last executing test programs: 35.381350741s ago: executing program 3 (id=3434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x400000013) 35.216152094s ago: executing program 3 (id=3437): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 35.042214868s ago: executing program 3 (id=3441): open(0x0, 0x81ff, 0x36) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) 34.786223369s ago: executing program 3 (id=3445): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fffffff}]}) shmat(0x0, &(0x7f0000fed000/0x3000)=nil, 0x400c) 33.680354438s ago: executing program 3 (id=3450): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20040084) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8840) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) capset(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 33.630622532s ago: executing program 3 (id=3452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$nci(r0, 0x0, 0xfffffeea) 29.481995677s ago: executing program 2 (id=3486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.05755332s ago: executing program 32 (id=3452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$nci(r0, 0x0, 0xfffffeea) 18.087406899s ago: executing program 0 (id=3497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001300)={{{@in=@local, @in6=@private1}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x4a010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup(r3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) 18.086556979s ago: executing program 1 (id=3498): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48c400) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x860, 0x27, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d}, [@nested={0x341, 0x4a, 0x0, 0x1, [@generic="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", @nested={0x4, 0xc8}, @generic="d1aa591f410fa65f7ff42520afe29637f8e1d0d73ea6d54bd51d460e3798f16b36ebc817865f40ab4eb3b80748d0d736a70db3ca2f848fb616b625ff5825493477bc5bbd811b963cd714dc5a79c3a069908379b8225edff5a5dd03bb11", @generic="e4619a7175280a5f28faf5efebb4a9a5476e029d7a709e86f33050bedb1ab5d005ce2b4cec0672fa9c43a333c9984079cbb400546a0f0d7acdac644af0d0f27018995293bde8419dd6d81225b91226e2a42bf6d017cdd8b03b41a36bd21c6b6b3faf9e838de2f2c3eb6e0aa0b8649a01f63d0f1c64d6b9ac0c251ee33cea4b2683705aadfb716ae6646671c41214cc506bb2dce5cb764b9227611bb9f2c30ca9a3a9025391a1b2709104c476b7480468f760e9b84a9c908dc7605feaf48fcbfad46c6c765eea819afb149ba9ecca8eb777c735e0ef814b9c5e7e8e506e511870bf57c7541d5f5d93ecf4203cfaf6eea944bfca5a217e687591", @nested={0x4, 0x90}, @nested={0x4, 0x89}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x1}, @generic="bc7a9215a02e4b0290f3be29fcb0cea774af795aad60fc990acc0aaed1251e77169139e347f215868cd991136d3da25bee2a37e6bb970d53ad5132fc1e40c9c06097abb54101f447d40bbf503c17f09196d45b8296fd6fc9f29a20e6186effea718460c681a02a28315ed7ea53e45c0fc2cda07552c23a60eef63b01b4007740920c67be3e880ee6b71e85e41666700f54889aa9c9a6b312a240aaee8d20bb96cc2bb890b048253aa4de9168b639f40d00f64b9ee290b460800577e683896e45195c22c7b4f71f440da599346a116a44e55e16"]}, @nested={0xaf, 0x41, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x93}, @nested={0x4, 0x4e}, @generic="63a9c920b56404c9c71cb0e72e627391483b9f86714cc46a7a85ba32ea3eb0878d3608d9bf39735d8e2789487d570c3717e70204e00886bef3aedeb2cb664d5232dcab83c2fd5298a1ffbbbb395fe68bdc0500dd0efda4108d7b8904f70391719f25cac6070a6b66d4e76dd80ff7eb520d2acb91fa1aa177703de6a145515fa47887777b4c86d19b66f7841844194247a862aa5b2a51235e35839a", @nested={0x4, 0x47}]}, @generic="84914f7838ddaf93850f85cb6201c363356677e65ab10fa7a3c82cd0702ac26955e491ab8483e36deae251b6484337bea20cf656f01af749a084d4a44b203d5629a8f956a448caa21a4f3f3a4f8b1ba588f9e252027b9bcb8b8c2c79c46d5ae1b010e5591f1af1f93771ced5c4218f70cd468bf6608669789a7d60f5092944dfdcb052b4428c9dc8b21de507d3af5fe26c030e3ae7c8a1edd3e64e40bf68fce85cc818153e140ac13851", @generic="7f59aa8f77b4f1fc2b0a51036d02bcce0d3d4a3078a77ceb1fff2163d1d4141938fa05e4efa131ce99ff40511dd4acb5e4ade0428f6f8946601095cb289eb9cdbaa7c04578dcc5f789aa56f12f3511739a4d732c8a275d9a0b05233350b3cd8a4f55fc94f616b03fb97ed9bcb76e5cb5b5e62073f734185cad744a0792bf67d1252a39a9e7f1f869c20bf154a101d79b5fa9a7cdf7959000b9c1ab5c42c47e92d840f8edf5d4b2e75591efdcbf2ed1a206c410b389ef2ef1e40c50", @nested={0x41, 0x125, 0x0, 0x1, [@generic="d312103e441668092e32fab5b3a5a22a346ea448d5d12049a8085149a48d3b1efa", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x147}, @nested={0x4, 0x6}]}, @nested={0x1d7, 0xf9, 0x0, 0x1, [@generic="326c3753c76f356e292e0a2227d9e19d4532a341c142823bfcd848b69c04205aa3939f63c360aba8ddc1bb230b9357c87b365bcd7562faa45e67a1fd", @generic="71bd2e0c8ce168bd6a850fd4d658e5cdf39c8765c457d890e424ef968d635acec9aa427dc22a39a1cb6c661ba6c45f0c1efa9dfacf0f0998b4231fc409e6fb669083c58a3c6d0d9096e817ff618a90d366", @typed={0xe, 0x21, 0x0, 0x0, @str='/dev/vmci\x00'}, @typed={0x5, 0xbf, 0x0, 0x0, @str='\x00'}, @generic="7c32a42088226cbba8eadaf6c6a418e202242e459176e3a1eaa370ea6f9a63fb9c4b1f29c4be1cd6c5e444e53b8036b6b47704daaf965b92ac4e8df567aba253dc3954c913ac07b8fbe1389e0052d6519c76a21eadbdb002bdaad72ca9830dc97bd3de17d44d9e38a07af018344731157589efba5a8722c34c225e9650b737fa5a922628222caa159ed8567077d6704bbc8d17bba0ec", @typed={0x25, 0x7a, 0x0, 0x0, @str='/proc/sys/net/ipv4/vs/secure_tcp\x00'}, @generic, @typed={0x27, 0x9, 0x0, 0x0, @binary="fa5b5b349eb1dfb496f5959ef46696be55e8bbcd9b3c094f7ecdda51ed9c0df5817fec"}, @typed={0x46, 0x146, 0x0, 0x0, @binary="546af0fc27ffff825e6e415888caa4096f957de17b2059b3ad7d490009feb02c0612803b47f93be1438fe49fcd7b49adc341666e0627cd8fca5c1abb7167544f06b1"}]}, @generic="f6cf945e3d11dd28d3e2f51b4c6ec2f341b729e0d5c2d5e332f51713def9de1a8606669fc1cb31d03c22718ddb7f87f59608c14434d1b9936ba2fe8ad7849419c1291f4dd4874e6a9656261dabfd5644bc286aea6b04932d9178e208eb99a39d09aa174c1d447b27528b33e241eba24983d3b01c43e121a5328d77d23dd81d5ed752ab21fd113c635473b4b8f2e38adca5d5be729e91e338e9039d78460a2995db8578702dd7db176d2137584d5a865ba1336b7cac3f57dc842d90f2a535821afbfa9abede", @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x8}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 18.086216039s ago: executing program 2 (id=3499): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r6, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000003c0)={0x1d, r8, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, r8, 0x100000001, {0x2, 0xff, 0x1}, 0xfd}, 0x18) 17.838953979s ago: executing program 0 (id=3500): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000014c0)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)=';', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 17.806884651s ago: executing program 2 (id=3501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16.895964235s ago: executing program 0 (id=3502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 16.895697845s ago: executing program 2 (id=3503): ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 16.746592177s ago: executing program 2 (id=3504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000183a00fe8000000000000000000000000000bbff020000000000000000000000000001f900907800000000ff0200000000000000000000000000012a8fa4b08055e9c8c861ca37b142b2e48286d952613ffe5a6cf26fea763e045545107a02258b50692be4a10d260f23eaadc41f02481f0645e3452be038968a612c5df48d1ffb552f77c702ac8491f443b5023e6f7d7f682961c7cc2cc4a4ac8a16360dc654ad9e9f657d893eb03a41825dc55b7e1246aa65294cec1ed13733ca67e990e2db5165b038bbb169bc01a5518d2f0702a620491c6f6c65c3bc19f387da360dad29a00e0ff6dbb7c31500"], 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @map_idx={0x18, 0x2}], &(0x7f00000004c0)='GPL\x00', 0x6, 0x44, &(0x7f00000006c0)=""/68, 0x40f00, 0x8, '\x00', r2, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x2, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x2, 0x9, 0xa}, {0x80000000, 0x2, 0x7, 0xb}, {0x5, 0x3, 0xf, 0x6}, {0x5, 0x2, 0x4, 0x4}]}, 0x94) syz_usbip_server_init(0x3) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x5) 16.524368805s ago: executing program 1 (id=3505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 15.802464073s ago: executing program 2 (id=3506): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000280), 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x10, 0x1}, 0x20) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000003c0)={0x867e, 0xfffffffa}) write$rfkill(r0, &(0x7f0000000080)={0x300, 0x0, 0x3, 0x1}, 0x8) 15.761847546s ago: executing program 0 (id=3507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) getresuid(&(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000002000000073119d000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001280), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) r6 = add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffffd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x7, '\x00', 0x0, r5, 0x2, 0x0, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "c5bd209e33126c51c4e5d5b972e4c6dcf248fc36c51031de9b9dd113b82729dbc9e646dd8ce66640aa077f45d57f6b2d021a5aed4da84d87bf57776174f27ea7", 0x28}, 0x48, r6) 15.577494402s ago: executing program 1 (id=3508): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) eventfd2(0x9b5, 0x0) 15.398153895s ago: executing program 1 (id=3509): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) listen(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xffffff81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) connect$unix(r2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15.154956585s ago: executing program 1 (id=3510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$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") 15.073093172s ago: executing program 1 (id=3511): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) 14.794082654s ago: executing program 0 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") close(0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 14.759012487s ago: executing program 0 (id=3513): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48c400) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x888, 0x27, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d}, [@nested={0x341, 0x4a, 0x0, 0x1, [@generic="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", @nested={0x4, 0xc8}, @generic="d1aa591f410fa65f7ff42520afe29637f8e1d0d73ea6d54bd51d460e3798f16b36ebc817865f40ab4eb3b80748d0d736a70db3ca2f848fb616b625ff5825493477bc5bbd811b963cd714dc5a79c3a069908379b8225edff5a5dd03bb11", @generic="e4619a7175280a5f28faf5efebb4a9a5476e029d7a709e86f33050bedb1ab5d005ce2b4cec0672fa9c43a333c9984079cbb400546a0f0d7acdac644af0d0f27018995293bde8419dd6d81225b91226e2a42bf6d017cdd8b03b41a36bd21c6b6b3faf9e838de2f2c3eb6e0aa0b8649a01f63d0f1c64d6b9ac0c251ee33cea4b2683705aadfb716ae6646671c41214cc506bb2dce5cb764b9227611bb9f2c30ca9a3a9025391a1b2709104c476b7480468f760e9b84a9c908dc7605feaf48fcbfad46c6c765eea819afb149ba9ecca8eb777c735e0ef814b9c5e7e8e506e511870bf57c7541d5f5d93ecf4203cfaf6eea944bfca5a217e687591", @nested={0x4, 0x90}, @nested={0x4, 0x89}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x1}, @generic="bc7a9215a02e4b0290f3be29fcb0cea774af795aad60fc990acc0aaed1251e77169139e347f215868cd991136d3da25bee2a37e6bb970d53ad5132fc1e40c9c06097abb54101f447d40bbf503c17f09196d45b8296fd6fc9f29a20e6186effea718460c681a02a28315ed7ea53e45c0fc2cda07552c23a60eef63b01b4007740920c67be3e880ee6b71e85e41666700f54889aa9c9a6b312a240aaee8d20bb96cc2bb890b048253aa4de9168b639f40d00f64b9ee290b460800577e683896e45195c22c7b4f71f440da599346a116a44e55e16"]}, @nested={0xaf, 0x41, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x93}, @nested={0x4, 0x4e}, @generic="63a9c920b56404c9c71cb0e72e627391483b9f86714cc46a7a85ba32ea3eb0878d3608d9bf39735d8e2789487d570c3717e70204e00886bef3aedeb2cb664d5232dcab83c2fd5298a1ffbbbb395fe68bdc0500dd0efda4108d7b8904f70391719f25cac6070a6b66d4e76dd80ff7eb520d2acb91fa1aa177703de6a145515fa47887777b4c86d19b66f7841844194247a862aa5b2a51235e35839a", @nested={0x4, 0x47}]}, @generic="84914f7838ddaf93850f85cb6201c363356677e65ab10fa7a3c82cd0702ac26955e491ab8483e36deae251b6484337bea20cf656f01af749a084d4a44b203d5629a8f956a448caa21a4f3f3a4f8b1ba588f9e252027b9bcb8b8c2c79c46d5ae1b010e5591f1af1f93771ced5c4218f70cd468bf6608669789a7d60f5092944dfdcb052b4428c9dc8b21de507d3af5fe26c030e3ae7c8a1edd3e64e40bf68fce85cc818153e140ac13851", @generic="7f59aa8f77b4f1fc2b0a51036d02bcce0d3d4a3078a77ceb1fff2163d1d4141938fa05e4efa131ce99ff40511dd4acb5e4ade0428f6f8946601095cb289eb9cdbaa7c04578dcc5f789aa56f12f3511739a4d732c8a275d9a0b05233350b3cd8a4f55fc94f616b03fb97ed9bcb76e5cb5b5e62073f734185cad744a0792bf67d1252a39a9e7f1f869c20bf154a101d79b5fa9a7cdf7959000b9c1ab5c42c47e92d840f8edf5d4b2e75591efdcbf2ed1a206c410b389ef2ef1e40c50", @nested={0x41, 0x125, 0x0, 0x1, [@generic="d312103e441668092e32fab5b3a5a22a346ea448d5d12049a8085149a48d3b1efa", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x147}, @nested={0x4, 0x6}]}, @nested={0x1ff, 0xf9, 0x0, 0x1, [@generic="326c3753c76f356e292e0a2227d9e19d4532a341c142823bfcd848b69c04205aa3939f63c360aba8ddc1bb230b9357c87b365bcd7562faa45e67a1fd", @generic="71bd2e0c8ce168bd6a850fd4d658e5cdf39c8765c457d890e424ef968d635acec9aa427dc22a39a1cb6c661ba6c45f0c1efa9dfacf0f0998b4231fc409e6fb669083c58a3c6d0d9096e817ff618a90d3666af9762b6f4adf018baf1858dc02cf21b14cacb875f28a0441fcf38ffb5fab40edd506ab0995bd22", @typed={0xe, 0x21, 0x0, 0x0, @str='/dev/vmci\x00'}, @typed={0x5, 0xbf, 0x0, 0x0, @str='\x00'}, @generic="7c32a42088226cbba8eadaf6c6a418e202242e459176e3a1eaa370ea6f9a63fb9c4b1f29c4be1cd6c5e444e53b8036b6b47704daaf965b92ac4e8df567aba253dc3954c913ac07b8fbe1389e0052d6519c76a21eadbdb002bdaad72ca9830dc97bd3de17d44d9e38a07af018344731157589efba5a8722c34c225e9650b737fa5a922628222caa159ed8567077d6704bbc8d17bba0ec", @typed={0x25, 0x7a, 0x0, 0x0, @str='/proc/sys/net/ipv4/vs/secure_tcp\x00'}, @generic, @typed={0x27, 0x9, 0x0, 0x0, @binary="fa5b5b349eb1dfb496f5959ef46696be55e8bbcd9b3c094f7ecdda51ed9c0df5817fec"}, @typed={0x46, 0x146, 0x0, 0x0, @binary="546af0fc27ffff825e6e415888caa4096f957de17b2059b3ad7d490009feb02c0612803b47f93be1438fe49fcd7b49adc341666e0627cd8fca5c1abb7167544f06b1"}]}, @generic="f6cf945e3d11dd28d3e2f51b4c6ec2f341b729e0d5c2d5e332f51713def9de1a8606669fc1cb31d03c22718ddb7f87f59608c14434d1b9936ba2fe8ad7849419c1291f4dd4874e6a9656261dabfd5644bc286aea6b04932d9178e208eb99a39d09aa174c1d447b27528b33e241eba24983d3b01c43e121a5328d77d23dd81d5ed752ab21fd113c635473b4b8f2e38adca5d5be729e91e338e9039d78460a2995db8578702dd7db176d2137584d5a865ba1336b7cac3f57dc842d90f2a535821afbfa9abede", @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x8}}]}, 0x888}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 1.035430647s ago: executing program 33 (id=3506): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000280), 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x10, 0x1}, 0x20) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000003c0)={0x867e, 0xfffffffa}) write$rfkill(r0, &(0x7f0000000080)={0x300, 0x0, 0x3, 0x1}, 0x8) 50.626386ms ago: executing program 34 (id=3513): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48c400) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x888, 0x27, 0x4, 0x70bd2a, 0x25dfdbff, {0x1d}, [@nested={0x341, 0x4a, 0x0, 0x1, [@generic="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", @nested={0x4, 0xc8}, @generic="d1aa591f410fa65f7ff42520afe29637f8e1d0d73ea6d54bd51d460e3798f16b36ebc817865f40ab4eb3b80748d0d736a70db3ca2f848fb616b625ff5825493477bc5bbd811b963cd714dc5a79c3a069908379b8225edff5a5dd03bb11", @generic="e4619a7175280a5f28faf5efebb4a9a5476e029d7a709e86f33050bedb1ab5d005ce2b4cec0672fa9c43a333c9984079cbb400546a0f0d7acdac644af0d0f27018995293bde8419dd6d81225b91226e2a42bf6d017cdd8b03b41a36bd21c6b6b3faf9e838de2f2c3eb6e0aa0b8649a01f63d0f1c64d6b9ac0c251ee33cea4b2683705aadfb716ae6646671c41214cc506bb2dce5cb764b9227611bb9f2c30ca9a3a9025391a1b2709104c476b7480468f760e9b84a9c908dc7605feaf48fcbfad46c6c765eea819afb149ba9ecca8eb777c735e0ef814b9c5e7e8e506e511870bf57c7541d5f5d93ecf4203cfaf6eea944bfca5a217e687591", @nested={0x4, 0x90}, @nested={0x4, 0x89}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x1}, @generic="bc7a9215a02e4b0290f3be29fcb0cea774af795aad60fc990acc0aaed1251e77169139e347f215868cd991136d3da25bee2a37e6bb970d53ad5132fc1e40c9c06097abb54101f447d40bbf503c17f09196d45b8296fd6fc9f29a20e6186effea718460c681a02a28315ed7ea53e45c0fc2cda07552c23a60eef63b01b4007740920c67be3e880ee6b71e85e41666700f54889aa9c9a6b312a240aaee8d20bb96cc2bb890b048253aa4de9168b639f40d00f64b9ee290b460800577e683896e45195c22c7b4f71f440da599346a116a44e55e16"]}, @nested={0xaf, 0x41, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x93}, @nested={0x4, 0x4e}, @generic="63a9c920b56404c9c71cb0e72e627391483b9f86714cc46a7a85ba32ea3eb0878d3608d9bf39735d8e2789487d570c3717e70204e00886bef3aedeb2cb664d5232dcab83c2fd5298a1ffbbbb395fe68bdc0500dd0efda4108d7b8904f70391719f25cac6070a6b66d4e76dd80ff7eb520d2acb91fa1aa177703de6a145515fa47887777b4c86d19b66f7841844194247a862aa5b2a51235e35839a", @nested={0x4, 0x47}]}, @generic="84914f7838ddaf93850f85cb6201c363356677e65ab10fa7a3c82cd0702ac26955e491ab8483e36deae251b6484337bea20cf656f01af749a084d4a44b203d5629a8f956a448caa21a4f3f3a4f8b1ba588f9e252027b9bcb8b8c2c79c46d5ae1b010e5591f1af1f93771ced5c4218f70cd468bf6608669789a7d60f5092944dfdcb052b4428c9dc8b21de507d3af5fe26c030e3ae7c8a1edd3e64e40bf68fce85cc818153e140ac13851", @generic="7f59aa8f77b4f1fc2b0a51036d02bcce0d3d4a3078a77ceb1fff2163d1d4141938fa05e4efa131ce99ff40511dd4acb5e4ade0428f6f8946601095cb289eb9cdbaa7c04578dcc5f789aa56f12f3511739a4d732c8a275d9a0b05233350b3cd8a4f55fc94f616b03fb97ed9bcb76e5cb5b5e62073f734185cad744a0792bf67d1252a39a9e7f1f869c20bf154a101d79b5fa9a7cdf7959000b9c1ab5c42c47e92d840f8edf5d4b2e75591efdcbf2ed1a206c410b389ef2ef1e40c50", @nested={0x41, 0x125, 0x0, 0x1, [@generic="d312103e441668092e32fab5b3a5a22a346ea448d5d12049a8085149a48d3b1efa", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x147}, @nested={0x4, 0x6}]}, @nested={0x1ff, 0xf9, 0x0, 0x1, [@generic="326c3753c76f356e292e0a2227d9e19d4532a341c142823bfcd848b69c04205aa3939f63c360aba8ddc1bb230b9357c87b365bcd7562faa45e67a1fd", @generic="71bd2e0c8ce168bd6a850fd4d658e5cdf39c8765c457d890e424ef968d635acec9aa427dc22a39a1cb6c661ba6c45f0c1efa9dfacf0f0998b4231fc409e6fb669083c58a3c6d0d9096e817ff618a90d3666af9762b6f4adf018baf1858dc02cf21b14cacb875f28a0441fcf38ffb5fab40edd506ab0995bd22", @typed={0xe, 0x21, 0x0, 0x0, @str='/dev/vmci\x00'}, @typed={0x5, 0xbf, 0x0, 0x0, @str='\x00'}, @generic="7c32a42088226cbba8eadaf6c6a418e202242e459176e3a1eaa370ea6f9a63fb9c4b1f29c4be1cd6c5e444e53b8036b6b47704daaf965b92ac4e8df567aba253dc3954c913ac07b8fbe1389e0052d6519c76a21eadbdb002bdaad72ca9830dc97bd3de17d44d9e38a07af018344731157589efba5a8722c34c225e9650b737fa5a922628222caa159ed8567077d6704bbc8d17bba0ec", @typed={0x25, 0x7a, 0x0, 0x0, @str='/proc/sys/net/ipv4/vs/secure_tcp\x00'}, @generic, @typed={0x27, 0x9, 0x0, 0x0, @binary="fa5b5b349eb1dfb496f5959ef46696be55e8bbcd9b3c094f7ecdda51ed9c0df5817fec"}, @typed={0x46, 0x146, 0x0, 0x0, @binary="546af0fc27ffff825e6e415888caa4096f957de17b2059b3ad7d490009feb02c0612803b47f93be1438fe49fcd7b49adc341666e0627cd8fca5c1abb7167544f06b1"}]}, @generic="f6cf945e3d11dd28d3e2f51b4c6ec2f341b729e0d5c2d5e332f51713def9de1a8606669fc1cb31d03c22718ddb7f87f59608c14434d1b9936ba2fe8ad7849419c1291f4dd4874e6a9656261dabfd5644bc286aea6b04932d9178e208eb99a39d09aa174c1d447b27528b33e241eba24983d3b01c43e121a5328d77d23dd81d5ed752ab21fd113c635473b4b8f2e38adca5d5be729e91e338e9039d78460a2995db8578702dd7db176d2137584d5a865ba1336b7cac3f57dc842d90f2a535821afbfa9abede", @typed={0x8, 0x104, 0x0, 0x0, @uid}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x8}}]}, 0x888}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 0s ago: executing program 35 (id=3511): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) kernel console output (not intermixed with test programs): ed filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.341274][ T28] audit: type=1804 audit(1756013012.396:2446): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2576" name="/newroot/140/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 593.629916][T13146] program syz.3.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.629995][T13145] __nla_validate_parse: 6 callbacks suppressed [ 593.630009][T13145] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2582'. [ 594.006787][T13154] loop3: detected capacity change from 0 to 128 [ 594.064380][T13154] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.073803][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.086684][T13154] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 594.224734][T11288] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.573909][T13167] program syz.1.2591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.953465][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 595.153249][T13178] loop2: detected capacity change from 0 to 128 [ 595.170731][T13178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 595.188799][T13178] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 595.262433][T11222] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.405082][T13181] loop2: detected capacity change from 0 to 128 [ 595.416724][T13181] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 595.429489][T13181] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 595.502001][T11222] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.784755][T13188] program syz.1.2601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.833087][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 595.893217][T13194] raw_sendmsg: syz.0.2602 forgot to set AF_INET. Fix it! [ 596.015115][T13198] loop3: detected capacity change from 0 to 128 [ 596.052518][T13198] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.065215][T13198] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 596.081029][T13200] loop0: detected capacity change from 0 to 128 [ 596.125199][T13200] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.127272][T11288] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.146700][T13200] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 596.244665][T11176] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.290384][ T28] audit: type=1326 audit(1756013015.336:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.323499][ T28] audit: type=1326 audit(1756013015.366:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.346569][ T28] audit: type=1326 audit(1756013015.366:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.369821][ T28] audit: type=1326 audit(1756013015.366:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.393785][ T28] audit: type=1326 audit(1756013015.366:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.422284][ T28] audit: type=1326 audit(1756013015.366:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.460636][ T28] audit: type=1326 audit(1756013015.366:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.510883][ T28] audit: type=1326 audit(1756013015.366:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.533699][ T28] audit: type=1326 audit(1756013015.366:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.573695][ T28] audit: type=1326 audit(1756013015.366:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13195 comm="syz.1.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 596.987911][T13216] program syz.0.2611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.695558][T13223] loop2: detected capacity change from 0 to 128 [ 597.705303][T13221] loop3: detected capacity change from 0 to 512 [ 597.718196][T13221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 597.729469][T13223] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.747678][T13223] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 597.783412][T13227] loop0: detected capacity change from 0 to 128 [ 597.796876][T13221] EXT4-fs (loop3): 1 orphan inode deleted [ 597.797718][T13227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.812367][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 1 [ 597.819054][T13227] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 597.833883][T13221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.868984][T11222] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.881040][T13221] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.882280][T11176] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.954043][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.006584][T13233] loop0: detected capacity change from 0 to 512 [ 598.017872][T13233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 598.038562][T13233] EXT4-fs (loop0): 1 truncate cleaned up [ 598.049631][T13233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.156070][T13241] EXT4-fs (loop0): shut down requested (2) [ 598.215586][T13244] program syz.3.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.236981][T11176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.457573][T13255] loop2: detected capacity change from 0 to 2048 [ 598.475009][T13255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.517074][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.928793][T13268] program syz.0.2631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.091796][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 599.923451][T13280] program syz.2.2637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.085180][T13288] program syz.1.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.147661][T13292] syz.0.2642[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.147883][T13292] syz.0.2642[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.393366][T13302] IPv6: Can't replace route, no match found [ 600.700021][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 600.797764][T13318] program syz.2.2653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.930172][T13323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2655'. [ 601.173862][T13334] syz.0.2661[13334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.173997][T13334] syz.0.2661[13334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.254387][T13336] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2660'. [ 601.511057][T13343] program syz.0.2664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.810089][T13357] program syz.1.2669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.915981][T13360] netlink: 'syz.0.2671': attribute type 6 has an invalid length. [ 601.968887][T13361] tipc: Started in network mode [ 601.992096][T13361] tipc: Node identity ac14140f, cluster identity 4711 [ 602.000178][T13361] tipc: New replicast peer: 255.255.255.255 [ 602.010198][T13361] tipc: Enabled bearer , priority 10 [ 602.105535][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 602.105550][ T28] audit: type=1326 audit(1756013021.156:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 602.171726][T13365] program syz.0.2680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.210666][ T28] audit: type=1326 audit(1756013021.156:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 602.293071][T13369] program syz.1.2674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.307125][ T28] audit: type=1326 audit(1756013021.196:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 602.338765][ T28] audit: type=1326 audit(1756013021.196:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 602.365893][ T28] audit: type=1326 audit(1756013021.196:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 602.545169][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'. [ 603.031990][T13390] loop0: detected capacity change from 0 to 512 [ 603.196025][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 603.531662][T12078] tipc: Node number set to 2886997007 [ 604.258849][T13390] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 604.321988][T13390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.377453][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 604.415560][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 12: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 604.449792][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 604.476201][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 14: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 604.502825][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 15: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 604.527434][T13390] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.2682: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 604.781995][T13398] program syz.1.2685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.710494][T13407] loop2: detected capacity change from 0 to 1024 [ 605.891713][T11176] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 605.919884][T11176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.929759][T13407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.062991][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.084683][ T28] audit: type=1326 audit(1756013025.106:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13413 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 606.189932][ T28] audit: type=1326 audit(1756013025.236:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 606.207527][T13420] program syz.0.2696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.267082][ T28] audit: type=1326 audit(1756013025.276:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 606.296100][ T28] audit: type=1326 audit(1756013025.276:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 606.358532][ T28] audit: type=1326 audit(1756013025.286:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 606.449764][T13430] loop0: detected capacity change from 0 to 1024 [ 606.472695][T13430] EXT4-fs: Ignoring removed orlov option [ 606.512999][T13430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.635112][T11176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.879892][T13452] program syz.1.2709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.356865][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 607.356880][ T28] audit: type=1326 audit(1756013026.406:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 607.396368][ T28] audit: type=1326 audit(1756013026.436:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 607.558361][T13481] syz.1.2722[13481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.558502][T13481] syz.1.2722[13481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.892287][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 608.797650][T13496] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2727'. [ 608.863083][ T28] audit: type=1326 audit(1756013027.916:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 609.204885][T13509] loop3: detected capacity change from 0 to 2048 [ 609.231973][T13509] EXT4-fs (loop3): failed to initialize system zone (-117) [ 609.239458][T13509] EXT4-fs (loop3): mount failed [ 609.457775][T13520] loop3: detected capacity change from 0 to 1024 [ 609.466521][ T28] audit: type=1326 audit(1756013028.516:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 609.483625][T13524] loop0: detected capacity change from 0 to 2048 [ 609.502135][ T28] audit: type=1326 audit(1756013028.516:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13521 comm="syz.1.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 609.531685][T13520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.557903][ T28] audit: type=1800 audit(1756013028.606:2499): pid=13520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2736" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 609.579723][T13524] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.2737: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 609.801878][T13535] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2741'. [ 609.824527][T13520] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.2736: Allocating blocks 497-513 which overlap fs metadata [ 609.868293][T13519] EXT4-fs (loop3): pa ffff88805dac5828: logic 32, phys. 161, len 22 [ 609.877572][T13519] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 610.212131][ T28] audit: type=1326 audit(1756013029.266:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 610.520328][T13564] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2753'. [ 610.930366][T13581] loop3: detected capacity change from 0 to 512 [ 610.952797][T13581] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 611.023787][T13581] EXT4-fs mount: 3 callbacks suppressed [ 611.023830][T13581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.118508][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 611.153396][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 611.177620][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 611.200961][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 611.226834][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 611.250503][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 611.278515][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 611.302066][T13581] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 18: comm syz.3.2758: lblock 23 mapped to illegal pblock 18 (length 1) [ 611.327979][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 611.352216][T13581] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 20: comm syz.3.2758: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 612.990458][T13588] loop2: detected capacity change from 0 to 128 [ 613.066022][T13588] syz.2.2762: attempt to access beyond end of device [ 613.066022][T13588] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 613.091131][ T28] audit: type=1800 audit(1756013032.096:2501): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2762" name="file1" dev="loop2" ino=1048696 res=0 errno=0 [ 613.158112][T13588] syz.2.2762: attempt to access beyond end of device [ 613.158112][T13588] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 613.205455][T13588] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 613.220430][ T28] audit: type=1326 audit(1756013032.276:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.298822][ T28] audit: type=1326 audit(1756013032.276:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.386963][ T28] audit: type=1326 audit(1756013032.306:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.479326][ T28] audit: type=1326 audit(1756013032.306:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.612324][ T28] audit: type=1326 audit(1756013032.306:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.725337][ T28] audit: type=1326 audit(1756013032.306:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.772478][ T28] audit: type=1326 audit(1756013032.306:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.926943][ T28] audit: type=1326 audit(1756013032.306:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 613.964764][T11288] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 614.019862][ T28] audit: type=1326 audit(1756013032.306:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13591 comm="syz.1.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 614.024625][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.499278][T13622] loop0: detected capacity change from 0 to 256 [ 614.622367][T13622] netlink: 178020 bytes leftover after parsing attributes in process `syz.0.2778'. [ 614.645483][T13622] openvswitch: netlink: Key type 2832 is out of range max 32 [ 614.775595][T13631] loop2: detected capacity change from 0 to 512 [ 614.797325][T13631] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 615.037743][T13631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.131179][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 615.163365][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 615.187453][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 615.210760][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 615.234921][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 615.257755][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 615.283312][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 615.306517][T13631] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.2780: lblock 23 mapped to illegal pblock 18 (length 1) [ 615.322950][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 615.352055][T13631] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 20: comm syz.2.2780: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 617.501334][T13648] bond1: entered promiscuous mode [ 617.506628][T13648] bond1: entered allmulticast mode [ 617.527289][T13648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.730078][T11222] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 617.785043][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.031717][T13648] bond1 (unregistering): Released all slaves [ 618.476423][T13670] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2796'. [ 618.854583][T13682] tap0: tun_chr_ioctl cmd 1074025681 [ 618.937045][T13685] bridge0: entered promiscuous mode [ 618.947067][T13685] bridge0: port 3(macsec1) entered blocking state [ 618.980415][T13685] bridge0: port 3(macsec1) entered disabled state [ 619.006591][T13685] macsec1: entered allmulticast mode [ 619.053954][T13685] bridge0: entered allmulticast mode [ 619.075956][T13685] macsec1: left allmulticast mode [ 619.096565][T13685] bridge0: left allmulticast mode [ 619.121091][T13685] bridge0: left promiscuous mode [ 619.721826][T13706] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2808'. [ 619.986889][T13715] loop1: detected capacity change from 0 to 1024 [ 620.002387][T13715] EXT4-fs: Ignoring removed orlov option [ 620.038986][T13715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.100058][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 620.100075][ T28] audit: type=1800 audit(1756013039.146:2608): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2811" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 620.176818][ T28] audit: type=1326 audit(1756013039.216:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.217553][ T28] audit: type=1326 audit(1756013039.216:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.247447][ T28] audit: type=1326 audit(1756013039.226:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.284427][T13720] tipc: Started in network mode [ 620.289474][ T28] audit: type=1326 audit(1756013039.226:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.323236][T13720] tipc: Node identity ac14140f, cluster identity 4711 [ 620.330335][T13720] tipc: New replicast peer: 255.255.255.255 [ 620.343698][ T28] audit: type=1326 audit(1756013039.226:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.374645][T13720] tipc: Enabled bearer , priority 10 [ 620.382525][ T28] audit: type=1804 audit(1756013039.226:2614): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2811" name="/newroot/203/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 620.436371][ T28] audit: type=1326 audit(1756013039.226:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.509384][ T28] audit: type=1326 audit(1756013039.226:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.579636][ T28] audit: type=1326 audit(1756013039.266:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.1.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 620.917348][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.166287][T13738] loop1: detected capacity change from 0 to 1024 [ 621.205824][T13738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.269859][T13742] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2820'. [ 621.371109][T12055] tipc: Node number set to 2886997007 [ 621.527622][T13738] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.2819: Allocating blocks 497-513 which overlap fs metadata [ 621.558609][T13737] EXT4-fs (loop1): pa ffff88805dac5bc8: logic 32, phys. 161, len 22 [ 621.567024][T13737] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 621.823795][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.975777][T13751] program syz.0.2824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.975844][T13754] loop1: detected capacity change from 0 to 512 [ 621.993891][T13754] EXT4-fs: Ignoring removed nobh option [ 622.056982][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2823: corrupted inode contents [ 622.070343][T13758] program syz.3.2825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.079914][T13754] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.2823: mark_inode_dirty error [ 622.251740][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2823: corrupted inode contents [ 622.307012][T13754] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2823: mark_inode_dirty error [ 622.344075][T13754] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2823: Failed to acquire dquot type 0 [ 622.376502][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2823: corrupted inode contents [ 622.442692][T13754] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.2823: mark_inode_dirty error [ 622.516295][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2823: corrupted inode contents [ 622.533676][T13754] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2823: mark_inode_dirty error [ 622.566022][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2823: corrupted inode contents [ 622.587771][T13754] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 622.639366][T13767] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2829'. [ 622.660421][T13754] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2823: corrupted inode contents [ 622.674836][T13754] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.2823: mark_inode_dirty error [ 622.689719][T13769] program syz.3.2830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.709804][T13754] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 622.745916][T13754] EXT4-fs (loop1): 1 truncate cleaned up [ 622.771760][T13754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.818569][T13754] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.092269][T13772] tap0: tun_chr_ioctl cmd 1074025681 [ 623.114734][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.370361][T13783] program syz.0.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.614325][T13793] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2840'. [ 623.617850][T13792] loop2: detected capacity change from 0 to 1024 [ 623.638779][T13792] EXT4-fs: Ignoring removed orlov option [ 623.658924][T13792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.836446][T13798] tipc: Enabling of bearer rejected, already enabled [ 624.259294][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 624.482322][T13809] program syz.1.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.712524][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.719214][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.075129][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.111245][T13815] Falling back ldisc for ttyS3. [ 625.131807][T13817] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2849'. [ 625.334372][T13823] IPv4: Oversized IP packet from 127.202.26.0 [ 625.504848][T13829] program syz.2.2854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.585844][T13831] tipc: Enabled bearer , priority 0 [ 625.611022][T13831] tipc: Disabling bearer [ 625.792738][T13838] kernel read not supported for file /¡sxt (pid: 13838 comm: syz.2.2858) [ 625.822550][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 625.822567][ T28] audit: type=1800 audit(1756013044.876:2657): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2858" name=A17378741A dev="mqueue" ino=36227 res=0 errno=0 [ 625.881872][T13844] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2861'. [ 625.932212][ T28] audit: type=1326 audit(1756013044.916:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 625.980473][ T28] audit: type=1326 audit(1756013044.916:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.008039][ T28] audit: type=1326 audit(1756013044.936:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.035549][ T28] audit: type=1326 audit(1756013044.936:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.064194][ T28] audit: type=1326 audit(1756013044.936:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.098531][ T28] audit: type=1326 audit(1756013044.936:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.126296][ T28] audit: type=1326 audit(1756013044.936:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.154982][ T28] audit: type=1326 audit(1756013044.936:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.184500][ T28] audit: type=1326 audit(1756013044.936:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 626.254086][T13853] program syz.1.2865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.666073][T13871] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2872'. [ 627.111611][T13881] program syz.2.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.660663][T13900] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2885'. [ 629.420109][T13919] loop1: detected capacity change from 0 to 512 [ 629.428454][T13919] EXT4-fs: Ignoring removed nobh option [ 629.496507][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2893: corrupted inode contents [ 629.514427][T13919] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.2893: mark_inode_dirty error [ 629.520260][T13927] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2894'. [ 629.529953][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2893: corrupted inode contents [ 629.571210][T13919] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2893: mark_inode_dirty error [ 629.588427][T13919] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2893: Failed to acquire dquot type 0 [ 629.609174][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2893: corrupted inode contents [ 629.651733][T13919] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.2893: mark_inode_dirty error [ 629.684031][T13930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 629.698003][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2893: corrupted inode contents [ 629.715465][T13919] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2893: mark_inode_dirty error [ 629.729295][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2893: corrupted inode contents [ 629.761219][T13919] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 629.770301][T13919] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2893: corrupted inode contents [ 629.825068][T13919] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.2893: mark_inode_dirty error [ 629.843392][T13919] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 629.854252][T13919] EXT4-fs (loop1): 1 truncate cleaned up [ 629.865429][T13919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.879291][T13919] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.906471][T13938] loop3: detected capacity change from 0 to 512 [ 630.002096][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.019844][T13938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.053060][T13938] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.110428][T13938] EXT4-fs (loop3): shut down requested (0) [ 630.239648][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.473076][T13951] netlink: 468 bytes leftover after parsing attributes in process `syz.1.2904'. [ 630.486530][T13952] futex_wake_op: syz.0.2903 tries to shift op by -1; fix this program [ 630.514743][T13951] loop1: detected capacity change from 0 to 512 [ 630.551597][T13951] EXT4-fs (loop1): too many log groups per flexible block group [ 630.561790][T13951] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 630.568716][T13951] EXT4-fs (loop1): mount failed [ 630.787611][T13962] program syz.1.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.223579][T13975] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2913'. [ 631.276605][T13977] tipc: Enabled bearer , priority 0 [ 631.308185][T13977] tipc: Disabling bearer [ 632.232391][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 632.232408][ T28] audit: type=1326 audit(1756013051.276:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.294099][ T28] audit: type=1326 audit(1756013051.276:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.320027][ T28] audit: type=1326 audit(1756013051.316:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.349041][ T28] audit: type=1326 audit(1756013051.316:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.386539][T13988] program syz.3.2919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.400750][ T28] audit: type=1326 audit(1756013051.326:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.407445][T13985] loop1: detected capacity change from 0 to 1024 [ 632.435474][ T28] audit: type=1326 audit(1756013051.326:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.499727][ T28] audit: type=1326 audit(1756013051.326:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.527639][ T28] audit: type=1326 audit(1756013051.326:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.531728][T13985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.551082][ T28] audit: type=1326 audit(1756013051.326:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.585161][ T28] audit: type=1326 audit(1756013051.326:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13984 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 632.771077][T13985] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.2917: Allocating blocks 497-513 which overlap fs metadata [ 633.098941][T13998] loop2: detected capacity change from 0 to 512 [ 633.128358][T13998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.144786][T13998] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.177990][T13985] EXT4-fs (loop1): pa ffff88805dba5bc8: logic 32, phys. 161, len 22 [ 633.186313][T13985] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 633.198506][T13998] EXT4-fs (loop2): shut down requested (0) [ 633.199547][T13985] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 15: block 97:freeing already freed block (bit 6); block bitmap corrupt. [ 633.356420][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.368663][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.454165][T14006] openvswitch: netlink: Flow actions attr not present in new flow. [ 633.509599][T14008] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2926'. [ 633.588099][T14012] loop1: detected capacity change from 0 to 512 [ 634.099246][T14042] loop2: detected capacity change from 0 to 512 [ 634.106763][T14042] EXT4-fs: Ignoring removed nobh option [ 634.113880][T14042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 634.135752][T14042] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2938: iget: bad i_size value: 38620345925642 [ 634.165632][T14042] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2938: couldn't read orphan inode 15 (err -117) [ 634.180724][T14042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.180839][T12078] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 634.276274][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.350356][T14052] program syz.2.2943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.390712][T12078] usb 4-1: device descriptor read/64, error -71 [ 634.670827][T12078] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 634.841113][T12078] usb 4-1: device descriptor read/64, error -71 [ 634.860920][T14073] program syz.0.2954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.866087][T14074] program syz.2.2953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.960918][T12078] usb usb4-port1: attempt power cycle [ 635.056260][T14082] loop2: detected capacity change from 0 to 128 [ 635.072327][T14082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.085549][T14082] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.118677][T14082] netlink: 'syz.2.2958': attribute type 32 has an invalid length. [ 635.130180][T14085] program syz.0.2959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.260095][T11222] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.380807][T12078] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 635.422088][T12078] usb 4-1: device descriptor read/8, error -71 [ 635.431593][T14096] program syz.0.2964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.437471][T14098] program syz.2.2965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.564678][T14103] program syz.0.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.697399][T14106] program syz.1.2969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.701085][T12078] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 635.716123][T14110] loop2: detected capacity change from 0 to 256 [ 635.761597][T12078] usb 4-1: device descriptor read/8, error -71 [ 635.769117][T14109] syzkaller1: entered promiscuous mode [ 635.793598][T14109] syzkaller1: entered allmulticast mode [ 635.891822][T12078] usb usb4-port1: unable to enumerate USB device [ 636.001920][T14120] program syz.2.2975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.073353][T14122] program syz.1.2977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.403409][T14131] program syz.1.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.490682][T14145] program syz.3.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.592586][T14147] program syz.3.2988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.836151][T14155] loop1: detected capacity change from 0 to 512 [ 637.845214][T14153] program syz.2.2991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.860321][T14155] EXT4-fs: Ignoring removed nobh option [ 637.890843][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2992: corrupted inode contents [ 637.912974][T14155] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.2992: mark_inode_dirty error [ 637.927959][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.2992: corrupted inode contents [ 637.950694][T14155] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2992: mark_inode_dirty error [ 637.963304][T14155] __quota_error: 81 callbacks suppressed [ 637.963320][T14155] Quota error (device loop1): write_blk: dquota write failed [ 638.078642][T14155] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 638.155340][T14155] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2992: Failed to acquire dquot type 0 [ 638.314926][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2992: corrupted inode contents [ 638.428490][T14155] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.2992: mark_inode_dirty error [ 638.617475][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2992: corrupted inode contents [ 638.658484][T14155] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2992: mark_inode_dirty error [ 638.677846][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2992: corrupted inode contents [ 638.695817][T14155] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 638.705645][T14155] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.2992: corrupted inode contents [ 638.725252][T14155] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.2992: mark_inode_dirty error [ 638.758075][T14155] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 638.779684][T14155] EXT4-fs (loop1): 1 truncate cleaned up [ 638.800418][T14155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.051600][T14155] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.442031][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.480845][ T28] audit: type=1326 audit(1756013059.536:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 640.570679][ T28] audit: type=1326 audit(1756013059.556:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 640.603932][T14171] program syz.0.2996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.657641][ T28] audit: type=1326 audit(1756013059.566:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 640.760855][ T28] audit: type=1326 audit(1756013059.566:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 640.791061][T14173] program syz.3.2998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.838034][ T28] audit: type=1326 audit(1756013059.586:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 640.923817][ T28] audit: type=1326 audit(1756013059.586:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 641.005697][ T28] audit: type=1326 audit(1756013059.586:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 641.067090][ T28] audit: type=1326 audit(1756013059.596:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.3.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 641.665916][T14180] loop3: detected capacity change from 0 to 1024 [ 641.673840][T14179] program syz.0.3001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.713574][T14180] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.769442][T14180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.830733][T14180] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.905574][T14177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 641.918902][T14189] program syz.0.3003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.970742][T14177] EXT4-fs (loop3): Remounting filesystem read-only [ 642.104640][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.566637][T14206] program syz.3.3009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.841044][T14212] program syz.3.3012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.043338][T14218] program syz.3.3015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.285711][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 643.285726][ T28] audit: type=1326 audit(1756013062.336:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.363893][ T28] audit: type=1326 audit(1756013062.366:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.391517][ T28] audit: type=1326 audit(1756013830.385:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.426347][ T28] audit: type=1326 audit(1756013830.385:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.463528][T12077] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 643.543916][ T28] audit: type=1326 audit(1756013830.605:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14230 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.596329][ T28] audit: type=1326 audit(1756013830.605:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14230 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.624122][ T28] audit: type=1326 audit(1756013830.626:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14230 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.652235][ T28] audit: type=1326 audit(1756013830.626:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14230 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 643.653254][T12077] usb 4-1: unable to get BOS descriptor or descriptor too short [ 643.706217][T12077] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 643.714200][T12077] usb 4-1: can't read configurations, error -71 [ 643.734078][T14235] program syz.1.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.817833][T14239] program syz.1.3026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.049340][T14237] sch_fq: defrate 0 ignored. [ 644.477291][T14256] loop2: detected capacity change from 0 to 128 [ 644.639482][T14259] program syz.0.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.726610][T14263] program syz.3.3037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.130996][T14277] program syz.3.3043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.165916][ T28] audit: type=1326 audit(1756013832.306:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd38ebe9 code=0x7ffc0000 [ 645.226102][ T28] audit: type=1326 audit(1756013832.306:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd38ebe9 code=0x7ffc0000 [ 645.379694][T14282] loop2: detected capacity change from 0 to 512 [ 645.386900][T14282] EXT4-fs: Ignoring removed nobh option [ 645.492365][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3046: corrupted inode contents [ 645.511954][T14282] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.3046: mark_inode_dirty error [ 645.532106][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3046: corrupted inode contents [ 645.547247][T14292] loop3: detected capacity change from 0 to 512 [ 645.550428][T14293] program syz.1.3049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.554507][T14282] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3046: mark_inode_dirty error [ 645.575508][T14282] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3046: Failed to acquire dquot type 0 [ 645.589066][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3046: corrupted inode contents [ 645.640839][T14282] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.3046: mark_inode_dirty error [ 645.662623][T14292] netlink: 5264 bytes leftover after parsing attributes in process `syz.3.3050'. [ 645.676078][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3046: corrupted inode contents [ 645.689876][T14282] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3046: mark_inode_dirty error [ 645.745430][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3046: corrupted inode contents [ 645.764218][T14282] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 645.773643][T14282] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3046: corrupted inode contents [ 645.791928][T14282] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.3046: mark_inode_dirty error [ 645.803614][T14282] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 645.835223][T14282] EXT4-fs (loop2): 1 truncate cleaned up [ 645.848114][T14282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.868378][T14282] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.968246][T14303] tipc: New replicast peer: 255.255.255.83 [ 645.985078][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.990207][T14303] tipc: Enabled bearer , priority 10 [ 646.078367][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 646.113454][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 646.288040][T14317] loop1: detected capacity change from 0 to 512 [ 646.301291][T14317] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 646.326164][T14317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.349072][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 646.376892][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 646.405832][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 646.457606][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 646.480043][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 646.509865][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 646.538518][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 646.564361][T14317] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 18: comm syz.1.3062: lblock 23 mapped to illegal pblock 18 (length 1) [ 646.581606][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3061'. [ 646.603055][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 646.631548][T14317] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.3062: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 647.153389][T11393] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 647.211037][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.521125][T14345] program syz.1.3073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.704668][T14357] loop3: detected capacity change from 0 to 128 [ 647.717506][T14355] loop1: detected capacity change from 0 to 1024 [ 647.760925][T14355] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 647.818467][T14355] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #3: block 1: comm syz.1.3078: lblock 1 mapped to illegal pblock 1 (length 1) [ 647.845138][T14355] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3078: Failed to acquire dquot type 0 [ 647.867722][T14357] syz.3.3079: attempt to access beyond end of device [ 647.867722][T14357] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 647.890872][T14355] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.3078: Freeing blocks not in datazone - block = 0, count = 4096 [ 647.922983][T14355] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3078: Invalid inode bitmap blk 0 in block_group 0 [ 647.974750][ T11] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 647.978617][T14355] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 648.006386][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 0 [ 648.032804][T14355] EXT4-fs (loop1): 1 orphan inode deleted [ 648.050575][T14355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.080044][T14371] loop2: detected capacity change from 0 to 1024 [ 648.093655][T14371] ext3: Bad value for 'errors' [ 648.113188][T14355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.148689][T14373] program syz.3.3086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 648.190117][T14371] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 648.596590][T14385] loop1: detected capacity change from 0 to 512 [ 648.607211][T14385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 648.660672][T14385] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 648.680756][T14385] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3089: invalid indirect mapped block 2683928664 (level 1) [ 648.697188][T14385] EXT4-fs (loop1): Remounting filesystem read-only [ 648.705790][T14385] EXT4-fs (loop1): 1 truncate cleaned up [ 648.713302][T14385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.834288][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.980876][T14393] netlink: 5264 bytes leftover after parsing attributes in process `syz.0.3093'. [ 649.003824][T14399] tap0: tun_chr_ioctl cmd 1074025681 [ 649.162589][T14401] loop2: detected capacity change from 0 to 512 [ 649.179779][T14401] EXT4-fs: Ignoring removed nobh option [ 649.286297][T14403] program syz.0.3098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.354300][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3097: corrupted inode contents [ 649.389926][T14401] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.3097: mark_inode_dirty error [ 649.419167][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3097: corrupted inode contents [ 649.431716][T14401] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3097: mark_inode_dirty error [ 649.450582][T14401] __quota_error: 17 callbacks suppressed [ 649.450598][T14401] Quota error (device loop2): write_blk: dquota write failed [ 649.464227][T14401] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 649.474499][T14401] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3097: Failed to acquire dquot type 0 [ 649.509797][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3097: corrupted inode contents [ 649.534095][T14401] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.3097: mark_inode_dirty error [ 649.562767][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3097: corrupted inode contents [ 649.597617][T14401] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3097: mark_inode_dirty error [ 649.691632][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3097: corrupted inode contents [ 649.726735][T14401] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 649.736371][T14401] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3097: corrupted inode contents [ 649.795664][T14401] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.3097: mark_inode_dirty error [ 649.850504][ T28] audit: type=1326 audit(1756013837.230:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 649.883643][T14401] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 649.919605][T14401] EXT4-fs (loop2): 1 truncate cleaned up [ 649.939905][ T28] audit: type=1326 audit(1756013837.230:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 649.978367][T14401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.025533][T14401] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.035255][ T28] audit: type=1326 audit(1756013837.230:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.112124][ T28] audit: type=1326 audit(1756013837.230:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.146090][ T28] audit: type=1326 audit(1756013837.230:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.171081][ T28] audit: type=1326 audit(1756013837.230:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.245761][ T28] audit: type=1326 audit(1756013837.230:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.263547][T14423] tap0: tun_chr_ioctl cmd 1074025681 [ 650.278477][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.283525][ T28] audit: type=1326 audit(1756013837.230:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.0.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 650.633801][T14436] program syz.3.3113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.636524][T14435] loop2: detected capacity change from 0 to 512 [ 650.670092][T14435] EXT4-fs: Ignoring removed bh option [ 650.699066][T14435] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 650.728885][T14435] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 650.779233][T14435] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 650.816216][T14435] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 650.832057][T14441] loop1: detected capacity change from 0 to 512 [ 650.839407][T14441] EXT4-fs: Ignoring removed nobh option [ 650.848185][T14435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.049760][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3116: corrupted inode contents [ 651.066785][T14441] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.3116: mark_inode_dirty error [ 651.081121][T14435] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm +}[@: bg 0: block 353: padding at end of block bitmap is not set [ 651.096528][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3116: corrupted inode contents [ 651.117112][T14441] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.3116: mark_inode_dirty error [ 651.129328][T14435] +}[@[14435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.129469][T14435] +}[@[14435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.195922][T14441] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3116: Failed to acquire dquot type 0 [ 651.232599][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3116: corrupted inode contents [ 651.299122][T14441] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.3116: mark_inode_dirty error [ 651.309394][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.332816][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3116: corrupted inode contents [ 651.358168][T14441] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.3116: mark_inode_dirty error [ 651.371089][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3116: corrupted inode contents [ 651.406098][T14441] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 651.425265][T14441] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3116: corrupted inode contents [ 651.475306][T14441] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.3116: mark_inode_dirty error [ 651.489826][T14441] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 651.502062][T14441] EXT4-fs (loop1): 1 truncate cleaned up [ 651.509978][T14441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.524317][T14441] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.573289][T14453] tap0: tun_chr_ioctl cmd 1074025681 [ 651.628944][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.873945][T14460] sd 0:0:1:0: device reset [ 651.901256][T14462] program syz.2.3123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.203264][T14468] loop2: detected capacity change from 0 to 512 [ 652.221285][T14468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 652.282027][T14468] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 652.333073][T14468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3126: invalid indirect mapped block 2683928664 (level 1) [ 652.417313][T14468] EXT4-fs (loop2): Remounting filesystem read-only [ 652.453226][T14468] EXT4-fs (loop2): 1 truncate cleaned up [ 652.480829][T14468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.520828][T14475] pimreg: entered allmulticast mode [ 652.692396][T14481] tap0: tun_chr_ioctl cmd 1074025681 [ 652.715920][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.866179][T14487] batman_adv: batadv0: Adding interface: dummy0 [ 652.872583][T14487] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.918460][T14489] netlink: 53 bytes leftover after parsing attributes in process `syz.0.3136'. [ 652.924257][T14487] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 653.347896][T14501] loop2: detected capacity change from 0 to 512 [ 653.365873][T14501] EXT4-fs: Ignoring removed nobh option [ 653.404533][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3142: corrupted inode contents [ 653.440460][T14501] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.3142: mark_inode_dirty error [ 653.492344][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3142: corrupted inode contents [ 653.540032][T14501] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3142: mark_inode_dirty error [ 653.556773][T14501] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3142: Failed to acquire dquot type 0 [ 653.583352][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3142: corrupted inode contents [ 653.599127][T14501] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.3142: mark_inode_dirty error [ 653.616536][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3142: corrupted inode contents [ 653.629249][T14501] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3142: mark_inode_dirty error [ 653.644918][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3142: corrupted inode contents [ 653.657879][T14501] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 653.669884][T14501] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3142: corrupted inode contents [ 653.683062][T14501] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.3142: mark_inode_dirty error [ 653.695189][T14501] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 653.709680][T14501] EXT4-fs (loop2): 1 truncate cleaned up [ 653.718506][T14501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.736205][T14501] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.902793][T14515] tap0: tun_chr_ioctl cmd 1074025681 [ 653.921940][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.148376][T14517] netlink: 53 bytes leftover after parsing attributes in process `syz.2.3147'. [ 654.640698][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 654.640715][ T28] audit: type=1326 audit(1756013842.259:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.703001][ T28] audit: type=1326 audit(1756013842.291:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.769515][ T28] audit: type=1326 audit(1756013842.291:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.783455][T14535] loop2: detected capacity change from 0 to 512 [ 654.823509][T14535] EXT4-fs: Ignoring removed nobh option [ 654.827618][ T28] audit: type=1326 audit(1756013842.291:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.881422][T14537] tap0: tun_chr_ioctl cmd 1074025681 [ 654.887930][T14539] loop1: detected capacity change from 0 to 128 [ 654.899547][ T28] audit: type=1326 audit(1756013842.291:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.917759][T14543] program syz.3.3158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.936202][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3155: corrupted inode contents [ 654.954720][ T28] audit: type=1326 audit(1756013842.291:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 654.991975][T14535] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.3155: mark_inode_dirty error [ 655.005588][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3155: corrupted inode contents [ 655.021369][T14539] serio: Serial port ptm0 [ 655.026024][ T28] audit: type=1326 audit(1756013842.291:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 655.032776][T14535] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3155: mark_inode_dirty error [ 655.050124][ T28] audit: type=1326 audit(1756013842.291:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 655.090248][ T28] audit: type=1326 audit(1756013842.291:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 655.113029][ T28] audit: type=1326 audit(1756013842.291:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 655.157355][T14535] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3155: Failed to acquire dquot type 0 [ 655.198075][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3155: corrupted inode contents [ 655.231127][T14535] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.3155: mark_inode_dirty error [ 655.294727][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3155: corrupted inode contents [ 655.462621][T14535] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3155: mark_inode_dirty error [ 655.484885][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3155: corrupted inode contents [ 655.521420][T14535] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 655.577772][T14535] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3155: corrupted inode contents [ 655.604305][T14535] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.3155: mark_inode_dirty error [ 655.640845][T14535] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 655.664901][T14535] EXT4-fs (loop2): 1 truncate cleaned up [ 655.675079][T14535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.727170][T14535] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.848498][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.968738][T14566] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3168'. [ 655.993964][T14568] program syz.2.3167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.331358][T14573] tap0: tun_chr_ioctl cmd 1074025681 [ 656.698656][T14580] program syz.2.3173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.896458][T14584] loop1: detected capacity change from 0 to 512 [ 656.908350][T14584] EXT4-fs: Ignoring removed nobh option [ 656.970428][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3175: corrupted inode contents [ 656.989936][T14590] netlink: 'syz.0.3177': attribute type 6 has an invalid length. [ 657.003081][T14584] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.3175: mark_inode_dirty error [ 657.047190][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3175: corrupted inode contents [ 657.086963][T14593] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3178'. [ 657.108999][T14584] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.3175: mark_inode_dirty error [ 657.138560][T14584] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3175: Failed to acquire dquot type 0 [ 657.173384][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3175: corrupted inode contents [ 657.189992][T14584] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.3175: mark_inode_dirty error [ 657.203911][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3175: corrupted inode contents [ 657.205953][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3179'. [ 657.236658][T14597] batman_adv: batadv0: Removing interface: dummy0 [ 657.246244][T14584] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.3175: mark_inode_dirty error [ 657.261634][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.265349][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3175: corrupted inode contents [ 657.269299][T14597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.289384][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.297093][T14597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.308203][T14584] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 657.328460][T14601] loop3: detected capacity change from 0 to 512 [ 657.334181][T14584] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3175: corrupted inode contents [ 657.353111][T14601] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 657.362019][T14584] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.3175: mark_inode_dirty error [ 657.377179][T14584] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 657.386263][T14601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.390269][T14584] EXT4-fs (loop1): 1 truncate cleaned up [ 657.415892][T14584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.429924][T14584] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.471894][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.534840][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.949681][T14613] loop1: detected capacity change from 0 to 1024 [ 657.982271][T14613] EXT4-fs: inline encryption not supported [ 657.993138][T14613] EXT4-fs: Ignoring removed bh option [ 657.999964][T14613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 658.028854][T14613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.254683][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.290621][T14623] program syz.2.3189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 658.429411][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 658.519865][T14629] IPVS: Error joining to the multicast group [ 658.933258][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3198'. [ 658.978414][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.036486][T14642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.102002][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.143940][T14646] loop1: detected capacity change from 0 to 512 [ 659.174992][T14642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.184748][T14646] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 659.290455][T14646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.327814][T14648] netlink: 'syz.2.3201': attribute type 6 has an invalid length. [ 659.426764][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.647961][T14654] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3203'. [ 659.798323][T14658] program syz.2.3205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.864523][T14662] loop1: detected capacity change from 0 to 2048 [ 659.931370][T14662] Alternate GPT is invalid, using primary GPT. [ 659.937699][T14662] loop1: p1 p2 p3 [ 659.965944][T14667] program syz.3.3210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.136667][T14673] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 660.466621][T14688] program syz.3.3218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.502797][T14683] tap0: tun_chr_ioctl cmd 1074025681 [ 660.614054][T14694] program syz.3.3220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.766646][T14697] loop3: detected capacity change from 0 to 512 [ 660.780799][T14697] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 660.801432][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 660.801446][ T28] audit: type=1326 audit(1756013848.727:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 660.833654][ T28] audit: type=1326 audit(1756013848.727:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 660.859794][ T28] audit: type=1326 audit(1756013848.727:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 660.889874][T14697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.928851][ T28] audit: type=1326 audit(1756013848.727:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.140163][ T28] audit: type=1326 audit(1756013848.769:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.142152][T14705] loop1: detected capacity change from 0 to 512 [ 661.170365][T14705] EXT4-fs: Ignoring removed nobh option [ 661.177833][ T28] audit: type=1326 audit(1756013848.769:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.203001][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.220215][ T28] audit: type=1326 audit(1756013848.769:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.246138][ T28] audit: type=1326 audit(1756013848.769:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.273708][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3225: corrupted inode contents [ 661.298769][T14705] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.3225: mark_inode_dirty error [ 661.310318][ T28] audit: type=1326 audit(1756013848.769:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.370676][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.3225: corrupted inode contents [ 661.381825][ T28] audit: type=1326 audit(1756013848.769:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.1.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 661.425917][T14705] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.3225: mark_inode_dirty error [ 661.475811][T14705] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3225: Failed to acquire dquot type 0 [ 661.547803][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3225: corrupted inode contents [ 661.586809][T14705] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.3225: mark_inode_dirty error [ 661.626743][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3225: corrupted inode contents [ 661.669148][T14705] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.3225: mark_inode_dirty error [ 661.723015][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3225: corrupted inode contents [ 661.761426][T14705] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 661.780125][T14713] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3228'. [ 661.781195][T14705] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.3225: corrupted inode contents [ 661.827673][T14705] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.3225: mark_inode_dirty error [ 661.847778][T14705] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 661.877448][T14705] EXT4-fs (loop1): 1 truncate cleaned up [ 661.913220][T14705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.966198][T14705] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.076194][T14715] program syz.3.3229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.135410][T11393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.307666][T14725] loop2: detected capacity change from 0 to 512 [ 662.318156][T14725] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 662.337653][T14719] tap0: tun_chr_ioctl cmd 1074025681 [ 662.353076][T14725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.410245][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.520827][T14732] loop3: detected capacity change from 0 to 512 [ 662.549486][T14732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.585657][T14732] EXT4-fs (loop3): 1 truncate cleaned up [ 662.599958][T14732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.701649][T14744] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3241'. [ 662.706506][T14746] program syz.0.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.283907][T14756] tap0: tun_chr_ioctl cmd 1074025681 [ 663.293172][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.691489][T14767] program syz.0.3251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.771813][T14770] syz_tun: entered allmulticast mode [ 664.075808][T14776] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3255'. [ 664.399136][T14783] tap0: tun_chr_ioctl cmd 1074025681 [ 664.500834][T14785] ALSA: seq fatal error: cannot create timer (-19) [ 664.594209][T14790] program syz.2.3261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.250996][T14814] program syz.3.3272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.469709][T14822] loop3: detected capacity change from 0 to 512 [ 665.473175][T14824] loop1: detected capacity change from 0 to 164 [ 665.491319][T14824] rock: directory entry would overflow storage [ 665.498318][T14824] rock: sig=0x66, size=4, remaining=3 [ 665.498462][T14822] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 665.521725][T14824] rock: directory entry would overflow storage [ 665.529438][T14824] rock: sig=0x66, size=4, remaining=3 [ 665.630318][T14822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.662861][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 665.801657][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 665.895724][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 665.972961][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 666.015984][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 666.057106][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 666.109836][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 666.151821][T14822] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 18: comm syz.3.3275: lblock 23 mapped to illegal pblock 18 (length 1) [ 666.184053][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 666.227747][T14822] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 20: comm syz.3.3275: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 666.362947][T11288] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 666.423929][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.879872][T14844] random: crng reseeded on system resumption [ 666.923610][T14842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3283'. [ 667.059214][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 667.059228][ T28] audit: type=1326 audit(1756013855.300:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 667.122899][ T28] audit: type=1326 audit(1756013855.300:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 667.179982][ T28] audit: type=1326 audit(1756013855.300:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 667.246764][ T28] audit: type=1326 audit(1756013855.300:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 667.303883][ T28] audit: type=1326 audit(1756013855.300:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14849 comm="syz.3.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32c98ebe9 code=0x7ffc0000 [ 667.479283][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3290'. [ 667.906129][ T28] audit: type=1326 audit(1756013856.181:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 667.960712][ T28] audit: type=1326 audit(1756013856.181:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 668.008397][ T28] audit: type=1326 audit(1756013856.181:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 668.055325][ T28] audit: type=1326 audit(1756013856.181:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 668.080547][ T28] audit: type=1326 audit(1756013856.181:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14870 comm="syz.0.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 668.119498][T14880] syz.3.3298[14880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.119647][T14880] syz.3.3298[14880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.242086][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'. [ 668.263490][T14882] netem: change failed [ 668.557006][T14898] loop2: detected capacity change from 0 to 512 [ 668.581729][T14898] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 668.611506][T14898] EXT4-fs (loop2): mount failed [ 668.792803][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'. [ 669.313630][T14924] 9pnet: Could not find request transport: fd0x0000000000000007 [ 669.764842][T14939] loop3: detected capacity change from 0 to 8192 [ 669.828907][T14939] loop3: p1 p2 < > p3 p4 < p5 > [ 669.834005][T14939] loop3: partition table partially beyond EOD, truncated [ 669.852295][T14939] loop3: p1 size 100663296 extends beyond EOD, truncated [ 669.877092][T14939] loop3: p2 start 591104 is beyond EOD, truncated [ 669.903973][T14939] loop3: p3 start 33572980 is beyond EOD, truncated [ 669.934676][T14939] loop3: p5 size 100663296 extends beyond EOD, truncated [ 669.945279][T14946] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.974942][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 670.190702][T14953] serio: Serial port ptm0 [ 670.300502][T14959] program syz.3.3333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.783022][T14983] loop3: detected capacity change from 0 to 2048 [ 670.806814][T14983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.832426][T14989] program syz.2.3345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.008196][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.056533][T14996] 9pnet_fd: Insufficient options for proto=fd [ 671.254927][T15005] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3352'. [ 671.274959][T15005] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 671.318191][T15005] 0ªî{X¹¦: entered allmulticast mode [ 671.326066][T15005] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 671.437048][T15014] loop2: detected capacity change from 0 to 512 [ 671.454164][T15014] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 671.489126][T15014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.520367][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 671.551274][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 671.575847][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 671.625398][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 671.650963][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 671.673128][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 671.726915][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 671.755522][T15014] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.3355: lblock 23 mapped to illegal pblock 18 (length 1) [ 671.770622][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 671.807342][T15028] loop3: detected capacity change from 0 to 1024 [ 671.816282][T15014] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 20: comm syz.2.3355: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 671.843430][T15028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 671.856248][T15028] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.906786][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 672.285932][T11222] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 672.352431][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.361623][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 672.361638][ T28] audit: type=1326 audit(1756013860.854:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 672.407533][ T28] audit: type=1326 audit(1756013860.854:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 672.430842][ T28] audit: type=1326 audit(1756013860.854:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 672.458801][ T28] audit: type=1326 audit(1756013860.854:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 672.487243][ T28] audit: type=1326 audit(1756013860.854:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 672.532317][T15040] netlink: 'syz.1.3364': attribute type 10 has an invalid length. [ 672.593052][T15040] team0: Port device hsr_slave_0 added [ 673.093217][ T28] audit: type=1326 audit(1756013861.620:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.0.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7fc00000 [ 673.133627][ T28] audit: type=1326 audit(1756013861.620:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.0.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5a2b8ebe9 code=0x7fc00000 [ 673.156393][ T28] audit: type=1326 audit(1756013861.620:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.0.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7fc00000 [ 673.179025][ T28] audit: type=1326 audit(1756013861.620:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.0.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7fc00000 [ 673.202706][ T28] audit: type=1326 audit(1756013861.620:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.0.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7fc00000 [ 673.301694][T15080] program syz.0.3380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.470506][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'. [ 673.480335][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'. [ 673.671580][T15096] program syz.1.3389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.786494][T15102] program syz.0.3392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.050706][T15118] loop3: detected capacity change from 0 to 512 [ 674.075845][T15118] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 674.124658][T15118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.202306][T11288] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 674.220551][T15128] program syz.1.3403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.222666][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.437020][T15135] loop2: detected capacity change from 0 to 2048 [ 674.549866][T15135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.604003][T15142] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 674.854553][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'. [ 675.371450][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.622138][T15150] loop3: detected capacity change from 0 to 512 [ 675.640899][T15150] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 675.693077][T15150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.821230][T11288] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 675.861445][T15160] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3417'. [ 675.874528][T11288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.181826][T15174] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 676.242125][T15176] loop2: detected capacity change from 0 to 512 [ 676.273621][T15176] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 676.339232][T15176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.425996][T11222] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 676.443301][T11222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.687597][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 677.842948][T15206] program syz.0.3435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.516712][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3438'. [ 679.286104][T15231] program syz.1.3447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.304278][T15235] netlink: 'syz.2.3448': attribute type 10 has an invalid length. [ 679.325435][T15235] dummy0: left promiscuous mode [ 679.330367][T15235] dummy0: left allmulticast mode [ 679.355543][T15235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 679.549605][T15250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3454'. [ 679.728997][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 679.729014][ T28] audit: type=1326 audit(1756013868.602:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 679.758859][ T28] audit: type=1326 audit(1756013868.602:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.630935][ T28] audit: type=1326 audit(1756013868.602:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.694203][ T28] audit: type=1326 audit(1756013868.623:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.752574][ T28] audit: type=1326 audit(1756013868.623:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.797127][ T28] audit: type=1326 audit(1756013868.623:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.838591][ T28] audit: type=1326 audit(1756013868.623:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.861616][ T28] audit: type=1326 audit(1756013868.665:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.893507][ T28] audit: type=1326 audit(1756013868.665:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 680.918546][ T28] audit: type=1326 audit(1756013868.676:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.0.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a2b8ebe9 code=0x7ffc0000 [ 682.009966][T15271] program syz.1.3460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.091339][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 682.567002][T15290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3470'. [ 683.241737][T15308] program syz.2.3478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.284801][T15310] netlink: 178020 bytes leftover after parsing attributes in process `syz.1.3479'. [ 683.294450][T15310] openvswitch: netlink: Key type 2832 is out of range max 32 [ 683.599525][T15323] loop2: detected capacity change from 0 to 128 [ 683.722987][T15323] syz.2.3486: attempt to access beyond end of device [ 683.722987][T15323] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 683.845791][T15323] syz.2.3486: attempt to access beyond end of device [ 683.845791][T15323] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 683.863142][T15323] syz.2.3486: attempt to access beyond end of device [ 683.863142][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.881483][T15323] syz.2.3486: attempt to access beyond end of device [ 683.881483][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.905173][T15323] syz.2.3486: attempt to access beyond end of device [ 683.905173][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.924886][T15323] syz.2.3486: attempt to access beyond end of device [ 683.924886][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.949792][T15323] syz.2.3486: attempt to access beyond end of device [ 683.949792][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.966914][T15323] syz.2.3486: attempt to access beyond end of device [ 683.966914][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.970530][T15336] netlink: 178020 bytes leftover after parsing attributes in process `syz.0.3492'. [ 683.980337][T15323] syz.2.3486: attempt to access beyond end of device [ 683.980337][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 683.992212][T15336] openvswitch: netlink: Key type 2832 is out of range max 32 [ 684.012339][T15323] syz.2.3486: attempt to access beyond end of device [ 684.012339][T15323] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 684.065034][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.071816][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.541615][T15370] loop2: detected capacity change from 0 to 2364 [ 696.654620][T15368] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 696.654693][T15368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.656465][T15368] vhci_hcd vhci_hcd.0: Device attached [ 696.675255][T15368] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 696.675278][T15368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 696.675330][T15368] vhci_hcd vhci_hcd.0: Device attached [ 696.679774][T15368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 696.690246][T15368] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 696.690289][T15368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 696.690347][T15368] vhci_hcd vhci_hcd.0: Device attached [ 696.694518][T15376] vhci_hcd: connection closed [ 696.707677][T15378] vhci_hcd: connection closed [ 696.707949][T15374] vhci_hcd: connection closed [ 696.737304][ T169] vhci_hcd: stop threads [ 696.772555][ T169] vhci_hcd: release socket [ 696.772580][ T169] vhci_hcd: disconnect device [ 696.772837][ T169] vhci_hcd: stop threads [ 696.772847][ T169] vhci_hcd: release socket [ 696.772862][ T169] vhci_hcd: disconnect device [ 696.773714][ T169] vhci_hcd: stop threads [ 696.773725][ T169] vhci_hcd: release socket [ 696.774269][ T169] vhci_hcd: disconnect device [ 697.500725][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 697.500742][ T28] audit: type=1326 audit(1756013887.259:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.567346][ T28] audit: type=1326 audit(1756013887.301:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.613194][ T28] audit: type=1326 audit(1756013887.301:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.661751][ T28] audit: type=1326 audit(1756013887.301:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.684787][ T28] audit: type=1326 audit(1756013887.312:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.707593][ T28] audit: type=1326 audit(1756013887.312:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.709400][T15392] program syz.1.3509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.730342][ T28] audit: type=1326 audit(1756013887.312:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.764057][ T28] audit: type=1326 audit(1756013887.312:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.795087][ T28] audit: type=1326 audit(1756013887.312:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 697.817731][T15392] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 697.828862][ T28] audit: type=1326 audit(1756013887.312:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15388 comm="syz.1.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9822f8ebe9 code=0x7ffc0000 [ 698.175685][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3511'. [ 698.196373][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3511'. [ 698.213095][T15400] ip6gretap0: entered promiscuous mode [ 698.221860][T15400] ip6gretap0: left promiscuous mode [ 742.580774][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.587262][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.100295][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.106758][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.604567][ T29] INFO: task kworker/1:6:12076 blocked for more than 143 seconds. [ 820.612751][ T29] Not tainted 6.6.102-syzkaller #0 [ 820.618429][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.627271][ T29] task:kworker/1:6 state:D stack:27120 pid:12076 ppid:2 flags:0x00004000 [ 820.636651][ T29] Workqueue: events rfkill_global_led_trigger_worker [ 820.643474][ T29] Call Trace: [ 820.646816][ T29] [ 820.649971][ T29] __schedule+0x14d2/0x44d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 820.654528][ T29] ? mark_lock+0x94/0x320 [ 820.659016][ T29] ? asan.module_dtor+0x20/0x20 [ 820.663926][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 820.669238][ T29] schedule+0xbd/0x170 [ 820.673561][ T29] schedule_preempt_disabled+0x13/0x20 [ 820.679238][ T29] __mutex_lock+0x6b7/0xcc0 [ 820.684489][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 820.689523][ T29] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 820.705809][ T29] ? mutex_lock_nested+0x20/0x20 [ 820.710812][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 820.726002][ T29] ? read_lock_is_recursive+0x20/0x20 [ 820.731440][ T29] ? process_scheduled_works+0x957/0x15b0 [ 820.738326][ T29] rfkill_global_led_trigger_worker+0x27/0xd0 [ 820.750272][ T29] ? process_scheduled_works+0x957/0x15b0 [ 820.770332][ T29] process_scheduled_works+0xa45/0x15b0 [ 820.776618][ T29] ? assign_work+0x400/0x400 [ 820.781259][ T29] ? assign_work+0x39e/0x400 [ 820.785954][ T29] worker_thread+0xa55/0xfc0 [ 820.790613][ T29] kthread+0x2fa/0x390 [ 820.795076][ T29] ? pr_cont_work+0x560/0x560 [ 820.799768][ T29] ? kthread_blkcg+0xd0/0xd0 [ 820.804413][ T29] ret_from_fork+0x48/0x80 [ 820.808842][ T29] ? kthread_blkcg+0xd0/0xd0 [ 820.813521][ T29] ret_from_fork_asm+0x11/0x20 [ 820.818323][ T29] [ 820.821458][ T29] INFO: task kworker/1:7:12077 blocked for more than 143 seconds. [ 820.829290][ T29] Not tainted 6.6.102-syzkaller #0 [ 820.834999][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.843720][ T29] task:kworker/1:7 state:D stack:25640 pid:12077 ppid:2 flags:0x00004000 [ 820.852992][ T29] Workqueue: events rfkill_sync_work [ 820.858455][ T29] Call Trace: [ 820.861787][ T29] [ 820.864755][ T29] __schedule+0x14d2/0x44d0 [ 820.869392][ T29] ? mark_lock+0x94/0x320 [ 820.873748][ T29] ? asan.module_dtor+0x20/0x20 [ 820.878678][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 820.883908][ T29] schedule+0xbd/0x170 [ 820.888041][ T29] schedule_preempt_disabled+0x13/0x20 [ 820.893531][ T29] __mutex_lock+0x6b7/0xcc0 [ 820.898086][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 820.902798][ T29] ? nfc_rfkill_set_block+0x50/0x2e0 [ 820.908123][ T29] ? mutex_lock_nested+0x20/0x20 [ 820.913073][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 820.918334][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 820.924246][ T29] ? _raw_spin_unlock+0x40/0x40 [ 820.929136][ T29] ? nfc_unregister_device+0x2a0/0x2a0 [ 820.934671][ T29] nfc_rfkill_set_block+0x50/0x2e0 [ 820.939826][ T29] ? nfc_unregister_device+0x2a0/0x2a0 [ 820.945344][ T29] rfkill_set_block+0x1c6/0x420 [ 820.950213][ T29] rfkill_sync_work+0x114/0x200 [ 820.955171][ T29] ? process_scheduled_works+0x957/0x15b0 [ 820.960915][ T29] process_scheduled_works+0xa45/0x15b0 [ 820.966609][ T29] ? assign_work+0x400/0x400 [ 820.971222][ T29] ? assign_work+0x39e/0x400 [ 820.975869][ T29] worker_thread+0xa55/0xfc0 [ 820.980472][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 820.986442][ T29] kthread+0x2fa/0x390 [ 820.990517][ T29] ? pr_cont_work+0x560/0x560 [ 820.995249][ T29] ? kthread_blkcg+0xd0/0xd0 [ 820.999857][ T29] ret_from_fork+0x48/0x80 [ 821.004315][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.008914][ T29] ret_from_fork_asm+0x11/0x20 [ 821.013745][ T29] [ 821.016788][ T29] INFO: task syz.3.3452:15241 blocked for more than 143 seconds. [ 821.024661][ T29] Not tainted 6.6.102-syzkaller #0 [ 821.030358][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.039057][ T29] task:syz.3.3452 state:D stack:27016 pid:15241 ppid:11288 flags:0x00004004 [ 821.048307][ T29] Call Trace: [ 821.051688][ T29] [ 821.054641][ T29] __schedule+0x14d2/0x44d0 [ 821.059266][ T29] ? lockdep_unlock+0x137/0x2d0 [ 821.064148][ T29] ? _find_first_zero_bit+0xd3/0x100 [ 821.069613][ T29] ? asan.module_dtor+0x20/0x20 [ 821.074519][ T29] schedule+0xbd/0x170 [ 821.078670][ T29] schedule_timeout+0x9b/0x280 [ 821.083466][ T29] ? console_conditional_schedule+0x40/0x40 [ 821.089505][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 821.095495][ T29] ? lock_chain_count+0x20/0x20 [ 821.100419][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 821.105459][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 821.110885][ T29] ? wait_for_completion+0x26c/0x590 [ 821.116230][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.121465][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 821.126727][ T29] ? wait_for_completion+0x26c/0x590 [ 821.132022][ T29] wait_for_completion+0x2bd/0x590 [ 821.137193][ T29] ? io_schedule+0xd0/0xd0 [ 821.141621][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.146888][ T29] ? __flush_work+0xe6/0x9f0 [ 821.151487][ T29] __flush_work+0x895/0x9f0 [ 821.156022][ T29] ? __flush_work+0xe6/0x9f0 [ 821.160613][ T29] ? flush_work+0x20/0x20 [ 821.165082][ T29] ? move_linked_works+0x230/0x230 [ 821.170268][ T29] ? lock_chain_count+0x20/0x20 [ 821.175472][ T29] ? __cancel_work_timer+0x335/0x520 [ 821.180795][ T29] __cancel_work_timer+0x3b0/0x520 [ 821.185969][ T29] ? cancel_work_sync+0x20/0x20 [ 821.190833][ T29] ? netlink_broadcast+0x37/0x50 [ 821.195924][ T29] ? nfc_unregister_device+0x63/0x2a0 [ 821.201409][ T29] ? mutex_lock_nested+0x20/0x20 [ 821.206388][ T29] ? nfc_genl_device_removed+0x22e/0x320 [ 821.212129][ T29] ? destroy_workqueue+0x898/0xf20 [ 821.217272][ T29] ? nfc_genl_setup_device_added+0x320/0x320 [ 821.223338][ T29] ? destroy_workqueue+0xd80/0xf20 [ 821.228468][ T29] ? destroy_workqueue+0x898/0xf20 [ 821.233655][ T29] rfkill_unregister+0x92/0x220 [ 821.238529][ T29] nfc_unregister_device+0x96/0x2a0 [ 821.243820][ T29] ? virtual_ncidev_open+0x1a0/0x1a0 [ 821.249163][ T29] virtual_ncidev_close+0x59/0x90 [ 821.254311][ T29] __fput+0x234/0x970 [ 821.258423][ T29] task_work_run+0x1ce/0x250 [ 821.263060][ T29] ? task_work_cancel+0x240/0x240 [ 821.268140][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 821.273630][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 821.279076][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 821.284672][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 821.290370][ T29] do_syscall_64+0x61/0xb0 [ 821.294799][ T29] ? clear_bhb_loop+0x40/0x90 [ 821.299568][ T29] ? clear_bhb_loop+0x40/0x90 [ 821.304277][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.310220][ T29] RIP: 0033:0x7fb32c98ebe9 [ 821.314669][ T29] RSP: 002b:00007ffcbc28a448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 821.323139][ T29] RAX: 0000000000000000 RBX: 00000000000a6502 RCX: 00007fb32c98ebe9 [ 821.331169][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 821.339218][ T29] RBP: 00007fb32cbb7da0 R08: 0000000000000001 R09: 00000007bc28a73f [ 821.347232][ T29] R10: 0000001b2cf20000 R11: 0000000000000246 R12: 00007fb32cbb5fac [ 821.355257][ T29] R13: 00007fb32cbb5fa0 R14: ffffffffffffffff R15: 00007ffcbc28a560 [ 821.363316][ T29] [ 821.366441][ T29] [ 821.366441][ T29] Showing all locks held in the system: [ 821.374560][ T29] 1 lock held by khungtaskd/29: [ 821.379415][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 821.389470][ T29] 2 locks held by getty/5550: [ 821.394601][ T29] #0: ffff88814cba10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 821.404565][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 821.414720][ T29] 3 locks held by kworker/1:6/12076: [ 821.420036][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 821.431095][ T29] #1: ffffc9000feafd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 821.444674][ T29] #2: ffffffff8e297268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 821.456092][ T29] 4 locks held by kworker/1:7/12077: [ 821.461424][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 821.472440][ T29] #1: ffffc9000fecfd00 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 821.484911][ T29] #2: ffffffff8e297268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x2e/0x200 [ 821.495038][ T29] #3: ffff88807dfd5100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 821.504821][ T29] 1 lock held by syz.3.3452/15241: [ 821.510227][ T29] #0: ffff88807dfd5100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 821.520124][ T29] 2 locks held by syz-executor/15345: [ 821.525552][ T29] #0: ffff888079690118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 821.535654][ T29] #1: ffffffff8e297268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 821.545655][ T29] 2 locks held by syz.2.3506/15383: [ 821.550867][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.559360][ T29] #1: ffffffff8e297268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x12d/0x820 [ 821.569497][ T29] 1 lock held by syz.2.3506/15385: [ 821.574638][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.583150][ T29] 1 lock held by syz.2.3506/15387: [ 821.588276][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.596772][ T29] 1 lock held by syz.1.3511/15397: [ 821.601956][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.610674][ T29] 1 lock held by syz.0.3513/15406: [ 821.615804][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.624316][ T29] 1 lock held by syz-executor/15409: [ 821.629651][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.638115][ T29] 1 lock held by syz-executor/15412: [ 821.643450][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.652004][ T29] 1 lock held by syz-executor/15413: [ 821.657286][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.665781][ T29] 1 lock held by syz-executor/15415: [ 821.671093][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.679764][ T29] 1 lock held by syz-executor/15417: [ 821.685053][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.693663][ T29] 1 lock held by syz-executor/15420: [ 821.699023][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.707579][ T29] 1 lock held by syz-executor/15421: [ 821.713152][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.721763][ T29] 1 lock held by syz-executor/15423: [ 821.727119][ T29] #0: ffffffff8d4c37a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5a/0x370 [ 821.735645][ T29] [ 821.737988][ T29] ============================================= [ 821.737988][ T29] [ 821.746424][ T29] NMI backtrace for cpu 1 [ 821.750759][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 821.758651][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.768732][ T29] Call Trace: [ 821.772018][ T29] [ 821.774950][ T29] dump_stack_lvl+0x16c/0x230 [ 821.779632][ T29] ? preempt_count_add+0x91/0x1a0 [ 821.784663][ T29] ? show_regs_print_info+0x20/0x20 [ 821.789866][ T29] ? load_image+0x3b0/0x3b0 [ 821.794397][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 821.799345][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 821.805509][ T29] ? _printk+0xd0/0x110 [ 821.809682][ T29] ? load_image+0x3b0/0x3b0 [ 821.814196][ T29] ? load_image+0x3b0/0x3b0 [ 821.818709][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 821.824788][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 821.830777][ T29] watchdog+0xf41/0xf80 [ 821.834941][ T29] ? watchdog+0x1e1/0xf80 [ 821.839284][ T29] kthread+0x2fa/0x390 [ 821.843360][ T29] ? hungtask_pm_notify+0x90/0x90 [ 821.848407][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.853023][ T29] ret_from_fork+0x48/0x80 [ 821.857456][ T29] ? kthread_blkcg+0xd0/0xd0 [ 821.862058][ T29] ret_from_fork_asm+0x11/0x20 [ 821.866843][ T29] [ 821.870489][ T29] Sending NMI from CPU 1 to CPUs 0: [ 821.875898][ C0] NMI backtrace for cpu 0 [ 821.875914][ C0] CPU: 0 PID: 169 Comm: kworker/u4:5 Not tainted 6.6.102-syzkaller #0 [ 821.875932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.875942][ C0] Workqueue: 0x0 (events_unbound) [ 821.875964][ C0] RIP: 0010:detach_task+0x137/0x340 [ 821.875986][ C0] Code: 00 0f 1f 44 00 00 41 80 3c 17 00 4c 8b 34 24 74 08 48 89 ef e8 0a 96 7b 00 48 8b 7b 08 4c 89 f6 ba 08 00 00 00 e8 89 67 fa ff <48> 83 c3 14 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f [ 821.876000][ C0] RSP: 0018:ffffc90002e77540 EFLAGS: 00000082 [ 821.876013][ C0] RAX: ffff8880b8f3c51c RBX: ffffc90002e77960 RCX: dffffc0000000000 [ 821.876026][ C0] RDX: ffff8880186a5ab8 RSI: 0000000000000001 RDI: ffff8880b8f3c51c [ 821.876038][ C0] RBP: ffffc90002e77968 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 821.876050][ C0] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff8880186a5f6c [ 821.876063][ C0] R13: 1ffff110030d4bed R14: ffff8880186a5a00 R15: 1ffff920005cef2d [ 821.876075][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 821.876089][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.876100][ C0] CR2: 00007fe17696fabf CR3: 000000000cb30000 CR4: 00000000003506f0 [ 821.876114][ C0] Call Trace: [ 821.876120][ C0] [ 821.876129][ C0] load_balance+0x3e40/0x54a0 [ 821.876168][ C0] ? update_blocked_averages+0x1560/0x1560 [ 821.876199][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 821.876239][ C0] ? local_clock+0x20/0x20 [ 821.876261][ C0] newidle_balance+0x696/0x1050 [ 821.876299][ C0] ? newidle_balance+0x25c/0x1050 [ 821.876330][ C0] balance_fair+0x38/0x70 [ 821.876346][ C0] __schedule+0x26df/0x44d0 [ 821.876379][ C0] ? asan.module_dtor+0x20/0x20 [ 821.876400][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 821.876422][ C0] ? kthread_data+0x4f/0xc0 [ 821.876447][ C0] ? wq_worker_sleeping+0x63/0x240 [ 821.876465][ C0] schedule+0xbd/0x170 [ 821.876484][ C0] worker_thread+0xc01/0xfc0 [ 821.876518][ C0] kthread+0x2fa/0x390 [ 821.876532][ C0] ? pr_cont_work+0x560/0x560 [ 821.876553][ C0] ? kthread_blkcg+0xd0/0xd0 [ 821.876568][ C0] ret_from_fork+0x48/0x80 [ 821.876588][ C0] ? kthread_blkcg+0xd0/0xd0 [ 821.876603][ C0] ret_from_fork_asm+0x11/0x20 [ 821.876634][ C0] [ 821.876950][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 822.109849][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 822.117754][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 822.128165][ T29] Call Trace: [ 822.131454][ T29] [ 822.134419][ T29] dump_stack_lvl+0x16c/0x230 [ 822.139136][ T29] ? show_regs_print_info+0x20/0x20 [ 822.144347][ T29] ? load_image+0x3b0/0x3b0 [ 822.148878][ T29] panic+0x2c0/0x710 [ 822.152790][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 822.158441][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 822.162976][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 822.168546][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 822.174725][ T29] watchdog+0xf80/0xf80 [ 822.179417][ T29] ? watchdog+0x1e1/0xf80 [ 822.183763][ T29] kthread+0x2fa/0x390 [ 822.187838][ T29] ? hungtask_pm_notify+0x90/0x90 [ 822.192896][ T29] ? kthread_blkcg+0xd0/0xd0 [ 822.197503][ T29] ret_from_fork+0x48/0x80 [ 822.201936][ T29] ? kthread_blkcg+0xd0/0xd0 [ 822.206531][ T29] ret_from_fork_asm+0x11/0x20 [ 822.211337][ T29] [ 822.214944][ T29] Kernel Offset: disabled [ 822.219278][ T29] Rebooting in 86400 seconds..