] audit: type=1326 audit(2000000036.843:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 519.938103][ T28] audit: type=1326 audit(2000000036.864:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 519.968005][ T28] audit: type=1326 audit(2000000036.864:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 520.077062][T12646] loop2: detected capacity change from 0 to 128 [ 520.104443][T12646] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 520.146672][T12646] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 520.228695][T12650] syz.0.2218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 520.323118][ T993] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 521.879482][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 521.911630][T12704] bond1: entered promiscuous mode [ 521.916873][T12704] bond1: entered allmulticast mode [ 521.923423][T12704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.012821][T12711] loop2: detected capacity change from 0 to 2048 [ 522.079995][T12711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.139267][T12711] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.312571][ T6943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:15: bg 0: block 345: padding at end of block bitmap is not set [ 522.339015][ T6943] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 522.354323][ T6943] EXT4-fs (loop2): This should not happen!! Data will be lost [ 522.354323][ T6943] [ 522.371955][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.845613][T12740] loop2: detected capacity change from 0 to 512 [ 522.892141][T12740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.928195][T12744] program syz.5.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.941122][T12740] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.971100][T12744] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 523.100989][T12748] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2257'. [ 523.135669][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 523.308177][T12748] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2257'. [ 523.347140][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 523.667921][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.333863][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 524.430354][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 524.430372][ T28] audit: type=1326 audit(2000000041.832:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 524.476195][ T28] audit: type=1326 audit(2000000041.832:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 524.544663][ T28] audit: type=1326 audit(2000000041.832:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 524.605404][T12805] pim6reg: entered allmulticast mode [ 524.609161][ T28] audit: type=1326 audit(2000000041.832:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 524.659318][ T28] audit: type=1326 audit(2000000041.843:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 524.895523][T12821] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2289'. [ 524.911704][T12821] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2289'. [ 525.118335][T12831] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2293'. [ 525.266486][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2297'. [ 525.350765][T12843] program syz.2.2296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.386943][T12843] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 525.528739][T12843] loop2: detected capacity change from 0 to 1024 [ 525.537909][T12843] EXT4-fs: Ignoring removed nobh option [ 525.547762][T12843] EXT4-fs: inline encryption not supported [ 525.568046][T12843] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.630473][T12843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.114248][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.332273][T12872] IPVS: stopping backup sync thread 8299 ... [ 528.052347][ T28] audit: type=1326 audit(2000000045.716:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 528.114949][ T28] audit: type=1326 audit(2000000045.748:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 528.149478][ T28] audit: type=1326 audit(2000000045.748:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 528.267382][T12911] loop2: detected capacity change from 0 to 164 [ 528.298041][T12911] Unable to read rock-ridge attributes [ 528.709402][T12911] __nla_validate_parse: 1 callbacks suppressed [ 528.709421][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'. [ 528.807443][T12911] Unable to read rock-ridge attributes [ 528.895666][T12911] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 529.365086][T12933] loop2: detected capacity change from 0 to 128 [ 529.377203][ T28] audit: type=1326 audit(2000000047.132:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.411350][T12933] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.428310][ T28] audit: type=1326 audit(2000000047.132:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.461573][T12933] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.478748][ T28] audit: type=1326 audit(2000000047.143:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.525045][T12933] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.2331: checksumming directory block 0 [ 529.544153][ T28] audit: type=1326 audit(2000000047.143:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.607638][ T28] audit: type=1326 audit(2000000047.143:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.659610][T11579] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 529.674226][ T28] audit: type=1326 audit(2000000047.143:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.741326][ T28] audit: type=1326 audit(2000000047.143:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.778405][ T28] audit: type=1326 audit(2000000047.143:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.825946][ T28] audit: type=1326 audit(2000000047.143:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.858530][ T28] audit: type=1326 audit(2000000047.143:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12934 comm="syz.0.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf11d8eba9 code=0x7ffc0000 [ 529.922707][T12945] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2337'. [ 530.170920][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2342'. [ 530.242261][T12959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2344'. [ 530.285562][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 530.544259][T12974] loop2: detected capacity change from 0 to 1024 [ 530.583140][T12974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.631107][T12974] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.752867][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.900348][T12986] loop2: detected capacity change from 0 to 512 [ 530.914740][T12986] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 531.442694][T13003] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 531.449311][T13003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.458048][T13003] vhci_hcd vhci_hcd.0: Device attached [ 531.497306][T13003] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 531.504010][T13003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.528948][T13003] vhci_hcd vhci_hcd.0: Device attached [ 531.541934][T13014] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 531.548609][T13014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.559063][T13012] mmap: syz.0.2365 (13012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 531.562286][T13014] vhci_hcd vhci_hcd.0: Device attached [ 531.633133][T13003] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 531.639829][T13003] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 531.682608][T13003] vhci_hcd vhci_hcd.0: Device attached [ 531.697201][T13014] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 531.703901][T13014] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 531.745152][T13014] vhci_hcd vhci_hcd.0: Device attached [ 531.770130][T13003] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(21) [ 531.776825][T13003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.785485][T12187] usb 44-1: SetAddress Request (2) to port 0 [ 531.796838][T12187] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 531.818097][T13027] sch_fq: defrate 4294967295 ignored. [ 531.835508][T13014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 531.869554][T13003] vhci_hcd vhci_hcd.0: Device attached [ 531.874340][T13014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 531.923501][T13003] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(23) [ 531.930200][T13003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.978627][T13003] vhci_hcd vhci_hcd.0: Device attached [ 531.987235][T13014] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(31) [ 531.993925][T13014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 532.038869][T13014] vhci_hcd vhci_hcd.0: Device attached [ 532.112397][T13008] vhci_hcd: connection closed [ 532.112620][T13015] vhci_hcd: connection closed [ 532.112983][T13018] vhci_hcd: connection closed [ 532.117564][T13006] vhci_hcd: connection reset by peer [ 532.122355][T13021] vhci_hcd: connection closed [ 532.133774][T13029] vhci_hcd: connection closed [ 532.136235][T13032] vhci_hcd: connection closed [ 532.138884][ T6943] vhci_hcd: stop threads [ 532.156303][ T6943] vhci_hcd: release socket [ 532.164432][ T6943] vhci_hcd: disconnect device [ 532.170880][ T6943] vhci_hcd: stop threads [ 532.175183][ T6943] vhci_hcd: release socket [ 532.181701][ T6943] vhci_hcd: disconnect device [ 532.193294][ T6943] vhci_hcd: stop threads [ 532.204697][ T6943] vhci_hcd: release socket [ 532.225947][ T6943] vhci_hcd: disconnect device [ 532.240121][ T6943] vhci_hcd: stop threads [ 532.252037][ T6943] vhci_hcd: release socket [ 532.270400][ T6943] vhci_hcd: disconnect device [ 532.275918][ T6943] vhci_hcd: stop threads [ 532.280332][ T6943] vhci_hcd: release socket [ 532.288594][ T6943] vhci_hcd: disconnect device [ 532.298944][ T6943] vhci_hcd: stop threads [ 532.303336][ T6943] vhci_hcd: release socket [ 532.315520][ T6943] vhci_hcd: disconnect device [ 532.323786][ T6943] vhci_hcd: stop threads [ 532.334309][ T6943] vhci_hcd: release socket [ 532.340651][ T6943] vhci_hcd: disconnect device [ 532.444981][T13051] loop2: detected capacity change from 0 to 512 [ 532.506878][T13051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.544786][T13051] EXT4-fs (loop2): orphan cleanup on readonly fs [ 532.676503][T13051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2376: bg 0: block 248: padding at end of block bitmap is not set [ 532.716533][T13051] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2376: Failed to acquire dquot type 1 [ 532.766086][T13051] EXT4-fs (loop2): 1 truncate cleaned up [ 532.803902][T13051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.257338][T13038] vhci_hcd: connection closed [ 533.281373][ T6943] vhci_hcd: stop threads [ 533.301635][ T6943] vhci_hcd: release socket [ 533.329405][ T6943] vhci_hcd: disconnect device [ 534.556812][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 534.556830][ T28] audit: type=1326 audit(2000000052.700:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.604817][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.616967][ T28] audit: type=1326 audit(2000000052.733:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.639711][ T28] audit: type=1326 audit(2000000052.733:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.662529][ T28] audit: type=1326 audit(2000000052.733:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.685075][ T28] audit: type=1326 audit(2000000052.754:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.707875][ T28] audit: type=1326 audit(2000000052.754:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.730741][ T28] audit: type=1326 audit(2000000052.754:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.753227][ T28] audit: type=1326 audit(2000000052.754:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.775937][ T28] audit: type=1326 audit(2000000052.754:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.805703][ T28] audit: type=1326 audit(2000000052.775:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fbf99f8eba9 code=0x7ffc0000 [ 534.834686][T13081] program syz.5.2390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.586215][T12187] usb 44-1: device descriptor read/8, error -110 [ 536.593277][T13122] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 536.791440][ T27] vhci_hcd: vhci_device speed not set [ 536.917092][T13133] ALSA: seq fatal error: cannot create timer (-22) [ 537.586850][T12177] kernel write not supported for file bpf-prog (pid: 12177 comm: kworker/1:8) [ 537.804275][T12187] usb usb44-port1: attempt power cycle [ 538.323767][T13162] sd 0:0:1:0: device reset [ 538.451611][T12187] usb usb44-port1: unable to enumerate USB device [ 538.515522][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 539.404669][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 539.404686][ T28] audit: type=1326 audit(2000000057.904:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.434372][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.447274][T13210] loop2: detected capacity change from 0 to 512 [ 539.455344][ T28] audit: type=1326 audit(2000000057.904:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.464130][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.485688][ T28] audit: type=1326 audit(2000000057.904:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.506028][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.523394][ T28] audit: type=1326 audit(2000000057.904:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.533598][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.555446][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.565564][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 539.574784][ T28] audit: type=1326 audit(2000000057.904:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.597470][ T28] audit: type=1326 audit(2000000057.904:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.607174][T13210] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 539.619970][ T28] audit: type=1326 audit(2000000057.904:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.620026][ T28] audit: type=1326 audit(2000000057.915:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.620074][ T28] audit: type=1326 audit(2000000057.915:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.620115][ T28] audit: type=1326 audit(2000000057.915:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.5.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 539.684338][T13210] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 539.746113][T13210] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2446: Corrupt directory, running e2fsck is recommended [ 539.775351][T13210] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 539.791306][T13210] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.2446: corrupted in-inode xattr: invalid ea_ino [ 539.810907][T13210] EXT4-fs (loop2): Remounting filesystem read-only [ 539.834333][T13210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.876496][T13210] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 539.906199][T13210] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 539.940846][T13210] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2446: Corrupt directory, running e2fsck is recommended [ 539.980398][T13220] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 540.025787][T13220] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 540.059146][T13220] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2446: Corrupt directory, running e2fsck is recommended [ 540.099120][T13210] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 540.113089][T13224] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 540.132657][T13210] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 540.162871][T13224] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 540.349566][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.529880][T13232] syz.2.2454[13232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.530024][T13232] syz.2.2454[13232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.616908][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.827669][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.838268][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.850748][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.858865][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 540.877476][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.544177][T13240] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 541.572578][T13242] netlink: 'syz.0.2457': attribute type 4 has an invalid length. [ 541.580398][T13242] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2457'. [ 541.766537][ T6943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.790576][ T6943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.316994][T13256] loop2: detected capacity change from 0 to 256 [ 542.678587][ T6943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.701207][ T6943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.774645][ T27] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 542.860759][ T5801] Bluetooth: hci0: command tx timeout [ 542.886136][ T6943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.897415][ T6943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.952506][ T27] usb 1-1: device descriptor read/64, error -71 [ 543.078402][ T6943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.089867][ T6943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.214027][ T27] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 543.314196][T13233] chnl_net:caif_netlink_parms(): no params data found [ 543.380866][ T27] usb 1-1: device descriptor read/64, error -71 [ 543.409493][ T6943] tipc: Left network mode [ 543.475816][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.483083][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.490521][T13233] bridge_slave_0: entered allmulticast mode [ 543.498531][T13233] bridge_slave_0: entered promiscuous mode [ 543.504543][ T27] usb usb1-port1: attempt power cycle [ 543.513838][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.521197][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.528470][T13233] bridge_slave_1: entered allmulticast mode [ 543.536557][T13233] bridge_slave_1: entered promiscuous mode [ 543.624376][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.636833][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.742324][T13233] team0: Port device team_slave_0 added [ 543.861056][T13233] team0: Port device team_slave_1 added [ 543.930459][ T27] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 543.951337][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.958581][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.988772][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.002170][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.009690][ T27] usb 1-1: device descriptor read/8, error -71 [ 544.015112][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.048693][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.196765][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 544.196781][ T28] audit: type=1326 audit(2000000063.032:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.253417][ T28] audit: type=1326 audit(2000000063.032:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.277187][ T28] audit: type=1326 audit(2000000063.032:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.284995][T13233] hsr_slave_0: entered promiscuous mode [ 544.299928][ T28] audit: type=1326 audit(2000000063.032:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.299980][ T28] audit: type=1326 audit(2000000063.032:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.300025][ T28] audit: type=1326 audit(2000000063.043:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.300072][ T28] audit: type=1326 audit(2000000063.043:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.300118][ T28] audit: type=1326 audit(2000000063.043:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.300173][ T28] audit: type=1326 audit(2000000063.043:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.300222][ T28] audit: type=1326 audit(2000000063.086:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13281 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 544.312807][ T27] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 544.486759][T13233] hsr_slave_1: entered promiscuous mode [ 544.504978][T13233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.509814][T13286] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 544.520585][T13286] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2473'. [ 544.524222][T13233] Cannot create hsr debugfs directory [ 544.537617][T13286] loop2: detected capacity change from 0 to 128 [ 544.577697][ T27] usb 1-1: device descriptor read/8, error -71 [ 544.596186][T13286] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 544.615848][T13286] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.732700][ T27] usb usb1-port1: unable to enumerate USB device [ 544.790818][ T5801] Bluetooth: hci0: command tx timeout [ 544.904798][T13298] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2477'. [ 544.914541][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2477'. [ 545.045491][T11579] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 545.163540][ T6943] IPVS: stopping backup sync thread 10451 ... [ 545.192730][ T8329] kernel write not supported for file /input/event3 (pid: 8329 comm: kworker/0:5) [ 545.447960][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.459084][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.467361][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.485654][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.510314][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.525140][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.540290][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.551528][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.565590][ T6943] hsr_slave_0: left promiscuous mode [ 545.572058][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.581484][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.589323][ T6943] hsr_slave_1: left promiscuous mode [ 545.595941][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.607734][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.615627][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.623660][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.631409][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.638874][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.647869][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.655475][ T6943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.662728][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.671237][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.672244][ T6943] bridge_slave_1: left allmulticast mode [ 545.679363][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.679502][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.685909][ T6943] bridge_slave_1: left promiscuous mode [ 545.702053][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.715191][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.723071][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.731012][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.738933][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.747289][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.747477][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.764291][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.774507][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.782325][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.783371][ T6943] bridge_slave_0: left allmulticast mode [ 545.790447][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.804014][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.811708][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.819810][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.823233][ T6943] bridge_slave_0: left promiscuous mode [ 545.827775][ T27] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 545.844931][ T27] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 545.855124][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.982097][ T6943] veth1_macvtap: left promiscuous mode [ 545.987738][ T6943] veth0_macvtap: left promiscuous mode [ 545.998466][ T6943] veth1_vlan: left promiscuous mode [ 546.005764][ T6943] veth0_vlan: left promiscuous mode [ 546.549310][ T6943] bond1 (unregistering): Released all slaves [ 546.717341][ T5801] Bluetooth: hci0: command tx timeout [ 548.666166][ T5801] Bluetooth: hci0: command tx timeout [ 548.739303][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 548.746285][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.958607][ T6943] team0 (unregistering): Port device team_slave_1 removed [ 549.032496][ T6943] team0 (unregistering): Port device team_slave_0 removed [ 549.097696][ T6943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.171379][ T6943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.972847][ T6943] bond0 (unregistering): Released all slaves [ 550.459997][T13233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.483265][ T5864] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 550.496184][T13233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.550943][T13233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 550.572583][T13233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 550.669617][ T5864] usb 1-1: device descriptor read/64, error -71 [ 550.781295][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.836375][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.877205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.884459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.902451][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.909694][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.949394][ T5864] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 551.107882][ T5864] usb 1-1: device descriptor read/64, error -71 [ 551.228728][ T5864] usb usb1-port1: attempt power cycle [ 551.629168][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 551.629187][ T28] audit: type=1326 audit(2000000071.015:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 551.638998][ T5864] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 551.670023][ T28] audit: type=1326 audit(2000000071.015:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 551.693482][ T28] audit: type=1326 audit(2000000071.058:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 551.737982][ T28] audit: type=1326 audit(2000000071.058:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 551.762883][ T5864] usb 1-1: device descriptor read/8, error -71 [ 551.777919][ T28] audit: type=1326 audit(2000000071.058:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 551.831724][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.929331][T13233] veth0_vlan: entered promiscuous mode [ 551.963539][T13233] veth1_vlan: entered promiscuous mode [ 552.039558][ T5864] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 552.052428][T13233] veth0_macvtap: entered promiscuous mode [ 552.072878][T13233] veth1_macvtap: entered promiscuous mode [ 552.092041][ T5864] usb 1-1: device descriptor read/8, error -71 [ 552.130720][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.144628][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.156102][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.166728][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.178796][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.208945][ T5864] usb usb1-port1: unable to enumerate USB device [ 552.230364][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.257024][ T28] audit: type=1326 audit(2000000071.691:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13361 comm="syz.2.2500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf7f58eba9 code=0x0 [ 552.263669][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.317035][T13367] loop2: detected capacity change from 0 to 512 [ 552.323785][T13233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.347514][T13233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.367753][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.417005][T13233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.441386][T13233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.459398][T13233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.478284][T13233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.663215][ T6941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.694250][T13367] loop2: detected capacity change from 0 to 1024 [ 552.694594][ T6941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.766866][T13367] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 552.787780][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.799957][T13367] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 552.811437][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.841064][T13367] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 552.858347][ T28] audit: type=1326 audit(2000000072.334:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 552.865248][T13367] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 552.925673][ T28] audit: type=1326 audit(2000000072.334:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 552.955340][T13367] EXT4-fs error (device loop2): ext4_get_journal_inode:5807: inode #17: comm syz.2.2500: iget: bad i_size value: 4398046511204 [ 552.981544][ T28] audit: type=1326 audit(2000000072.388:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 553.029967][T13367] EXT4-fs (loop2): no journal found [ 553.083276][ T28] audit: type=1326 audit(2000000072.388:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 553.131424][T13362] 9pnet_fd: Insufficient options for proto=fd [ 553.278478][T13384] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 553.403954][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 553.413601][T13389] bridge_slave_1: left allmulticast mode [ 553.423723][T13389] bridge_slave_1: left promiscuous mode [ 553.430982][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.444870][T13389] bridge_slave_0: left allmulticast mode [ 553.452578][T13389] bridge_slave_0: left promiscuous mode [ 553.463174][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.811866][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'. [ 554.424219][T13429] loop2: detected capacity change from 0 to 512 [ 555.009778][T13457] loop2: detected capacity change from 0 to 256 [ 556.275478][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.288520][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.299017][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.317772][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.325670][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 556.335369][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.633644][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 556.633663][ T28] audit: type=1326 audit(2000000076.379:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.725769][ T28] audit: type=1326 audit(2000000076.379:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.797545][ T28] audit: type=1326 audit(2000000076.379:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.844339][ T28] audit: type=1326 audit(2000000076.379:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.890696][ T28] audit: type=1326 audit(2000000076.379:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.913451][ T28] audit: type=1326 audit(2000000076.379:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.936610][ T28] audit: type=1326 audit(2000000076.379:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 556.972504][ T28] audit: type=1326 audit(2000000076.379:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 557.012101][ T28] audit: type=1326 audit(2000000076.379:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 557.065208][ T28] audit: type=1326 audit(2000000076.379:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 557.122153][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.191524][T13503] chnl_net:caif_netlink_parms(): no params data found [ 557.242090][T13528] loop2: detected capacity change from 0 to 512 [ 557.261347][T13528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 557.292874][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 557.304986][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.343085][T13528] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2571: invalid indirect mapped block 4294967295 (level 0) [ 557.417959][T13528] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2571: invalid indirect mapped block 4294967295 (level 1) [ 557.438167][T13528] EXT4-fs (loop2): 1 orphan inode deleted [ 557.443966][T13528] EXT4-fs (loop2): 1 truncate cleaned up [ 557.484016][T13528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.513200][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.595862][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.761844][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.867733][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.880966][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.910366][T13503] bridge_slave_0: entered allmulticast mode [ 557.919566][T13503] bridge_slave_0: entered promiscuous mode [ 557.937683][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.973013][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.996042][T13503] bridge_slave_1: entered allmulticast mode [ 558.003955][T13503] bridge_slave_1: entered promiscuous mode [ 558.177612][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.213361][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.285557][ T5801] Bluetooth: hci3: command tx timeout [ 558.311574][T13557] 9pnet_fd: Insufficient options for proto=fd [ 558.433256][T13503] team0: Port device team_slave_0 added [ 558.450090][ T48] tipc: Left network mode [ 558.455819][T13503] team0: Port device team_slave_1 added [ 558.462862][T13561] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 558.699668][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.717660][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.751274][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.873643][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.890088][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.946716][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.146082][T13584] loop2: detected capacity change from 0 to 512 [ 559.157016][T13584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 559.184315][T13582] vlan2: entered allmulticast mode [ 559.232859][T13584] EXT4-fs (loop2): 1 truncate cleaned up [ 559.248798][T13584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.273569][T13503] hsr_slave_0: entered promiscuous mode [ 559.291382][T13503] hsr_slave_1: entered promiscuous mode [ 559.300126][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.308166][T13503] Cannot create hsr debugfs directory [ 559.442983][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.907547][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 559.935064][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 560.219519][ T5801] Bluetooth: hci3: command tx timeout [ 560.532168][ T48] hsr_slave_0: left promiscuous mode [ 560.557405][ T48] hsr_slave_1: left promiscuous mode [ 560.574346][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.599642][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.614242][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.638353][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.654689][ T48] bridge_slave_1: left allmulticast mode [ 560.660418][ T48] bridge_slave_1: left promiscuous mode [ 560.682332][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.703144][ T48] bridge_slave_0: left allmulticast mode [ 560.717013][ T48] bridge_slave_0: left promiscuous mode [ 560.725590][T13632] syz.2.2612[13632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.725731][T13632] syz.2.2612[13632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.745653][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.843780][ T48] veth1_macvtap: left promiscuous mode [ 560.849563][ T48] veth0_macvtap: left promiscuous mode [ 560.860541][ T48] veth1_vlan: left promiscuous mode [ 560.876106][ T48] veth0_vlan: left promiscuous mode [ 562.160957][ T5801] Bluetooth: hci3: command tx timeout [ 562.542874][ T48] team0 (unregistering): Port device team_slave_1 removed [ 562.642524][ T48] team0 (unregistering): Port device team_slave_0 removed [ 562.729606][T13661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2625'. [ 563.708996][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 563.737026][ T28] audit: type=1326 audit(2000000083.975:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 563.764093][ T28] audit: type=1326 audit(2000000083.986:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 563.821142][ T28] audit: type=1326 audit(2000000083.986:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 563.899718][ T28] audit: type=1326 audit(2000000083.986:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 563.944501][ T28] audit: type=1326 audit(2000000083.986:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.005078][ T28] audit: type=1326 audit(2000000083.986:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.050211][ T28] audit: type=1326 audit(2000000083.986:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.073270][ T28] audit: type=1326 audit(2000000083.986:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.096840][ T5798] Bluetooth: hci3: command tx timeout [ 564.128981][ T28] audit: type=1326 audit(2000000083.986:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.204399][ T28] audit: type=1326 audit(2000000083.986:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13677 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7298eba9 code=0x7ffc0000 [ 564.529302][T13642] smc: net device bond0 applied user defined pnetid SYZ0 [ 564.537465][T13644] smc: net device bond0 erased user defined pnetid SYZ0 [ 564.731808][T13503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 564.761498][T13503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 564.829345][T13503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 564.876431][T13503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.002785][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 565.052364][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2643'. [ 565.167609][T13712] tmpfs: Bad value for 'mpol' [ 565.178001][ T48] IPVS: stop unused estimator thread 0... [ 565.281209][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.327880][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.369533][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.376886][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.441383][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.448643][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.942090][T13723] Invalid ELF header magic: != ELF [ 566.092799][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.219796][T13503] veth0_vlan: entered promiscuous mode [ 566.274740][T13503] veth1_vlan: entered promiscuous mode [ 566.350893][T13503] veth0_macvtap: entered promiscuous mode [ 566.378844][T13503] veth1_macvtap: entered promiscuous mode [ 566.417722][T13739] loop2: detected capacity change from 0 to 1024 [ 566.436166][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.463234][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.481564][T13739] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 566.495188][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.512120][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.531475][T13503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.564109][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.582971][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.600438][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.614309][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.633287][T13503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.651472][T13503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.662322][T13503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.676496][T13503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.690135][T13503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.709505][T13739] smc: net device bond0 applied user defined pnetid SYZ0 [ 566.888664][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.914810][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.940428][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 567.002910][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.024646][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.148387][T13785] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2672'. [ 568.542035][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 568.551550][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 568.551566][ T28] audit: type=1326 audit(2000000089.125:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 568.597447][ T28] audit: type=1326 audit(2000000089.125:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 568.626517][T13800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2680'. [ 568.632143][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2679'. [ 568.656956][ T28] audit: type=1326 audit(2000000089.125:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.101819][ T28] audit: type=1326 audit(2000000089.136:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.313240][ T28] audit: type=1326 audit(2000000089.136:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.419811][ T28] audit: type=1326 audit(2000000089.136:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.450123][ T28] audit: type=1326 audit(2000000089.136:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.474081][ T28] audit: type=1326 audit(2000000089.136:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.504374][ T28] audit: type=1326 audit(2000000089.136:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.555298][ T28] audit: type=1326 audit(2000000089.147:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.0.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 569.683368][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 569.858821][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 569.872218][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.882385][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.892534][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.903736][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.914960][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.923230][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 569.930916][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.941047][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.948917][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.956897][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 569.970714][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.980019][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.988274][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 569.996445][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.018891][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.029846][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 570.037886][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.045510][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.054618][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.062648][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.071924][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.082055][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.094750][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.103015][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.116690][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.129413][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.144787][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.156308][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.168825][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.182673][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.199172][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.214628][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.231739][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.247243][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.255384][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.263323][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.271342][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.279151][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.290659][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.300037][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.311235][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.319764][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.327819][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.335754][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.355474][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.362959][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.380775][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.388771][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.407155][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.415431][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.424310][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.433299][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.442259][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.450480][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.458613][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.467095][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.476660][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.484191][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.492511][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.501505][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.514982][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.531561][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.550716][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.558195][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.582221][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.596496][ T8329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 570.608459][ T8329] hid-generic 0000:0000:0000.0005: item fetching failed at offset 72/83 [ 570.618490][ T8329] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 [ 570.638769][T13842] syz.5.2697[13842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.639020][T13842] syz.5.2697[13842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.723971][T13846] loop2: detected capacity change from 0 to 512 [ 570.773280][T13846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.870017][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.358063][T13864] loop2: detected capacity change from 0 to 512 [ 571.367582][T13864] EXT4-fs: Ignoring removed orlov option [ 571.377572][T13864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 571.416253][T13864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 571.444068][T13864] EXT4-fs (loop2): 1 orphan inode deleted [ 571.451841][T13864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.584156][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.764494][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 573.158867][T13903] loop2: detected capacity change from 0 to 512 [ 573.210632][T13903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.457226][T13913] program syz.1.2727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.811436][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 573.811453][ T28] audit: type=1326 audit(590.080:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 573.868909][ T28] audit: type=1326 audit(590.123:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 573.921327][ T28] audit: type=1326 audit(590.123:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 573.951858][ T28] audit: type=1326 audit(590.123:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 573.991195][ T28] audit: type=1326 audit(590.123:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 574.031379][ T28] audit: type=1326 audit(590.123:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7ce98ebe3 code=0x7ffc0000 [ 574.082414][ T28] audit: type=1326 audit(590.123:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7ce98ebe3 code=0x7ffc0000 [ 574.117897][ T28] audit: type=1326 audit(590.123:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 574.141644][ T28] audit: type=1326 audit(590.123:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 574.179054][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.193064][ T28] audit: type=1326 audit(590.123:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.0.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 574.423227][T13934] syz.1.2735[13934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.423366][T13934] syz.1.2735[13934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.594301][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'. [ 574.829891][T13954] bio_check_eod: 837 callbacks suppressed [ 574.829908][T13954] syz.2.2741: attempt to access beyond end of device [ 574.829908][T13954] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 574.863134][T13954] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 575.929792][T13977] netlink: 'syz.5.2755': attribute type 4 has an invalid length. [ 575.953992][T13979] loop2: detected capacity change from 0 to 512 [ 575.960542][T13977] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2755'. [ 575.976662][T13979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 576.008735][T13979] EXT4-fs (loop2): 1 truncate cleaned up [ 576.019226][T13979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.052570][T13985] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2758'. [ 576.086484][T13985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2758'. [ 576.456372][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.861814][T14045] loop2: detected capacity change from 0 to 1024 [ 578.011473][T14045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.121729][T14045] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2785: Allocating blocks 385-513 which overlap fs metadata [ 578.225271][T14045] EXT4-fs (loop2): pa ffff88805355e2b8: logic 16, phys. 129, len 24 [ 578.234449][T14045] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 578.313467][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.587888][T14069] loop2: detected capacity change from 0 to 2048 [ 578.707139][T14069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.959508][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.134933][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 579.134951][ T28] audit: type=1326 audit(595.799:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.229143][ T28] audit: type=1326 audit(595.799:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.306584][ T28] audit: type=1326 audit(595.863:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.383075][ T28] audit: type=1326 audit(595.874:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.438608][ T28] audit: type=1326 audit(595.874:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.496670][ T28] audit: type=1326 audit(595.874:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.548772][ T28] audit: type=1326 audit(595.874:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.608513][ T28] audit: type=1326 audit(595.874:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.666091][ T28] audit: type=1326 audit(595.874:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.697611][ T28] audit: type=1326 audit(595.874:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 579.960090][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2812'. [ 579.983006][T14111] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2812'. [ 580.310884][T14120] 9pnet: Could not find request transport: fd0x0000000000000004 [ 580.533786][T14134] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 581.689944][T14150] netlink: 'syz.1.2825': attribute type 4 has an invalid length. [ 581.697964][T14150] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2825'. [ 583.284078][T14165] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2834'. [ 583.806509][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 584.401460][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 584.401476][ T28] audit: type=1326 audit(601.453:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.451577][ T28] audit: type=1326 audit(601.453:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.507878][ T28] audit: type=1326 audit(601.507:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.550284][ T28] audit: type=1326 audit(601.507:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.596350][ T28] audit: type=1326 audit(601.507:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.657964][ T28] audit: type=1326 audit(601.507:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.714683][ T28] audit: type=1326 audit(601.507:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.782871][ T28] audit: type=1326 audit(601.507:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.824840][ T28] audit: type=1326 audit(601.539:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 584.898993][ T28] audit: type=1326 audit(601.539:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.5.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 585.344980][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'. [ 585.404028][T14226] loop2: detected capacity change from 0 to 1024 [ 585.413251][T14226] EXT4-fs: Ignoring removed orlov option [ 585.457646][T14226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.528641][ T5881] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 585.570647][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 585.577605][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.586459][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.597045][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 585.603655][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.623119][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.637476][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 585.644171][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.656143][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.667006][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 585.673680][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.682877][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.691223][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 585.698067][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.706398][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 585.712101][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.720156][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.737044][ T5881] usb 6-1: config 0 has no interfaces? [ 585.743251][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18) [ 585.749913][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.758875][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.773243][ T5881] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 585.783624][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.795198][ T5881] usb 6-1: Product: syz [ 585.800580][ T5881] usb 6-1: Manufacturer: syz [ 585.805594][ T5881] usb 6-1: SerialNumber: syz [ 585.807314][T14230] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.827223][ T5881] usb 6-1: config 0 descriptor?? [ 585.844368][T14230] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.865301][T14230] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(26) [ 585.872101][T14230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.882139][ T5864] usb 34-1: SetAddress Request (2) to port 0 [ 585.888378][ T5864] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 585.901365][T14230] vhci_hcd vhci_hcd.0: Device attached [ 585.911406][T14247] vhci_hcd: connection closed [ 585.913650][ T12] vhci_hcd: stop threads [ 585.914472][T14243] vhci_hcd: connection closed [ 585.918409][ T12] vhci_hcd: release socket [ 585.918438][ T12] vhci_hcd: disconnect device [ 585.948797][T14239] vhci_hcd: connection closed [ 585.949041][T14236] vhci_hcd: connection closed [ 585.949443][T14233] vhci_hcd: connection closed [ 585.956473][T14231] vhci_hcd: connection reset by peer [ 585.970825][ T48] vhci_hcd: stop threads [ 585.970937][T14241] vhci_hcd: connection closed [ 585.986439][ T48] vhci_hcd: release socket [ 585.998273][ T48] vhci_hcd: disconnect device [ 586.004470][ T48] vhci_hcd: stop threads [ 586.009136][ T48] vhci_hcd: release socket [ 586.015775][ T48] vhci_hcd: disconnect device [ 586.025804][ T48] vhci_hcd: stop threads [ 586.030249][ T48] vhci_hcd: release socket [ 586.035981][ T48] vhci_hcd: disconnect device [ 586.044597][ T48] vhci_hcd: stop threads [ 586.049202][ T48] vhci_hcd: release socket [ 586.057680][ T48] vhci_hcd: disconnect device [ 586.067196][ T48] vhci_hcd: stop threads [ 586.073241][ T48] vhci_hcd: release socket [ 586.079396][ T48] vhci_hcd: disconnect device [ 586.085455][ T48] vhci_hcd: stop threads [ 586.091022][ T48] vhci_hcd: release socket [ 586.095816][ T48] vhci_hcd: disconnect device [ 586.197959][T11579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.538808][T14266] loop2: detected capacity change from 0 to 128 [ 586.570333][T14266] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 586.597023][T14266] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.667134][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 587.790531][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 587.828740][T14291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.855271][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 588.094702][ T8] usb 6-1: USB disconnect, device number 11 [ 588.237971][T14291] bond1 (unregistering): Released all slaves [ 588.853455][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 589.277094][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 589.277111][ T28] audit: type=1326 audit(606.678:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.330031][ T28] audit: type=1326 audit(606.710:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.400040][ T28] audit: type=1326 audit(606.721:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.435786][ T28] audit: type=1326 audit(606.721:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.485421][ T28] audit: type=1326 audit(606.721:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.542899][ T28] audit: type=1326 audit(606.721:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.584702][ T28] audit: type=1326 audit(606.721:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.631427][ T28] audit: type=1326 audit(606.721:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 589.862731][ T28] audit: type=1326 audit(606.721:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 590.082535][ T28] audit: type=1326 audit(606.721:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz.2.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 590.379493][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'. [ 590.475684][T14391] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2908'. [ 590.505839][T14391] netlink: 'syz.5.2908': attribute type 9 has an invalid length. [ 590.522962][T14391] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2908'. [ 590.547468][T14391] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2908'. [ 590.639718][ T5864] usb 34-1: device descriptor read/8, error -110 [ 590.649023][T14396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 590.660050][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 591.056311][ T5864] usb usb34-port1: attempt power cycle [ 591.138990][ T8329] vhci_hcd: vhci_device speed not set [ 591.464829][T14428] block device autoloading is deprecated and will be removed. [ 591.477803][T14428] syz.0.2924: attempt to access beyond end of device [ 591.477803][T14428] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 591.501146][T14428] FAT-fs (loop1): unable to read boot sector [ 592.416932][ T5864] usb usb34-port1: unable to enumerate USB device [ 593.439885][T14489] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 594.186534][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 594.186551][ T28] audit: type=1326 audit(611.946:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 594.217002][ T28] audit: type=1326 audit(611.946:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f798bd8eba9 code=0x7ffc0000 [ 594.240924][ T28] audit: type=1326 audit(611.946:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f798bd8ebe3 code=0x7ffc0000 [ 594.263958][ T28] audit: type=1326 audit(611.957:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f798bd8d65f code=0x7ffc0000 [ 594.288217][ T28] audit: type=1326 audit(611.957:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f798bd8ec37 code=0x7ffc0000 [ 594.355087][ T28] audit: type=1326 audit(611.968:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f798bd8d510 code=0x7ffc0000 [ 594.397167][ T28] audit: type=1326 audit(611.968:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f798bd8e7ab code=0x7ffc0000 [ 594.439101][ T28] audit: type=1326 audit(611.968:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f798bd8e7ab code=0x7ffc0000 [ 594.462399][ T28] audit: type=1326 audit(611.968:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f798bdc1465 code=0x7ffc0000 [ 594.488043][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2970'. [ 594.513513][ T28] audit: type=1326 audit(611.968:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f798bd8e7ab code=0x7ffc0000 [ 594.564101][T14536] loop2: detected capacity change from 0 to 128 [ 594.571946][T14536] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 594.588296][T14536] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 594.856943][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 594.922603][T14549] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 595.647847][T14570] loop9: detected capacity change from 0 to 7 [ 595.655356][ C1] blk_print_req_error: 4 callbacks suppressed [ 595.655375][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.671153][ C1] buffer_io_error: 4 callbacks suppressed [ 595.671170][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.690799][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.700080][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.709948][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.719238][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.728083][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.737359][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.749922][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.759191][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.770317][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.779584][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.791431][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.800875][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.809356][T14570] ldm_validate_partition_table(): Disk read failed. [ 595.816781][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.826512][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.838077][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.847337][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.859465][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.868720][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.877572][T14570] Dev loop9: unable to read RDB block 0 [ 595.883926][T14570] loop9: unable to read partition table [ 595.890154][T14570] loop9: partition table beyond EOD, truncated [ 595.900801][T14570] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 595.900801][T14570] ) failed (rc=-5) [ 596.184678][T14577] syz.5.2989[14577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.184825][T14577] syz.5.2989[14577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.870303][T14595] netlink: 'syz.2.2998': attribute type 30 has an invalid length. [ 596.907473][T14595] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.916446][T14595] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.925281][T14595] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.934061][T14595] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.950319][T14595] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.959421][T14595] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.968469][T14595] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.977451][T14595] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.902033][T14618] loop1: detected capacity change from 0 to 1024 [ 597.916059][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 597.978843][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 597.999690][T14618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.029305][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 598.041954][T14627] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3012'. [ 598.053204][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 598.196622][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'. [ 598.348110][T14638] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3017'. [ 598.494817][T13233] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.019700][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 599.049197][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 599.696841][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 599.696857][ T28] audit: type=1326 audit(617.858:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14674 comm="syz.0.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 599.797888][ T28] audit: type=1326 audit(617.911:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14674 comm="syz.0.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 599.843950][ T28] audit: type=1326 audit(617.911:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14674 comm="syz.0.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 599.878784][ T28] audit: type=1326 audit(617.911:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14674 comm="syz.0.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ce98eba9 code=0x7ffc0000 [ 600.308308][ T28] audit: type=1326 audit(618.502:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.345567][T14640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.348046][ T28] audit: type=1326 audit(618.502:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.413948][ T28] audit: type=1326 audit(618.523:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.446439][ T28] audit: type=1326 audit(618.523:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.469174][ T28] audit: type=1326 audit(618.523:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.492922][ T28] audit: type=1326 audit(618.523:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14639 comm="syz.2.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7f58eba9 code=0x7ffc0000 [ 600.822710][T14640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.017888][T14640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.157667][T14640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.373358][T14640] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.416493][T14640] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.446022][T14640] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.459798][T14718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3051'. [ 601.484773][T14640] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.622347][T14720] atomic_op ffff88807d9af998 conn xmit_atomic 0000000000000000 [ 601.899635][T14727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.910620][T14732] syz.1.3058[14732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.910762][T14732] syz.1.3058[14732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.933640][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.119230][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.689786][T14761] loop1: detected capacity change from 0 to 512 [ 602.723001][T14761] EXT4-fs warning (device loop1): ext4_xattr_inode_get:545: inode #11: comm syz.1.3069: ea_inode file size=0 entry size=6 [ 602.753928][T14761] ------------[ cut here ]------------ [ 602.760420][T14761] EA inode 11 i_nlink=2 [ 602.768562][T14761] WARNING: CPU: 0 PID: 14761 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580 [ 602.783776][T14761] Modules linked in: [ 602.787740][T14761] CPU: 0 PID: 14761 Comm: syz.1.3069 Not tainted syzkaller #0 [ 602.795552][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.805721][T14761] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 602.812500][T14761] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 602.832787][T14761] RSP: 0018:ffffc90003667340 EFLAGS: 00010246 [ 602.839154][T14761] RAX: 33225642472bd200 RBX: 0000000000000001 RCX: 0000000000080000 [ 602.847296][T14761] RDX: ffffc9000c819000 RSI: 0000000000023bb8 RDI: 0000000000023bb9 [ 602.855381][T14761] RBP: ffffc90003667430 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 602.863920][T14761] R10: dffffc0000000000 R11: ffffed10171c5183 R12: ffff888062b2f0b0 [ 602.872076][T14761] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888062b2f100 [ 602.880947][T14761] FS: 00007f8f739076c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 602.890603][T14761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.897742][T14761] CR2: 00007f8f72971fe0 CR3: 00000000620eb000 CR4: 00000000003506f0 [ 602.906247][T14761] Call Trace: [ 602.909577][T14761] [ 602.912945][T14761] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 602.919224][T14761] ? __ext4_journal_ensure_credits+0x30/0x450 [ 602.925773][T14761] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 602.932181][T14761] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 602.937977][T14761] ? __ext4_journal_ensure_credits+0x450/0x450 [ 602.938210][T14761] ext4_xattr_delete_inode+0xa45/0xc00 [ 602.950970][T14761] ? ext4_truncate+0xc12/0x1060 [ 602.955898][T14761] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 602.962359][T14761] ext4_evict_inode+0xaa3/0xea0 [ 602.967867][T14761] ? _raw_spin_unlock+0x28/0x40 [ 602.972814][T14761] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 602.978884][T14761] ? do_raw_spin_unlock+0x121/0x230 [ 602.984252][T14761] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 602.990337][T14761] evict+0x486/0x870 [ 602.994336][T14761] ? __lock_acquire+0x7c80/0x7c80 [ 602.999509][T14761] ? proc_nr_inodes+0x230/0x230 [ 603.004484][T14761] ? do_raw_spin_unlock+0x121/0x230 [ 603.010236][T14761] ? _raw_spin_unlock+0x28/0x40 [ 603.015580][T14761] ? iput+0x70a/0x920 [ 603.019625][T14761] ext4_orphan_cleanup+0xbd4/0x1400 [ 603.025107][T14761] ? ext4_orphan_del+0xba0/0xba0 [ 603.030435][T14761] ? ext4_register_li_request+0x183/0x940 [ 603.036282][T14761] ? errseq_check_and_advance+0x66/0x120 [ 603.042055][T14761] ext4_fill_super+0x5de7/0x66c0 [ 603.047188][T14761] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 603.053785][T14761] ? vscnprintf+0x80/0x80 [ 603.058302][T14761] ? down_read_killable+0x340/0x340 [ 603.063774][T14761] ? setup_bdev_super+0x56b/0x660 [ 603.068898][T14761] get_tree_bdev+0x3e4/0x510 [ 603.073673][T14761] ? vfs_parse_fs_string+0x160/0x160 [ 603.079085][T14761] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 603.085412][T14761] ? setup_bdev_super+0x660/0x660 [ 603.090626][T14761] ? apparmor_capable+0x137/0x1a0 [ 603.095721][T14761] ? bpf_lsm_capable+0x9/0x10 [ 603.100558][T14761] ? security_capable+0x89/0xb0 [ 603.105698][T14761] vfs_get_tree+0x8c/0x280 [ 603.110471][T14761] do_new_mount+0x24b/0xa40 [ 603.115124][T14761] __se_sys_mount+0x2da/0x3c0 [ 603.120074][T14761] ? __x64_sys_mount+0xc0/0xc0 [ 603.125163][T14761] ? lockdep_hardirqs_on+0x98/0x150 [ 603.130564][T14761] ? __x64_sys_mount+0x20/0xc0 [ 603.135489][T14761] do_syscall_64+0x55/0xb0 [ 603.139967][T14761] ? clear_bhb_loop+0x40/0x90 [ 603.144835][T14761] ? clear_bhb_loop+0x40/0x90 [ 603.149869][T14761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.156192][T14761] RIP: 0033:0x7f8f7299034a [ 603.160940][T14761] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.180703][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.187044][T14761] RSP: 002b:00007f8f73906e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.195947][T14761] RAX: ffffffffffffffda RBX: 00007f8f73906ef0 RCX: 00007f8f7299034a [ 603.204793][T14761] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8f73906eb0 [ 603.213235][T14761] RBP: 0000200000000180 R08: 00007f8f73906ef0 R09: 0000000000800700 [ 603.221560][T14761] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 603.229845][T14761] R13: 00007f8f73906eb0 R14: 0000000000000473 R15: 0000200000000680 [ 603.237997][T14761] [ 603.241129][T14761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 603.248465][T14761] CPU: 0 PID: 14761 Comm: syz.1.3069 Not tainted syzkaller #0 [ 603.255955][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.266063][T14761] Call Trace: [ 603.269389][T14761] [ 603.272338][T14761] dump_stack_lvl+0x16c/0x230 [ 603.277139][T14761] ? show_regs_print_info+0x20/0x20 [ 603.282362][T14761] ? load_image+0x3b0/0x3b0 [ 603.286899][T14761] panic+0x2c0/0x710 [ 603.290890][T14761] ? bpf_jit_dump+0xd0/0xd0 [ 603.295673][T14761] __warn+0x2e0/0x470 [ 603.299697][T14761] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 603.305721][T14761] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 603.311765][T14761] report_bug+0x2be/0x4f0 [ 603.316134][T14761] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 603.322162][T14761] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 603.328210][T14761] ? ext4_xattr_inode_update_ref+0x523/0x580 [ 603.334234][T14761] handle_bug+0xcf/0x120 [ 603.338521][T14761] exc_invalid_op+0x1a/0x50 [ 603.343060][T14761] asm_exc_invalid_op+0x1a/0x20 [ 603.347931][T14761] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 603.354548][T14761] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 603.374319][T14761] RSP: 0018:ffffc90003667340 EFLAGS: 00010246 [ 603.380425][T14761] RAX: 33225642472bd200 RBX: 0000000000000001 RCX: 0000000000080000 [ 603.388414][T14761] RDX: ffffc9000c819000 RSI: 0000000000023bb8 RDI: 0000000000023bb9 [ 603.396495][T14761] RBP: ffffc90003667430 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 603.404486][T14761] R10: dffffc0000000000 R11: ffffed10171c5183 R12: ffff888062b2f0b0 [ 603.412476][T14761] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888062b2f100 [ 603.420488][T14761] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 603.426168][T14761] ? __ext4_journal_ensure_credits+0x30/0x450 [ 603.432271][T14761] ext4_xattr_inode_dec_ref_all+0xa2b/0xf90 [ 603.438458][T14761] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 603.444138][T14761] ? __ext4_journal_ensure_credits+0x450/0x450 [ 603.450328][T14761] ext4_xattr_delete_inode+0xa45/0xc00 [ 603.455822][T14761] ? ext4_truncate+0xc12/0x1060 [ 603.460709][T14761] ? ext4_expand_extra_isize_ea+0x19e0/0x19e0 [ 603.466905][T14761] ext4_evict_inode+0xaa3/0xea0 [ 603.471792][T14761] ? _raw_spin_unlock+0x28/0x40 [ 603.476672][T14761] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 603.482692][T14761] ? do_raw_spin_unlock+0x121/0x230 [ 603.487921][T14761] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 603.493844][T14761] evict+0x486/0x870 [ 603.497770][T14761] ? __lock_acquire+0x7c80/0x7c80 [ 603.502823][T14761] ? proc_nr_inodes+0x230/0x230 [ 603.507697][T14761] ? do_raw_spin_unlock+0x121/0x230 [ 603.512954][T14761] ? _raw_spin_unlock+0x28/0x40 [ 603.517818][T14761] ? iput+0x70a/0x920 [ 603.521820][T14761] ext4_orphan_cleanup+0xbd4/0x1400 [ 603.527089][T14761] ? ext4_orphan_del+0xba0/0xba0 [ 603.532078][T14761] ? ext4_register_li_request+0x183/0x940 [ 603.537843][T14761] ? errseq_check_and_advance+0x66/0x120 [ 603.543511][T14761] ext4_fill_super+0x5de7/0x66c0 [ 603.548598][T14761] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 603.555044][T14761] ? vscnprintf+0x80/0x80 [ 603.559396][T14761] ? down_read_killable+0x340/0x340 [ 603.564714][T14761] ? setup_bdev_super+0x56b/0x660 [ 603.569758][T14761] get_tree_bdev+0x3e4/0x510 [ 603.574453][T14761] ? vfs_parse_fs_string+0x160/0x160 [ 603.579767][T14761] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 603.586031][T14761] ? setup_bdev_super+0x660/0x660 [ 603.591076][T14761] ? apparmor_capable+0x137/0x1a0 [ 603.596133][T14761] ? bpf_lsm_capable+0x9/0x10 [ 603.600835][T14761] ? security_capable+0x89/0xb0 [ 603.605801][T14761] vfs_get_tree+0x8c/0x280 [ 603.610244][T14761] do_new_mount+0x24b/0xa40 [ 603.614792][T14761] __se_sys_mount+0x2da/0x3c0 [ 603.619506][T14761] ? __x64_sys_mount+0xc0/0xc0 [ 603.624396][T14761] ? lockdep_hardirqs_on+0x98/0x150 [ 603.629621][T14761] ? __x64_sys_mount+0x20/0xc0 [ 603.634405][T14761] do_syscall_64+0x55/0xb0 [ 603.638845][T14761] ? clear_bhb_loop+0x40/0x90 [ 603.643536][T14761] ? clear_bhb_loop+0x40/0x90 [ 603.648229][T14761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.654158][T14761] RIP: 0033:0x7f8f7299034a [ 603.658604][T14761] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.678258][T14761] RSP: 002b:00007f8f73906e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.686712][T14761] RAX: ffffffffffffffda RBX: 00007f8f73906ef0 RCX: 00007f8f7299034a [ 603.694711][T14761] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8f73906eb0 [ 603.702883][T14761] RBP: 0000200000000180 R08: 00007f8f73906ef0 R09: 0000000000800700 [ 603.710959][T14761] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 603.719040][T14761] R13: 00007f8f73906eb0 R14: 0000000000000473 R15: 0000200000000680 [ 603.727169][T14761] [ 603.730478][T14761] Kernel Offset: disabled [ 603.735360][T14761] Rebooting in 86400 seconds..