last executing test programs: 35.363422492s ago: executing program 3 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 35.292458343s ago: executing program 3 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}}, 0x28}}, 0x0) 35.145190803s ago: executing program 3 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r1, 0x401, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004) 35.022283005s ago: executing program 3 (id=318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 34.603630157s ago: executing program 3 (id=326): socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000200)='workqueue_queue_work\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 33.931996931s ago: executing program 3 (id=335): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 33.467176234s ago: executing program 32 (id=335): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 2.485732734s ago: executing program 0 (id=736): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x60}}, 0x0) 2.196874576s ago: executing program 1 (id=742): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001500)="b2", 0x1}], 0x1}}], 0x1, 0x4000000) 2.196561256s ago: executing program 0 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.095573447s ago: executing program 1 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 2.032782597s ago: executing program 0 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 1.929482598s ago: executing program 0 (id=750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4c02}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x880) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.853090708s ago: executing program 1 (id=751): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 1.803146389s ago: executing program 2 (id=752): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) connect$vsock_stream(r0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') 1.371194642s ago: executing program 4 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00'], 0x0) 1.301912602s ago: executing program 4 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xffffffffffffff60) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) 680.270256ms ago: executing program 4 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72c", 0x1c}], 0x1, 0x7, 0x1) 679.851976ms ago: executing program 1 (id=762): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r0, 0x100c17a) truncate(&(0x7f0000000000)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) utime(&(0x7f0000000180)='./file2\x00', 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000098000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x33, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86f", 0x0, 0x86, 0x0, 0x19, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36e", 0x0}, 0x50) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000002d80)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000000)=0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10180ca, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000a40)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240)) 645.805786ms ago: executing program 2 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 505.500247ms ago: executing program 4 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 405.208087ms ago: executing program 4 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r4 = dup3(r2, r3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0xf) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 404.856467ms ago: executing program 0 (id=766): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 404.612557ms ago: executing program 2 (id=767): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x4000800, &(0x7f0000000140)={0x11, 0x2}, 0xcc561234a8c0bae1) 311.638198ms ago: executing program 2 (id=768): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 228.708179ms ago: executing program 4 (id=769): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 81.834459ms ago: executing program 2 (id=770): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futimesat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 0s ago: executing program 2 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) kernel console output (not intermixed with test programs): tion attr: rate: 0, type: 0x35f7 [ 108.511341][ T6482] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 108.542942][ T6478] XFS (loop2): Quotacheck: Done. [ 108.554092][ T6482] F2FS-fs (loop1): Image doesn't support compression [ 108.594909][ T6482] F2FS-fs (loop1): invalid crc value [ 108.621658][ T27] audit: type=1800 audit(1762702087.774:57): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="bus" dev="loop2" ino=4427 res=0 errno=0 [ 108.683406][ T6482] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.743454][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.895837][ T6482] F2FS-fs (loop1): Start checkpoint disabled! [ 108.943430][ T6482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 109.155750][ T6480] NILFS (loop0): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 109.216362][ T6480] NILFS (loop0): unrecognized mount option "auto_da_alloc=0x00000000000000a3" [ 109.354191][ T49] kworker/u4:3: attempt to access beyond end of device [ 109.354191][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.395599][ T49] F2FS-fs (loop1): Remounting filesystem read-only [ 109.423967][ T49] F2FS-fs (loop1): Remounting filesystem read-only [ 110.158092][ T6494] loop2: detected capacity change from 0 to 32768 [ 110.189449][ T6494] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.249269][ T6494] XFS (loop2): Ending clean mount [ 110.285554][ T6494] XFS (loop2): Quotacheck needed: Please wait. [ 110.378856][ T6494] XFS (loop2): Quotacheck: Done. [ 110.539931][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.650883][ T6501] loop1: detected capacity change from 0 to 32768 [ 110.738256][ T6501] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.839534][ T6501] XFS (loop1): Ending clean mount [ 110.876144][ T6501] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 111.006703][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.061688][ T6525] loop2: detected capacity change from 0 to 128 [ 111.120987][ T6503] loop3: detected capacity change from 0 to 32768 [ 111.147012][ T6525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.203130][ T6525] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.258550][ T6503] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.405740][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.453496][ T6515] loop0: detected capacity change from 0 to 32768 [ 111.466327][ T6536] loop1: detected capacity change from 0 to 1024 [ 111.467075][ T6515] (syz.0.117,6515,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.488469][ T6536] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.501127][ T6536] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 111.531136][ T6515] (syz.0.117,6515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.606051][ T6536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.608062][ T6503] XFS (loop3): Ending clean mount [ 111.651131][ T6515] JBD2: Ignoring recovery information on journal [ 111.693514][ T6503] XFS (loop3): Quotacheck needed: Please wait. [ 111.702046][ T6536] overlayfs: missing 'lowerdir' [ 111.753720][ T6536] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.119: missing EA_INODE flag [ 111.764667][ T6515] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.809528][ T6503] XFS (loop3): Quotacheck: Done. [ 111.809873][ T6536] EXT4-fs (loop1): Remounting filesystem read-only [ 111.939321][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.972353][ T5796] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.042373][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 112.270890][ T6546] ip6t_srh: unknown srh match flags 4000 [ 112.480776][ T6538] loop2: detected capacity change from 0 to 32768 [ 112.539803][ T6538] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.553680][ T6548] loop3: detected capacity change from 0 to 4096 [ 112.619698][ T6559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.630225][ T6538] XFS (loop2): Ending clean mount [ 112.638597][ T6538] XFS (loop2): Quotacheck needed: Please wait. [ 112.700962][ T6538] XFS (loop2): Quotacheck: Done. [ 112.760142][ T27] audit: type=1800 audit(1762702091.924:58): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="bus" dev="loop2" ino=4427 res=0 errno=0 [ 112.887453][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.184896][ T6561] loop1: detected capacity change from 0 to 512 [ 113.228109][ T6561] EXT4-fs (loop1): failed to initialize system zone (-117) [ 113.273558][ T6561] EXT4-fs (loop1): mount failed [ 113.562097][ T6550] loop0: detected capacity change from 0 to 40427 [ 113.635566][ T6550] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 113.653830][ T6550] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 113.662199][ T6550] F2FS-fs (loop0): Image doesn't support compression [ 113.726970][ T6550] F2FS-fs (loop0): invalid crc value [ 113.760014][ T6550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.891979][ T6550] F2FS-fs (loop0): Start checkpoint disabled! [ 113.923753][ T6550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 114.114955][ T6548] NILFS (loop3): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 114.197080][ T1140] kworker/u4:7: attempt to access beyond end of device [ 114.197080][ T1140] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 114.222008][ T1140] F2FS-fs (loop0): Remounting filesystem read-only [ 114.232358][ T1140] F2FS-fs (loop0): Remounting filesystem read-only [ 114.332247][ T6566] loop2: detected capacity change from 0 to 32768 [ 114.435593][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.129'. [ 114.479632][ T6566] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.620252][ T6568] loop1: detected capacity change from 0 to 32768 [ 114.622376][ T6566] XFS (loop2): Ending clean mount [ 114.657079][ T6566] XFS (loop2): Quotacheck needed: Please wait. [ 114.712592][ T6568] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.772538][ T6566] XFS (loop2): Quotacheck: Done. [ 114.795818][ T6588] loop0: detected capacity change from 0 to 128 [ 114.824654][ T6588] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.895647][ T6588] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.935140][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.949554][ T6568] XFS (loop1): Ending clean mount [ 115.002997][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.095347][ T6568] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 115.300696][ T6598] loop2: detected capacity change from 0 to 1024 [ 115.317650][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.364017][ T6598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.401580][ T6598] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 115.476347][ T6598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.546221][ T6598] overlayfs: missing 'lowerdir' [ 115.573790][ T6598] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.131: missing EA_INODE flag [ 115.589909][ T6582] loop3: detected capacity change from 0 to 32768 [ 115.613642][ T6598] EXT4-fs (loop2): Remounting filesystem read-only [ 115.639141][ T6582] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.688562][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.797995][ T6582] XFS (loop3): Ending clean mount [ 115.825271][ T6582] XFS (loop3): Quotacheck needed: Please wait. [ 115.870522][ T6582] XFS (loop3): Quotacheck: Done. [ 115.948464][ T5796] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.969774][ T6596] loop0: detected capacity change from 0 to 32768 [ 116.003138][ T6596] (syz.0.132,6596,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.011089][ T6612] loop2: detected capacity change from 0 to 1024 [ 116.029419][ T6612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.064919][ T6596] (syz.0.132,6596,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.098822][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.190715][ T6596] JBD2: Ignoring recovery information on journal [ 116.211427][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.339072][ T6596] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.413004][ T6620] loop3: detected capacity change from 0 to 1024 [ 116.420834][ T6620] EXT4-fs: Ignoring removed bh option [ 116.456477][ T6620] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 116.595438][ T6620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.677342][ T27] audit: type=1800 audit(1762702095.844:59): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 116.729694][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 116.843810][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.189997][ T6633] loop3: detected capacity change from 0 to 128 [ 117.262348][ T6633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.274959][ T6618] loop2: detected capacity change from 0 to 32768 [ 117.291495][ T6633] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.356477][ T6618] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 117.593017][ T6629] loop1: detected capacity change from 0 to 32768 [ 117.611160][ T5796] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.672694][ T6618] (syz.2.137,6618,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 117.722037][ T6629] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.893507][ T6629] XFS (loop1): Ending clean mount [ 117.942095][ T6629] XFS (loop1): Quotacheck needed: Please wait. [ 117.960562][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 117.996150][ T6629] XFS (loop1): Quotacheck: Done. [ 118.123888][ T6631] loop0: detected capacity change from 0 to 40427 [ 118.136236][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.165195][ T6631] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 118.180280][ T6631] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 118.189014][ T6631] F2FS-fs (loop0): Image doesn't support compression [ 118.245473][ T6631] F2FS-fs (loop0): invalid crc value [ 118.276199][ T6631] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.437466][ T6631] F2FS-fs (loop0): Start checkpoint disabled! [ 118.483654][ T6631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 118.644612][ T6651] loop1: detected capacity change from 0 to 1024 [ 118.673005][ T6651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.713883][ T6651] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 118.763140][ T3550] kworker/u4:8: attempt to access beyond end of device [ 118.763140][ T3550] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 118.777594][ T3550] F2FS-fs (loop0): Remounting filesystem read-only [ 118.784373][ T3550] F2FS-fs (loop0): Remounting filesystem read-only [ 118.807441][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.904779][ T6651] overlayfs: missing 'lowerdir' [ 118.927218][ T6645] loop3: detected capacity change from 0 to 32768 [ 118.944175][ T6651] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.144: missing EA_INODE flag [ 118.974564][ T6651] EXT4-fs (loop1): Remounting filesystem read-only [ 119.037283][ T6645] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.076461][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.099466][ T6648] loop2: detected capacity change from 0 to 32768 [ 119.139466][ T6645] XFS (loop3): Ending clean mount [ 119.188217][ T6648] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.195074][ T6645] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 119.408619][ T5796] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.424999][ T6648] XFS (loop2): Ending clean mount [ 119.442466][ T6648] XFS (loop2): Quotacheck needed: Please wait. [ 119.485610][ T6648] XFS (loop2): Quotacheck: Done. [ 119.578725][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.697883][ T6678] loop0: detected capacity change from 0 to 128 [ 119.742835][ T6678] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.759759][ T6678] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.838101][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.061896][ T6683] loop0: detected capacity change from 0 to 4096 [ 120.123005][ T6686] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.156981][ T6672] loop1: detected capacity change from 0 to 32768 [ 120.205816][ T6672] (syz.1.146,6672,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.246669][ T6672] (syz.1.146,6672,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.329949][ T6672] JBD2: Ignoring recovery information on journal [ 120.500962][ T6685] loop2: detected capacity change from 0 to 32768 [ 120.546670][ T6672] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.558213][ T6685] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.733883][ T6685] XFS (loop2): Ending clean mount [ 120.762340][ T6685] XFS (loop2): Quotacheck needed: Please wait. [ 120.815124][ T6685] XFS (loop2): Quotacheck: Done. [ 120.863945][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 121.076097][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.522206][ T6683] NILFS (loop0): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 121.607458][ T27] audit: type=1326 audit(1762702100.774:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.656168][ T27] audit: type=1326 audit(1762702100.774:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.710883][ T27] audit: type=1326 audit(1762702100.814:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.833421][ T27] audit: type=1326 audit(1762702100.814:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.905917][ T27] audit: type=1326 audit(1762702100.814:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.959437][ T6708] loop0: detected capacity change from 0 to 1024 [ 121.959716][ T27] audit: type=1326 audit(1762702100.814:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 121.999154][ T6708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.029076][ T27] audit: type=1326 audit(1762702100.924:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 122.046866][ T6708] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 122.103386][ T27] audit: type=1326 audit(1762702100.924:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 122.134490][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.205453][ T6698] loop1: detected capacity change from 0 to 40427 [ 122.237598][ T6708] overlayfs: missing 'lowerdir' [ 122.269805][ T6698] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 122.300828][ T6708] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.155: missing EA_INODE flag [ 122.304552][ T6698] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 122.332157][ T6698] F2FS-fs (loop1): Image doesn't support compression [ 122.345861][ T6698] F2FS-fs (loop1): invalid crc value [ 122.370655][ T6698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.379427][ T6708] EXT4-fs (loop0): Remounting filesystem read-only [ 122.494653][ T6698] F2FS-fs (loop1): Start checkpoint disabled! [ 122.516815][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.529237][ T6698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 122.700406][ T6707] loop2: detected capacity change from 0 to 32768 [ 122.795063][ T6707] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.930007][ T6707] XFS (loop2): Ending clean mount [ 122.936505][ T42] kworker/u4:2: attempt to access beyond end of device [ 122.936505][ T42] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 122.978602][ T42] F2FS-fs (loop1): Remounting filesystem read-only [ 122.995009][ T42] F2FS-fs (loop1): Remounting filesystem read-only [ 123.093962][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.415398][ T6717] loop3: detected capacity change from 0 to 32768 [ 123.490555][ T6717] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.710144][ T6738] loop2: detected capacity change from 0 to 4096 [ 123.770168][ T6743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.843620][ T6717] XFS (loop3): Ending clean mount [ 123.848367][ T6732] loop0: detected capacity change from 0 to 32768 [ 123.877195][ T6717] XFS (loop3): Quotacheck needed: Please wait. [ 123.930645][ T6732] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.004873][ T6750] loop1: detected capacity change from 0 to 128 [ 124.073710][ T6717] XFS (loop3): Quotacheck: Done. [ 124.102955][ T6732] XFS (loop0): Ending clean mount [ 124.109364][ T6750] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.179642][ T6732] XFS (loop0): Quotacheck needed: Please wait. [ 124.180188][ T5796] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.186091][ T6750] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.289234][ T6732] XFS (loop0): Quotacheck: Done. [ 124.362728][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.480676][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.724315][ T27] audit: type=1326 audit(1762702103.894:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 124.823892][ T27] audit: type=1326 audit(1762702103.914:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 125.108925][ T6765] loop0: detected capacity change from 0 to 1024 [ 125.137983][ T6765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.166547][ T6765] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 125.229897][ T6765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.369979][ T6765] overlayfs: missing 'lowerdir' [ 125.411339][ T6765] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.166: missing EA_INODE flag [ 125.459934][ T6765] EXT4-fs (loop0): Remounting filesystem read-only [ 125.563653][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.869195][ T6761] loop1: detected capacity change from 0 to 40427 [ 126.026793][ T6761] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 126.053542][ T6761] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 126.074547][ T6761] F2FS-fs (loop1): Image doesn't support compression [ 126.104762][ T6761] F2FS-fs (loop1): invalid crc value [ 126.146846][ T6761] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.305527][ T6761] F2FS-fs (loop1): Start checkpoint disabled! [ 126.345382][ T6761] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 126.417875][ T6771] loop3: detected capacity change from 0 to 32768 [ 126.597956][ T6771] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.645447][ T6771] XFS (loop3): Ending clean mount [ 126.774138][ T5796] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.842408][ T1140] kworker/u4:7: attempt to access beyond end of device [ 126.842408][ T1140] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 126.880318][ T1140] F2FS-fs (loop1): Remounting filesystem read-only [ 126.912121][ T1140] F2FS-fs (loop1): Remounting filesystem read-only [ 127.000711][ T6775] loop2: detected capacity change from 0 to 32768 [ 127.058055][ T6775] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.310125][ T6775] XFS (loop2): Ending clean mount [ 127.326962][ T6775] XFS (loop2): Quotacheck needed: Please wait. [ 127.428958][ T6775] XFS (loop2): Quotacheck: Done. [ 127.494789][ T6804] loop1: detected capacity change from 0 to 128 [ 127.552170][ T6804] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.571045][ T6804] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.655815][ T6809] loop0: detected capacity change from 0 to 4096 [ 127.657807][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.686529][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.755177][ T6812] loop1: detected capacity change from 0 to 1024 [ 127.764528][ T6813] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.765244][ T6812] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.804677][ T6812] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 127.919296][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.096353][ T6812] overlayfs: missing 'lowerdir' [ 128.131778][ T6812] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.181: missing EA_INODE flag [ 128.203562][ T6812] EXT4-fs (loop1): Remounting filesystem read-only [ 128.295219][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.328804][ T6820] netlink: 'syz.2.182': attribute type 6 has an invalid length. [ 128.640303][ T6817] loop3: detected capacity change from 0 to 32768 [ 128.699916][ T6817] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.825925][ T6817] XFS (loop3): Ending clean mount [ 128.969415][ T5796] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.220385][ T6842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.291852][ T6844] ip6erspan0: entered promiscuous mode [ 130.396057][ T6849] loop2: detected capacity change from 0 to 1024 [ 130.424112][ T6849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.457852][ T6842] macvlan2: entered promiscuous mode [ 130.464750][ T6849] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.488602][ T6842] bond1: entered promiscuous mode [ 130.501347][ T6842] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.522005][ T6849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.535776][ T6842] bond1: left promiscuous mode [ 130.616728][ T6849] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 130.663559][ T6849] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.728929][ T6849] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.193: missing EA_INODE flag [ 130.793308][ T6849] EXT4-fs (loop2): Remounting filesystem read-only [ 130.898190][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.202769][ T6863] loop2: detected capacity change from 0 to 4096 [ 131.292221][ T6864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.370894][ T6822] syz.1.184: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 131.399515][ T6822] CPU: 1 PID: 6822 Comm: syz.1.184 Not tainted syzkaller #0 [ 131.406846][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.416908][ T6822] Call Trace: [ 131.420180][ T6822] [ 131.423106][ T6822] dump_stack_lvl+0x16c/0x230 [ 131.427786][ T6822] ? show_regs_print_info+0x20/0x20 [ 131.432978][ T6822] ? load_image+0x3b0/0x3b0 [ 131.437476][ T6822] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.443889][ T6822] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 131.450390][ T6822] warn_alloc+0x210/0x300 [ 131.454726][ T6822] ? zone_watermark_ok_safe+0x230/0x230 [ 131.460273][ T6822] ? _raw_spin_unlock+0x28/0x40 [ 131.465118][ T6822] ? __kmem_cache_free+0xba/0x1f0 [ 131.470143][ T6822] __vmalloc_node_range+0x662/0x1320 [ 131.475459][ T6822] ? free_vm_area+0x50/0x50 [ 131.479958][ T6822] ? kvmalloc_node+0x70/0x180 [ 131.484629][ T6822] ? rcu_is_watching+0x15/0xb0 [ 131.489388][ T6822] ? kvmalloc_node+0x70/0x180 [ 131.494056][ T6822] ? trace_kmalloc+0x1f/0xa0 [ 131.498646][ T6822] kvmalloc_node+0x13f/0x180 [ 131.503233][ T6822] ? translate_table+0x199/0x1fe0 [ 131.508258][ T6822] translate_table+0x199/0x1fe0 [ 131.513122][ T6822] ? ipt_register_table+0x7a0/0x7a0 [ 131.518312][ T6822] ? __might_fault+0xaa/0x120 [ 131.522977][ T6822] ? __lock_acquire+0x7c80/0x7c80 [ 131.527994][ T6822] ? __virt_addr_valid+0x18c/0x540 [ 131.533104][ T6822] ? __might_fault+0xaa/0x120 [ 131.537769][ T6822] ? __might_fault+0xc6/0x120 [ 131.542434][ T6822] ? __might_fault+0xaa/0x120 [ 131.547110][ T6822] do_ipt_set_ctl+0x960/0xcc0 [ 131.551791][ T6822] ? ipt_unregister_table_exit+0x230/0x230 [ 131.557607][ T6822] ? __lock_acquire+0x7c80/0x7c80 [ 131.562622][ T6822] ? rcu_is_watching+0x15/0xb0 [ 131.567380][ T6822] ? trace_contention_end+0x39/0xe0 [ 131.572583][ T6822] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 131.578221][ T6822] ? mutex_unlock+0x10/0x10 [ 131.582720][ T6822] ? aa_sk_perm+0x7fc/0x930 [ 131.587225][ T6822] ? aa_af_perm+0x2b0/0x2b0 [ 131.591728][ T6822] nf_setsockopt+0x263/0x280 [ 131.596318][ T6822] ? sock_common_recvmsg+0x1b0/0x1b0 [ 131.601644][ T6822] do_sock_setsockopt+0x175/0x1a0 [ 131.606671][ T6822] ? __fdget+0x180/0x210 [ 131.610914][ T6822] __x64_sys_setsockopt+0x184/0x200 [ 131.616111][ T6822] do_syscall_64+0x55/0xb0 [ 131.620539][ T6822] ? clear_bhb_loop+0x40/0x90 [ 131.625207][ T6822] ? clear_bhb_loop+0x40/0x90 [ 131.629874][ T6822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.635759][ T6822] RIP: 0033:0x7f56e438f6c9 [ 131.640177][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.659787][ T6822] RSP: 002b:00007f56e51f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.668198][ T6822] RAX: ffffffffffffffda RBX: 00007f56e45e5fa0 RCX: 00007f56e438f6c9 [ 131.676161][ T6822] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.684121][ T6822] RBP: 00007f56e4411f91 R08: 0000000000000278 R09: 0000000000000000 [ 131.692081][ T6822] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 131.700043][ T6822] R13: 00007f56e45e6038 R14: 00007f56e45e5fa0 R15: 00007ffdcc4f9b18 [ 131.708024][ T6822] [ 131.717530][ T6860] loop0: detected capacity change from 0 to 32768 [ 131.734912][ T6822] Mem-Info: [ 131.738098][ T6822] active_anon:13095 inactive_anon:0 isolated_anon:0 [ 131.738098][ T6822] active_file:1092 inactive_file:39976 isolated_file:0 [ 131.738098][ T6822] unevictable:768 dirty:39 writeback:0 [ 131.738098][ T6822] slab_reclaimable:10442 slab_unreclaimable:91734 [ 131.738098][ T6822] mapped:24148 shmem:8841 pagetables:571 [ 131.738098][ T6822] sec_pagetables:0 bounce:0 [ 131.738098][ T6822] kernel_misc_reclaimable:0 [ 131.738098][ T6822] free:1341893 free_pcp:8041 free_cma:0 [ 131.817338][ T6822] Node 0 active_anon:47680kB inactive_anon:0kB active_file:4368kB inactive_file:159700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96592kB dirty:156kB writeback:0kB shmem:29328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no [ 131.851655][ T6822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 131.937767][ T6822] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.941236][ T6860] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.968005][ T6822] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 131.981039][ T6822] Node 0 DMA32 free:1460740kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:43812kB inactive_anon:0kB active_file:4368kB inactive_file:158460kB unevictable:1536kB writepending:156kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:17876kB local_pcp:9284kB free_cma:0kB [ 132.014094][ T6822] lowmem_reserve[]: 0 0 1 1 1 [ 132.018938][ T6822] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 132.046348][ T6822] lowmem_reserve[]: 0 0 0 0 0 [ 132.051187][ T6822] Node 1 Normal free:3891200kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22336kB local_pcp:12640kB free_cma:0kB [ 132.081780][ T6822] lowmem_reserve[]: 0 0 0 0 0 [ 132.086889][ T6822] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.102522][ T6822] Node 0 DMA32: 30*4kB (ME) 20*8kB (E) 13*16kB (ME) 15*32kB (ME) 3*64kB (ME) 1*128kB (E) 18*256kB (ME) 57*512kB (UME) 28*1024kB (UM) 12*2048kB (UME) 335*4096kB (M) = 1460488kB [ 132.129118][ T6822] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 132.148484][ T6822] Node 1 Normal: 274*4kB (UME) 63*8kB (UME) 40*16kB (UME) 48*32kB (UME) 17*64kB (UME) 8*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3891200kB [ 132.171901][ T6822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.181704][ T6822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.191538][ T6822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.203175][ T6822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.212656][ T6822] 47225 total pagecache pages [ 132.217531][ T6822] 0 pages in swap cache [ 132.221109][ T6860] XFS (loop0): Ending clean mount [ 132.221696][ T6822] Free swap = 124708kB [ 132.221706][ T6822] Total swap = 124996kB [ 132.221714][ T6822] 2097051 pages RAM [ 132.247386][ T6822] 0 pages HighMem/MovableOnly [ 132.252102][ T6822] 416137 pages reserved [ 132.256817][ T6822] 0 pages cma reserved [ 132.261132][ T6860] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 132.399855][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.873469][ T6879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.199'. [ 132.930679][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965257][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.135594][ T6885] loop1: detected capacity change from 0 to 512 [ 133.155321][ T6885] EXT4-fs: Ignoring removed nobh option [ 133.161128][ T6885] ext4: Unknown parameter 'permit_directio' [ 133.256729][ T6888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.524399][ T6893] loop1: detected capacity change from 0 to 1024 [ 133.583573][ T6893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.636949][ T6893] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 133.698093][ T6900] loop3: detected capacity change from 0 to 764 [ 133.722652][ T6893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.798734][ T6900] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.804082][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 133.804094][ T27] audit: type=1326 audit(1762702112.964:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 133.835908][ T27] audit: type=1326 audit(1762702112.984:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 133.858111][ T27] audit: type=1326 audit(1762702113.004:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 133.880439][ T27] audit: type=1326 audit(1762702113.004:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 133.891760][ T6893] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 133.933333][ T27] audit: type=1326 audit(1762702113.004:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 133.952284][ T6908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.204: missing EA_INODE flag [ 133.994366][ T6900] Symlink component flag not implemented [ 134.013413][ T27] audit: type=1326 audit(1762702113.004:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 134.044212][ T6900] Symlink component flag not implemented (7) [ 134.058261][ T6893] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 134.063316][ T27] audit: type=1326 audit(1762702113.004:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 134.090301][ T6908] EXT4-fs (loop1): Remounting filesystem read-only [ 134.121170][ T27] audit: type=1326 audit(1762702113.004:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 134.145279][ T27] audit: type=1326 audit(1762702113.084:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 134.207452][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.223295][ T27] audit: type=1326 audit(1762702113.084:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 134.452432][ T6916] loop0: detected capacity change from 0 to 4096 [ 134.558456][ T6920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.714494][ T6896] loop2: detected capacity change from 0 to 32768 [ 134.814714][ T6896] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.929567][ T6896] XFS (loop2): Ending clean mount [ 134.952769][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 134.983625][ T6896] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 135.087459][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.304794][ T6946] loop3: detected capacity change from 0 to 1024 [ 135.374737][ T6946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.392091][ T6953] loop2: detected capacity change from 0 to 1024 [ 135.400348][ T6953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.424171][ T6953] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 135.444228][ T6946] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.223: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 135.459223][ T6953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.471653][ T6946] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.223: reserved inode found cleared - inode=2 [ 135.497362][ T6953] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 135.507435][ T6953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.521937][ T6953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.222: missing EA_INODE flag [ 135.536478][ T6946] process 'syz.3.223' launched './file0' with NULL argv: empty string added [ 135.547316][ T6946] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.223: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 135.567330][ T6953] EXT4-fs (loop2): Remounting filesystem read-only [ 135.593878][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 135.606212][ T6946] EXT4-fs error (device loop3): ext4_read_inline_dir:1573: inode #12: block 7: comm syz.3.223: path /53/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 135.632183][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.682789][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.781886][ T6967] loop3: detected capacity change from 0 to 1024 [ 135.798662][ T6967] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.815826][ T6967] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #11: comm syz.3.228: iget: bogus i_mode (1) [ 135.834514][ T6967] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.228: couldn't read orphan inode 11 (err -117) [ 135.872441][ T6967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.923178][ T6967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.232695][ T6982] loop2: detected capacity change from 0 to 4096 [ 136.269341][ T6985] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.377398][ T6973] loop0: detected capacity change from 0 to 32768 [ 136.393611][ T6973] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.405517][ T6987] loop1: detected capacity change from 0 to 1024 [ 136.421421][ T6987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.450468][ T6987] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.480349][ T6973] XFS (loop0): Ending clean mount [ 136.509888][ T6973] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 136.530548][ T6987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.594138][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.608816][ T6987] overlayfs: missing 'lowerdir' [ 136.620634][ T6987] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.236: missing EA_INODE flag [ 136.648385][ T6987] EXT4-fs (loop1): Remounting filesystem read-only [ 136.706559][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.934298][ T6982] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 136.949533][ T6982] Remounting filesystem read-only [ 137.158229][ T7014] loop9: detected capacity change from 0 to 7 [ 137.173034][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.182489][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.193258][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.202434][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.213286][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.222441][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.230539][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.239706][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.251073][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.260273][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.270335][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.279527][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.291952][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.301130][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.313354][ T7014] ldm_validate_partition_table(): Disk read failed. [ 137.321833][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.331028][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.355091][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.364322][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.372644][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.381838][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.389960][ T7014] Dev loop9: unable to read RDB block 0 [ 137.415187][ T7014] loop9: unable to read partition table [ 137.421095][ T7014] loop9: partition table beyond EOD, truncated [ 137.433880][ T7019] IPv6: Can't replace route, no match found [ 137.443460][ T7014] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 137.443460][ T7014] ) failed (rc=-5) [ 137.508392][ T7021] loop1: detected capacity change from 0 to 1024 [ 137.547680][ T7021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.590756][ T7021] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 137.631369][ T7021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.681144][ T7025] loop0: detected capacity change from 0 to 4096 [ 137.693914][ T7021] overlayfs: missing 'lowerdir' [ 137.710346][ T7021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.247: missing EA_INODE flag [ 137.726522][ T7029] netlink: 92 bytes leftover after parsing attributes in process `syz.3.250'. [ 137.747040][ T7021] EXT4-fs (loop1): Remounting filesystem read-only [ 137.758308][ T7030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.770173][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 137.784631][ T7017] loop2: detected capacity change from 0 to 32768 [ 137.828852][ T7017] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.851583][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.909979][ T7040] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.921996][ T7017] XFS (loop2): Ending clean mount [ 137.961252][ T7017] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 138.030259][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.054901][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 138.240756][ T7046] loop1: detected capacity change from 0 to 512 [ 138.308115][ T7046] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.412211][ T7046] EXT4-fs (loop1): mount failed [ 138.643435][ T5828] IPVS: starting estimator thread 0... [ 138.743677][ T7057] IPVS: using max 20 ests per chain, 48000 per kthread [ 138.834887][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 138.883441][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 138.892499][ T7025] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 138.903393][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 138.904870][ T7063] loop1: detected capacity change from 0 to 1024 [ 138.935800][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 138.953404][ T7025] Remounting filesystem read-only [ 138.959778][ T7063] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.985604][ T7061] netlink: 'syz.2.260': attribute type 6 has an invalid length. [ 139.000307][ T7063] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 139.049073][ T7063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.103633][ T7063] overlayfs: missing 'lowerdir' [ 139.110420][ T7063] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.261: missing EA_INODE flag [ 139.129044][ T7063] EXT4-fs (loop1): Remounting filesystem read-only [ 139.194807][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.297738][ T7076] loop2: detected capacity change from 0 to 164 [ 139.311035][ T7080] syz.3.268[7080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.311205][ T7080] syz.3.268[7080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.334129][ T7076] Unable to read rock-ridge attributes [ 139.371082][ T7076] Unable to read rock-ridge attributes [ 139.429730][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.447968][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.458088][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.493400][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.513599][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.521026][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.565466][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.578491][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.595959][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.619397][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.646473][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.662427][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.677840][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.695553][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.702976][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.742155][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.759069][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.775593][ T5772] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 139.800927][ T5772] hid-generic 0004:0800:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 139.926720][ T7070] loop0: detected capacity change from 0 to 32768 [ 139.968151][ T7070] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.060174][ T7112] loop1: detected capacity change from 0 to 4096 [ 140.062546][ T7070] XFS (loop0): Ending clean mount [ 140.081340][ T7113] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.117858][ T7070] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 140.192145][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.731314][ T7119] loop2: detected capacity change from 0 to 1024 [ 140.740618][ T7119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.756800][ T7119] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.806530][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.881672][ T7119] overlayfs: missing 'workdir' [ 140.899171][ T7119] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.275: missing EA_INODE flag [ 140.918990][ T7112] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 140.927994][ T7119] EXT4-fs (loop2): Remounting filesystem read-only [ 140.962944][ T7112] Remounting filesystem read-only [ 140.985959][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.227300][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 141.227314][ T27] audit: type=1326 audit(1762702120.394:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 141.303313][ T27] audit: type=1326 audit(1762702120.434:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 141.359122][ T27] audit: type=1326 audit(1762702120.434:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 141.625998][ T7146] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.286' sets config #1 [ 141.696757][ T7148] loop2: detected capacity change from 0 to 1024 [ 141.723206][ T7148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.760766][ T7148] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 141.815273][ T7148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.851627][ T7150] loop1: detected capacity change from 0 to 4096 [ 141.882555][ T7148] overlayfs: missing 'workdir' [ 141.889214][ T7153] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.910424][ T7148] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.287: missing EA_INODE flag [ 141.963204][ T7148] EXT4-fs (loop2): Remounting filesystem read-only [ 142.084675][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.102435][ T7157] ip6tnl1: entered promiscuous mode [ 142.108363][ T7157] ip6tnl1: entered allmulticast mode [ 142.196203][ T7138] loop3: detected capacity change from 0 to 32768 [ 142.214953][ T7138] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.298439][ T7138] XFS (loop3): Ending clean mount [ 142.341878][ T7138] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 142.424762][ T5796] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.481114][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 142.664853][ T7182] loop2: detected capacity change from 0 to 4096 [ 142.703742][ T7183] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.899837][ T7189] loop1: detected capacity change from 0 to 1024 [ 142.921337][ T7189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.933068][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'. [ 142.934434][ T7189] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.977360][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.046691][ T7189] overlayfs: missing 'workdir' [ 143.069107][ T7189] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.301: missing EA_INODE flag [ 143.087120][ T7201] loop2: detected capacity change from 0 to 128 [ 143.108353][ T7189] EXT4-fs (loop1): Remounting filesystem read-only [ 143.149660][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.175060][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.182500][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.225326][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.232835][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.319146][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 143.370884][ T7209] loop2: detected capacity change from 0 to 4096 [ 143.433479][ T7210] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.821504][ T7220] loop2: detected capacity change from 0 to 512 [ 143.834596][ T7220] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 143.847954][ T7220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.875346][ T7220] EXT4-fs (loop2): 1 truncate cleaned up [ 143.883131][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.926776][ T7203] loop0: detected capacity change from 0 to 32768 [ 143.962143][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.997455][ T7229] loop3: detected capacity change from 0 to 1024 [ 144.009299][ T7203] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.013348][ T7229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.029690][ T7229] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 144.066178][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.083401][ T27] audit: type=1326 audit(1762702123.244:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 144.175638][ T27] audit: type=1326 audit(1762702123.244:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 144.219236][ T7203] XFS (loop0): Ending clean mount [ 144.250256][ T7203] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 144.266000][ T27] audit: type=1326 audit(1762702123.244:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 144.314053][ T27] audit: type=1326 audit(1762702123.244:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 144.364544][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.391895][ T5796] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 144.411027][ T5796] EXT4-fs (loop3): Remounting filesystem read-only [ 144.491968][ T7257] loop1: detected capacity change from 0 to 128 [ 144.655519][ T7260] syz.1.329: attempt to access beyond end of device [ 144.655519][ T7260] loop1: rw=2049, sector=145, nr_sectors = 568 limit=128 [ 144.790421][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 144.803023][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 144.820164][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 144.830255][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 144.928370][ T7125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.092625][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.241746][ T7275] program syz.0.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.262616][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.436210][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.588483][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.605500][ T7281] loop0: detected capacity change from 0 to 1024 [ 145.654978][ T7281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.732026][ T7285] wireguard: wg1: Could not create IPv4 socket [ 145.824131][ T7276] loop2: detected capacity change from 0 to 32768 [ 145.890961][ T7276] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.936228][ T27] audit: type=1326 audit(1762702125.104:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 145.975373][ T27] audit: type=1326 audit(1762702125.104:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 146.016331][ T7276] XFS (loop2): Ending clean mount [ 146.034887][ T27] audit: type=1326 audit(1762702125.134:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 146.059633][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.061194][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 146.078402][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.087766][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.097998][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.099133][ T7276] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 146.119331][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.126920][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.199090][ T5783] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.213647][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.422100][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.449455][ T28] usb 1-1: config 14 has an invalid interface number: 145 but max is 0 [ 146.462190][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 146.462202][ T27] audit: type=1326 audit(1762702125.624:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.463287][ T28] usb 1-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 146.468628][ T27] audit: type=1326 audit(1762702125.644:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.533527][ T28] usb 1-1: config 14 has no interface number 0 [ 146.546754][ T27] audit: type=1326 audit(1762702125.694:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.571440][ T28] usb 1-1: config 14 interface 145 altsetting 26 endpoint 0x4 has invalid maxpacket 1471, setting to 1024 [ 146.586427][ T28] usb 1-1: config 14 interface 145 altsetting 26 bulk endpoint 0x4 has invalid maxpacket 1024 [ 146.599577][ T27] audit: type=1326 audit(1762702125.694:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.602505][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 146.627698][ T28] usb 1-1: config 14 interface 145 altsetting 26 bulk endpoint 0x2 has invalid maxpacket 1023 [ 146.642467][ T28] usb 1-1: config 14 interface 145 altsetting 26 has a duplicate endpoint with address 0x8A, skipping [ 146.656859][ T27] audit: type=1326 audit(1762702125.694:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.682357][ T28] usb 1-1: config 14 interface 145 altsetting 26 has an invalid endpoint with address 0x0, skipping [ 146.696445][ T28] usb 1-1: config 14 interface 145 altsetting 26 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 146.710221][ T27] audit: type=1326 audit(1762702125.694:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.732712][ T28] usb 1-1: config 14 interface 145 altsetting 26 has a duplicate endpoint with address 0x7, skipping [ 146.750363][ T28] usb 1-1: config 14 interface 145 altsetting 26 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 146.767366][ T27] audit: type=1326 audit(1762702125.694:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.794264][ T28] usb 1-1: config 14 interface 145 altsetting 26 has a duplicate endpoint with address 0x4, skipping [ 146.807604][ T28] usb 1-1: config 14 interface 145 altsetting 26 has an invalid endpoint with address 0x80, skipping [ 146.818668][ T27] audit: type=1326 audit(1762702125.694:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.840995][ T28] usb 1-1: config 14 interface 145 has no altsetting 0 [ 146.848166][ T27] audit: type=1326 audit(1762702125.694:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.881406][ T28] usb 1-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=84.40 [ 146.890568][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.905285][ T28] usb 1-1: Product: syz [ 146.908198][ T7312] netlink: 80 bytes leftover after parsing attributes in process `syz.1.346'. [ 146.909459][ T28] usb 1-1: Manufacturer: Э [ 146.925608][ T27] audit: type=1326 audit(1762702125.694:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 146.947921][ T28] usb 1-1: SerialNumber: syz [ 146.963837][ T7281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.971557][ T7281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.996473][ T7281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.195242][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.235692][ T7324] loop2: detected capacity change from 0 to 512 [ 147.240371][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.255227][ T7298] bridge_slave_0: entered allmulticast mode [ 147.262891][ T7298] bridge_slave_0: entered promiscuous mode [ 147.278234][ T7324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.338171][ T7324] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.411139][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.429994][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.463535][ T7298] bridge_slave_1: entered allmulticast mode [ 147.481058][ T7298] bridge_slave_1: entered promiscuous mode [ 147.481365][ T28] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 147.505156][ T28] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 147.513065][ T28] pac7311: probe of 1-1:14.145 failed with error -71 [ 147.536869][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.616491][ T28] usb 1-1: USB disconnect, device number 2 [ 147.640528][ T7322] loop1: detected capacity change from 0 to 32768 [ 147.641833][ T12] hsr_slave_0: left promiscuous mode [ 147.656803][ T12] hsr_slave_1: left promiscuous mode [ 147.663123][ T12] bridge_slave_1: left allmulticast mode [ 147.672079][ T12] bridge_slave_1: left promiscuous mode [ 147.678939][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.688340][ T7322] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.699640][ T12] bridge_slave_0: left allmulticast mode [ 147.707852][ T12] bridge_slave_0: left promiscuous mode [ 147.714177][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.739816][ T7322] XFS (loop1): Ending clean mount [ 147.755092][ T12] veth1_macvtap: left promiscuous mode [ 147.761084][ T12] veth0_macvtap: left promiscuous mode [ 147.761612][ T7331] loop2: detected capacity change from 0 to 4096 [ 147.768148][ T12] veth1_vlan: left promiscuous mode [ 147.778796][ T12] veth0_vlan: left promiscuous mode [ 147.804883][ T7322] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 147.808211][ T7338] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.901367][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.189144][ T7344] loop2: detected capacity change from 0 to 512 [ 148.195699][ T5788] Bluetooth: hci3: command tx timeout [ 148.203057][ T7344] EXT4-fs: quotafile must be on filesystem root [ 148.482714][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.518850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.556398][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.593697][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.930815][ T12] bond0 (unregistering): Released all slaves [ 149.015422][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.030614][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.090507][ T7298] team0: Port device team_slave_0 added [ 149.107326][ T7298] team0: Port device team_slave_1 added [ 149.181704][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.205644][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.212617][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.258874][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.272749][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.280113][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.307919][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.361519][ T7298] hsr_slave_0: entered promiscuous mode [ 149.391003][ T7298] hsr_slave_1: entered promiscuous mode [ 149.409726][ T7353] loop2: detected capacity change from 0 to 4096 [ 149.416303][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.434331][ T7298] Cannot create hsr debugfs directory [ 149.458847][ T7358] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.868352][ T7298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.879436][ T7298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.902334][ T7298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.928459][ T7298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.970989][ T7373] loop0: detected capacity change from 0 to 1024 [ 149.996915][ T7373] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.017723][ T7373] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.060553][ T7373] JBD2: no valid journal superblock found [ 150.074270][ T7373] EXT4-fs (loop0): Could not load journal inode [ 150.156122][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.197966][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.227038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.234992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.269539][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.276700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.297755][ T5788] Bluetooth: hci3: command tx timeout [ 150.428783][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 150.443197][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.541410][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 150.641616][ T7390] loop2: detected capacity change from 0 to 4096 [ 150.693917][ T7395] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.724152][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 151.057348][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.240865][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 151.562736][ T7426] loop0: detected capacity change from 0 to 2048 [ 151.605274][ T7298] veth0_vlan: entered promiscuous mode [ 151.625552][ T7298] veth1_vlan: entered promiscuous mode [ 151.642675][ T7428] xt_CT: No such helper "snmp_trap" [ 151.648302][ T7426] Alternate GPT is invalid, using primary GPT. [ 151.663446][ T7426] loop0: p1 p2 p3 [ 151.691076][ T7298] veth0_macvtap: entered promiscuous mode [ 151.708703][ T7298] veth1_macvtap: entered promiscuous mode [ 151.748646][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.759554][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.770220][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.791071][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.801514][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.823379][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.845069][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.878359][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.884273][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 151.910041][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 151.913377][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.936847][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.950518][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.964163][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.978458][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.992148][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.012228][ T7432] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 152.023396][ T7432] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 152.032557][ T7298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.042598][ T7298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.056108][ T7298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.063444][ T7432] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 152.066979][ T7298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.097699][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 152.097712][ T27] audit: type=1326 audit(1762702131.264:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.150965][ T27] audit: type=1326 audit(1762702131.284:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.204319][ T27] audit: type=1326 audit(1762702131.304:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.228763][ T27] audit: type=1326 audit(1762702131.314:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.252376][ T27] audit: type=1326 audit(1762702131.344:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.277020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.285188][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.292811][ T27] audit: type=1326 audit(1762702131.344:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.349019][ T27] audit: type=1326 audit(1762702131.344:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.372447][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.373935][ T5788] Bluetooth: hci3: command tx timeout [ 152.396685][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.412382][ T27] audit: type=1326 audit(1762702131.344:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.471371][ T27] audit: type=1326 audit(1762702131.344:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.522800][ T27] audit: type=1326 audit(1762702131.344:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 152.610600][ T7447] netlink: 172 bytes leftover after parsing attributes in process `syz.4.390'. [ 152.794242][ T7452] syz.0.393[7452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.794368][ T7452] syz.0.393[7452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.842381][ T7453] loop4: detected capacity change from 0 to 2048 [ 152.955901][ T7453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.011118][ T7461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 153.091096][ T7298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.109719][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 153.211702][ T7474] loop4: detected capacity change from 0 to 128 [ 153.237864][ T7474] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.260663][ T7474] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.322005][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 153.404463][ T7484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.404'. [ 153.435749][ T7298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.566925][ T7491] netlink: 'syz.4.406': attribute type 13 has an invalid length. [ 153.628496][ T7491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.690215][ T7493] @: renamed from vlan0 (while UP) [ 154.097610][ T7511] loop0: detected capacity change from 0 to 8192 [ 154.147825][ T7518] loop2: detected capacity change from 0 to 512 [ 154.180729][ T7518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.204488][ T7518] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.291743][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.429206][ T7528] loop0: detected capacity change from 0 to 2048 [ 154.443407][ T5788] Bluetooth: hci3: command tx timeout [ 154.455313][ T7529] loop2: detected capacity change from 0 to 512 [ 154.469678][ T7531] loop4: detected capacity change from 0 to 512 [ 154.484094][ T7529] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.491455][ T7531] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 154.520618][ T7528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.522127][ T7529] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.418: bad orphan inode 13 [ 154.543708][ T7529] ext4_test_bit(bit=12, block=18) = 1 [ 154.549115][ T7529] is_bad_inode(inode)=0 [ 154.558287][ T7529] NEXT_ORPHAN(inode)=2130706432 [ 154.562632][ T7531] unsupported nla_type 46065 [ 154.563142][ T7529] max_ino=32 [ 154.563151][ T7529] i_nlink=1 [ 154.570148][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.692687][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.735210][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.290464][ T7569] loop0: detected capacity change from 0 to 512 [ 155.333608][ T7569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 155.341947][ T7569] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.388744][ T7569] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 155.407147][ T7569] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 155.414287][ T7569] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.434: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 155.437929][ T7569] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.434: couldn't read orphan inode 13 (err -117) [ 155.464902][ T7569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.487277][ T7569] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 155.556948][ T7583] __nla_validate_parse: 9 callbacks suppressed [ 155.556985][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 155.618658][ T7583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.439'. [ 155.644553][ T7569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 156.132454][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 156.198057][ T7569] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 156.402289][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.457665][ T7589] loop2: detected capacity change from 0 to 512 [ 156.478417][ T7589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.499718][ T7589] EXT4-fs (loop2): 1 truncate cleaned up [ 156.507147][ T7589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.539537][ T7589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.443: bg 0: block 255: padding at end of block bitmap is not set [ 156.631870][ T7598] syz.4.447 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.670304][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.726715][ T7601] ip6gretap0: entered promiscuous mode [ 156.740350][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 156.763208][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.448'. [ 156.979888][ T7613] loop1: detected capacity change from 0 to 512 [ 156.988009][ T7613] ext3: Unknown parameter 'fowner<00000000000000000000' [ 157.181613][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 157.181628][ T27] audit: type=1326 audit(1762702136.344:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.212765][ T27] audit: type=1326 audit(1762702136.344:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.262467][ T27] audit: type=1326 audit(1762702136.354:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.308699][ T27] audit: type=1326 audit(1762702136.354:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.329524][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 157.340292][ T27] audit: type=1326 audit(1762702136.354:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.372979][ T27] audit: type=1326 audit(1762702136.354:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.443794][ T27] audit: type=1326 audit(1762702136.354:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.469877][ T27] audit: type=1326 audit(1762702136.644:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.483627][ T7630] netlink: 19 bytes leftover after parsing attributes in process `syz.1.462'. [ 157.501204][ T28] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 157.523054][ T27] audit: type=1326 audit(1762702136.644:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.568336][ T27] audit: type=1326 audit(1762702136.644:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 157.693346][ T28] usb 3-1: Invalid ep0 maxpacket: 64 [ 157.739389][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 157.759979][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 157.779532][ T7643] netlink: 108 bytes leftover after parsing attributes in process `syz.0.467'. [ 157.868907][ T28] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 157.942722][ T7653] loop1: detected capacity change from 0 to 512 [ 157.949890][ T7653] EXT4-fs: Ignoring removed nobh option [ 157.977484][ T7655] loop0: detected capacity change from 0 to 128 [ 157.985766][ T7655] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.000422][ T7655] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.015312][ T7653] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #3: comm +}[@: corrupted inode contents [ 158.033395][ T7653] EXT4-fs (loop1): Remounting filesystem read-only [ 158.047509][ T7653] EXT4-fs (loop1): 1 truncate cleaned up [ 158.059192][ T7653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.094342][ T28] usb 3-1: Invalid ep0 maxpacket: 64 [ 158.099973][ T28] usb usb3-port1: attempt power cycle [ 158.103134][ T7653] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.143379][ T7653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.472693][ T7678] syz.4.482[7678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.472831][ T7678] syz.4.482[7678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.543550][ T28] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 158.594802][ T28] usb 3-1: Invalid ep0 maxpacket: 64 [ 158.746340][ T7686] loop1: detected capacity change from 0 to 512 [ 158.754175][ T28] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 158.770190][ T7686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.789292][ T7686] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.813309][ T28] usb 3-1: Invalid ep0 maxpacket: 64 [ 158.822838][ T28] usb usb3-port1: unable to enumerate USB device [ 158.872057][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.903759][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.689339][ T7724] loop4: detected capacity change from 0 to 2048 [ 159.724558][ T7724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.726636][ T7728] netlink: 'syzkaller': attribute type 10 has an invalid length. [ 159.807190][ T7728] team0: Port device dummy0 added [ 159.815104][ T7298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.001757][ T7741] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 160.141590][ T7749] loop4: detected capacity change from 0 to 256 [ 160.229879][ T7754] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.469139][ T7762] IPVS: Unknown mcast interface: ve [ 160.672889][ T7771] loop0: detected capacity change from 0 to 2048 [ 160.735951][ T7771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.946131][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.155994][ T7778] loop1: detected capacity change from 0 to 164 [ 161.174601][ T7778] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.283781][ T7783] loop0: detected capacity change from 0 to 128 [ 161.295547][ T7783] EXT4-fs: Ignoring removed nobh option [ 161.295670][ T7786] loop2: detected capacity change from 0 to 164 [ 161.329580][ T7783] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.351679][ T7783] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.430194][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.719578][ T7808] Illegal XDP return value 514 on prog (id 225) dev syzkaller1, expect packet loss! [ 162.048730][ T7828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.185753][ T27] kauditd_printk_skb: 84 callbacks suppressed [ 162.185769][ T27] audit: type=1326 audit(1762702141.354:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 162.249041][ T27] audit: type=1326 audit(1762702141.384:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 162.279022][ T27] audit: type=1326 audit(1762702141.384:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 162.306990][ T27] audit: type=1326 audit(1762702141.384:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa16c38f703 code=0x7ffc0000 [ 162.334836][ T27] audit: type=1326 audit(1762702141.434:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa16c38e17f code=0x7ffc0000 [ 162.378310][ T7817] loop0: detected capacity change from 0 to 8192 [ 162.383300][ T27] audit: type=1326 audit(1762702141.544:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa16c38f757 code=0x7ffc0000 [ 162.412504][ T27] audit: type=1326 audit(1762702141.544:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa16c38df10 code=0x7ffc0000 [ 162.538839][ T27] audit: type=1326 audit(1762702141.544:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa16c38f2cb code=0x7ffc0000 [ 162.627029][ T1140] Bluetooth: hci4: Frame reassembly failed (-90) [ 162.647856][ T27] audit: type=1326 audit(1762702141.554:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa16c38e32a code=0x7ffc0000 [ 162.680587][ T27] audit: type=1326 audit(1762702141.554:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa16c38e32a code=0x7ffc0000 [ 162.718498][ T7838] loop4: detected capacity change from 0 to 512 [ 162.726044][ T7838] EXT4-fs: Ignoring removed orlov option [ 162.733195][ T7838] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 162.752520][ T7838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 162.763477][ T7838] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2249: inode #15: comm syz.4.545: corrupted in-inode xattr: e_value size too large [ 162.780310][ T7838] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.545: couldn't read orphan inode 15 (err -117) [ 162.795232][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.818997][ T7843] loop1: detected capacity change from 0 to 1024 [ 162.841610][ T7843] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 162.851870][ T7843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.914407][ T7847] __nla_validate_parse: 9 callbacks suppressed [ 162.914423][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 162.920937][ T7843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.547: bg 0: block 88: padding at end of block bitmap is not set [ 162.930468][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 163.094842][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.182199][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 163.389405][ T7298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.548966][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.555'. [ 163.647605][ T7874] loop9: detected capacity change from 0 to 7 [ 163.660073][ C0] blk_print_req_error: 4 callbacks suppressed [ 163.660089][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.675429][ C0] buffer_io_error: 4 callbacks suppressed [ 163.675442][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.691459][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.700676][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.710109][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.719338][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.728933][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.738140][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.746257][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.755463][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.764787][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.774013][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.783294][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.792477][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.800397][ T7874] ldm_validate_partition_table(): Disk read failed. [ 163.808050][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.817274][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.825343][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.834566][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.842607][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.851815][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.863117][ T7874] Dev loop9: unable to read RDB block 0 [ 163.875307][ T7874] loop9: unable to read partition table [ 163.881426][ T7874] loop9: partition table beyond EOD, truncated [ 163.894834][ T7874] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 163.894834][ T7874] ) failed (rc=-5) [ 164.679247][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.642032][ T7921] loop1: detected capacity change from 0 to 512 [ 165.671775][ T7921] EXT4-fs: Ignoring removed nobh option [ 165.716870][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #3: comm syz.1.568: corrupted inode contents [ 165.730369][ T7921] EXT4-fs (loop1): Remounting filesystem read-only [ 165.742659][ T7921] EXT4-fs (loop1): 1 truncate cleaned up [ 165.750894][ T7921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.763572][ T7921] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.831224][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.955992][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 166.292739][ T7954] program syz.2.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.346883][ T7957] hub 9-0:1.0: USB hub found [ 166.354127][ T7957] hub 9-0:1.0: 1 port detected [ 166.387489][ T7960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.406628][ T7960] Zero length message leads to an empty skb [ 166.586907][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 167.170829][ T7992] syz.1.597[7992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.171726][ T7992] syz.1.597[7992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.846751][ T27] kauditd_printk_skb: 134 callbacks suppressed [ 167.846766][ T27] audit: type=1326 audit(1762702147.014:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 167.983338][ T27] audit: type=1326 audit(1762702147.014:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.029989][ T27] audit: type=1326 audit(1762702147.064:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.121065][ T27] audit: type=1326 audit(1762702147.064:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.179656][ T27] audit: type=1326 audit(1762702147.064:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.204713][ T27] audit: type=1326 audit(1762702147.064:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.229959][ T27] audit: type=1326 audit(1762702147.064:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.260955][ T27] audit: type=1326 audit(1762702147.064:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.297786][ T27] audit: type=1326 audit(1762702147.064:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.331805][ T27] audit: type=1326 audit(1762702147.064:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7999 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16c38f6c9 code=0x7ffc0000 [ 168.509727][ T8017] team0: Port device team_slave_0 removed [ 168.578455][ T8024] wireguard0: entered promiscuous mode [ 168.590814][ T8024] wireguard0: entered allmulticast mode [ 168.769958][ T8030] loop4: detected capacity change from 0 to 2048 [ 168.980824][ T8043] loop1: detected capacity change from 0 to 512 [ 169.006176][ T8043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.044447][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 169.065513][ T8043] EXT4-fs (loop1): 1 truncate cleaned up [ 169.072656][ T8043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.073849][ T8049] Bluetooth: hci4: Frame reassembly failed (-90) [ 169.157686][ T8053] loop0: detected capacity change from 0 to 2048 [ 169.196426][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.204369][ T8053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.259289][ T8058] pim6reg: entered allmulticast mode [ 169.267457][ T8058] pim6reg: left allmulticast mode [ 169.301957][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.317965][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.335057][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.342561][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.351999][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.373755][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.381186][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.399179][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.415332][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.431777][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.447729][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.456773][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.464279][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.480820][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.492293][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.507203][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.523369][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.537965][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.551043][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.561722][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.569283][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.576845][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.589848][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.591437][ T8068] 9pnet_fd: Insufficient options for proto=fd [ 169.610505][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.626920][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.638634][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.649869][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.658542][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.669526][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.688432][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.711219][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.728960][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.757107][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.769413][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.785635][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.801496][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.820476][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.836664][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.850168][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.867413][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.877743][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.886106][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.905591][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.915712][ T28] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.929343][ T28] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 170.089939][ T8093] loop1: detected capacity change from 0 to 512 [ 170.116777][ T8093] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 170.145756][ T8093] EXT4-fs (loop1): invalid journal inode [ 170.158758][ T8093] EXT4-fs (loop1): can't get journal size [ 170.169767][ T8093] EXT4-fs (loop1): 1 truncate cleaned up [ 170.181009][ T8093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.205135][ T8098] usb usb5: usbfs: process 8098 (syz.0.642) did not claim interface 0 before use [ 170.292418][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.379005][ T8104] loop0: detected capacity change from 0 to 512 [ 170.431576][ T8106] loop1: detected capacity change from 0 to 128 [ 170.442227][ T8106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.459851][ T8106] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.600709][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.731182][ T8117] loop0: detected capacity change from 0 to 512 [ 170.764239][ T8117] EXT4-fs: Ignoring removed nobh option [ 170.817125][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #3: comm syz.0.651: corrupted inode contents [ 170.831666][ T8126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.655'. [ 170.837239][ T8117] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #3: comm syz.0.651: mark_inode_dirty error [ 170.845741][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 170.862830][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.655'. [ 170.882101][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #3: comm syz.0.651: corrupted inode contents [ 170.927770][ T8117] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.651: mark_inode_dirty error [ 170.935372][ T8130] loop2: detected capacity change from 0 to 512 [ 170.946834][ T8130] EXT4-fs: Ignoring removed i_version option [ 170.950886][ T8117] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.651: Failed to acquire dquot type 0 [ 170.952834][ T8130] EXT4-fs: Ignoring removed bh option [ 170.979770][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #16: comm syz.0.651: corrupted inode contents [ 170.999786][ T8117] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #16: comm syz.0.651: mark_inode_dirty error [ 171.020622][ T8130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.033735][ T8130] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.048881][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #16: comm syz.0.651: corrupted inode contents [ 171.073364][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 171.080209][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.120461][ T8117] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.651: mark_inode_dirty error [ 171.203381][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #16: comm syz.0.651: corrupted inode contents [ 171.253330][ T8117] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 171.287972][ T8117] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #16: comm syz.0.651: corrupted inode contents [ 171.343124][ T8117] EXT4-fs error (device loop0): ext4_truncate:4294: inode #16: comm syz.0.651: mark_inode_dirty error [ 171.352331][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.382227][ T8117] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 171.426213][ T8117] EXT4-fs (loop0): 1 truncate cleaned up [ 171.458976][ T8117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.486954][ T8136] bridge: RTM_NEWNEIGH with invalid ether address [ 171.503876][ T8117] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.539014][ T8145] smc: net device sit0 applied user defined pnetid SYZ2 [ 171.604006][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.866852][ T8166] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.876273][ T8166] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.885059][ T8166] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.893801][ T8166] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.963320][ T8166] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.972284][ T8166] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.981247][ T8166] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.990189][ T8166] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.150902][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 173.170804][ T8169] can0: slcan on ttyS3. [ 173.287106][ T8172] can0 (unregistered): slcan off ttyS3. [ 173.476502][ T8182] loop1: detected capacity change from 0 to 128 [ 173.563837][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 173.722183][ T27] kauditd_printk_skb: 104 callbacks suppressed [ 173.722199][ T27] audit: type=1326 audit(1762702152.884:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 173.794479][ T27] audit: type=1326 audit(1762702152.884:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 173.806326][ T8193] loop4: detected capacity change from 0 to 512 [ 173.829200][ T8193] EXT4-fs: Ignoring removed nobh option [ 173.853431][ T8193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.869624][ T27] audit: type=1326 audit(1762702152.914:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 173.917288][ T8193] EXT4-fs (loop4): 1 truncate cleaned up [ 173.940540][ T8193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.943375][ T27] audit: type=1326 audit(1762702152.914:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.001410][ T27] audit: type=1326 audit(1762702152.914:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.023919][ T27] audit: type=1326 audit(1762702152.924:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.048215][ T27] audit: type=1326 audit(1762702152.924:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.101380][ T27] audit: type=1326 audit(1762702152.924:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.148465][ T27] audit: type=1326 audit(1762702152.924:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.1.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.226168][ T8211] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 174.334597][ T7298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.378323][ T27] audit: type=1326 audit(1762702153.524:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 174.843813][ T8236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.700'. [ 175.098437][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 175.283493][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 175.359701][ T8255] loop0: detected capacity change from 0 to 512 [ 175.370321][ T8255] EXT4-fs: Ignoring removed i_version option [ 175.392379][ T8255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.440669][ T8255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.489611][ T8255] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.571030][ T8255] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.711: corrupted inode contents [ 175.622611][ T8255] EXT4-fs (loop0): Remounting filesystem read-only [ 175.691581][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.790968][ T8279] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 175.801836][ T8279] netlink: 32 bytes leftover after parsing attributes in process `ÿ'. [ 175.848184][ T8283] netlink: 56 bytes leftover after parsing attributes in process `syz.0.719'. [ 175.958520][ T8289] loop2: detected capacity change from 0 to 512 [ 175.996934][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.029804][ T8289] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.202697][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.528412][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 176.560419][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 176.595108][ T8328] xt_hashlimit: max too large, truncated to 1048576 [ 176.946423][ T8344] loop2: detected capacity change from 0 to 2048 [ 176.981703][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.996545][ T8352] loop4: detected capacity change from 0 to 1024 [ 177.028615][ T8344] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.747: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 177.055113][ T8344] EXT4-fs (loop2): Remounting filesystem read-only [ 177.085731][ T8355] batman_adv: batadv0: Adding interface: dummy0 [ 177.092058][ T8355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.118348][ T8355] batman_adv: batadv0: Interface activated: dummy0 [ 177.144195][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.247684][ T8361] tmpfs: Bad value for 'size' [ 177.331590][ T8365] loop1: detected capacity change from 0 to 512 [ 177.345245][ T8365] EXT4-fs: Ignoring removed nobh option [ 177.385306][ T8365] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #3: comm +}[@: corrupted inode contents [ 177.432538][ T8365] EXT4-fs (loop1): Remounting filesystem read-only [ 177.450898][ T8365] EXT4-fs (loop1): 1 truncate cleaned up [ 177.472975][ T8365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.509700][ T8365] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.550270][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.773915][ T8378] loop0: detected capacity change from 0 to 512 [ 177.953459][ T8378] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 177.963476][ T8378] EXT4-fs (loop0): orphan cleanup on readonly fs [ 178.035575][ T8378] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #16: comm syz.0.757: corrupted inode contents [ 178.058661][ T8378] EXT4-fs (loop0): Remounting filesystem read-only [ 178.067807][ T8378] EXT4-fs (loop0): 1 truncate cleaned up [ 178.161903][ T49] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.197915][ T49] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.251030][ T49] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.270260][ T8378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.423979][ T8385] loop1: detected capacity change from 0 to 8192 [ 178.508093][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.538599][ T8385] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.659561][ T8385] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 178.690742][ T8385] FAT-fs (loop1): Filesystem has been set read-only [ 178.721690][ T8385] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 178.742339][ T27] kauditd_printk_skb: 87 callbacks suppressed [ 178.742353][ T27] audit: type=1326 audit(1762702413.901:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 178.760422][ T8385] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 178.836784][ T27] audit: type=1326 audit(1762702413.901:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 178.837417][ T8405] loop4: detected capacity change from 0 to 128 [ 178.907875][ T27] audit: type=1326 audit(1762702413.901:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e438f6c9 code=0x7ffc0000 [ 178.970554][ T8405] Falling back ldisc for ptm0. [ 178.973765][ T27] audit: type=1326 audit(1762702413.901:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f56e438e32a code=0x7ffc0000 [ 179.034707][ T8385] ------------[ cut here ]------------ [ 179.040200][ T8385] WARNING: CPU: 0 PID: 8385 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 179.048211][ T27] audit: type=1326 audit(1762702413.971:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56e43c1f85 code=0x7ffc0000 [ 179.049202][ T8385] Modules linked in: [ 179.075933][ T8385] CPU: 0 PID: 8385 Comm: syz.1.762 Not tainted syzkaller #0 [ 179.083274][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.093620][ T8385] RIP: 0010:__alloc_pages+0x2de/0x460 [ 179.099031][ T8385] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 dc 21 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 179.107732][ T8411] syz.4.769: attempt to access beyond end of device [ 179.107732][ T8411] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 179.118704][ T8385] RSP: 0018:ffffc90003befa00 EFLAGS: 00010246 [ 179.118727][ T8385] RAX: ffffc90003befa00 RBX: 1ffff9200077df44 RCX: 0000000000000000 [ 179.118742][ T8385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003befa68 [ 179.118754][ T8385] RBP: ffffc90003befb00 R08: ffffc90003befa67 R09: 0000000000000000 [ 179.118768][ T8385] R10: ffffc90003befa40 R11: fffff5200077df4d R12: 0000000000000014 [ 179.118782][ T8385] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 179.118796][ T8385] FS: 00007f56e51f36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 179.118815][ T8385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.118828][ T8385] CR2: 0000200000b93000 CR3: 000000002558b000 CR4: 00000000003506f0 [ 179.118846][ T8385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.118858][ T8385] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 179.118871][ T8385] Call Trace: [ 179.118879][ T8385] [ 179.118891][ T8385] ? zone_statistics+0x170/0x170 [ 179.118930][ T8385] ? __might_fault+0xaa/0x120 [ 179.236296][ T8385] ? __lock_acquire+0x7c80/0x7c80 [ 179.241350][ T8385] __kmalloc_large_node+0x8c/0x1e0 [ 179.246552][ T8385] ? raw_ioctl+0x19b0/0x3b70 [ 179.251159][ T8385] __kmalloc+0x111/0x240 [ 179.255491][ T8385] raw_ioctl+0x19b0/0x3b70 [ 179.259926][ T8385] ? tomoyo_path_number_perm+0x477/0x590 [ 179.266204][ T8385] ? __kmem_cache_free+0xba/0x1f0 [ 179.271273][ T8385] ? tomoyo_path_number_perm+0x4dc/0x590 [ 179.277102][ T8385] ? tomoyo_path_number_perm+0x1ba/0x590 [ 179.282765][ T8385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 179.288287][ T8385] ? make_qualifier+0x250/0x250 [ 179.293188][ T8385] ? __fget_files+0x28/0x4d0 [ 179.297855][ T8385] ? bpf_lsm_file_ioctl+0x9/0x10 [ 179.302810][ T8385] ? security_file_ioctl+0x80/0xa0 [ 179.307986][ T8385] ? make_qualifier+0x250/0x250 [ 179.312855][ T8385] __se_sys_ioctl+0xfd/0x170 [ 179.317517][ T8385] do_syscall_64+0x55/0xb0 [ 179.321957][ T8385] ? clear_bhb_loop+0x40/0x90 [ 179.326713][ T8385] ? clear_bhb_loop+0x40/0x90 [ 179.331407][ T8385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.337363][ T8385] RIP: 0033:0x7f56e438f6c9 [ 179.341793][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.348150][ T27] audit: type=1326 audit(1762702414.071:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ceb58f6c9 code=0x7ffc0000 [ 179.361452][ T8385] RSP: 002b:00007f56e51f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.361478][ T8385] RAX: ffffffffffffffda RBX: 00007f56e45e5fa0 RCX: 00007f56e438f6c9 [ 179.361493][ T8385] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 000000000000000c [ 179.361507][ T8385] RBP: 00007f56e4411f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.361519][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.361532][ T8385] R13: 00007f56e45e6038 R14: 00007f56e45e5fa0 R15: 00007ffdcc4f9b18 [ 179.361563][ T8385] [ 179.361572][ T8385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.361582][ T8385] CPU: 0 PID: 8385 Comm: syz.1.762 Not tainted syzkaller #0 [ 179.361598][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.361608][ T8385] Call Trace: [ 179.361616][ T8385] [ 179.361622][ T8385] dump_stack_lvl+0x16c/0x230 [ 179.361652][ T8385] ? show_regs_print_info+0x20/0x20 [ 179.361677][ T8385] ? load_image+0x3b0/0x3b0 [ 179.361716][ T8385] panic+0x2c0/0x710 [ 179.361738][ T8385] ? bpf_jit_dump+0xd0/0xd0 [ 179.361766][ T8385] __warn+0x2e0/0x470 [ 179.361782][ T8385] ? __alloc_pages+0x2de/0x460 [ 179.361810][ T8385] ? __alloc_pages+0x2de/0x460 [ 179.361836][ T8385] report_bug+0x2be/0x4f0 [ 179.361860][ T8385] ? __alloc_pages+0x2de/0x460 [ 179.361887][ T8385] ? __alloc_pages+0x2de/0x460 [ 179.361912][ T8385] ? __alloc_pages+0x2e0/0x460 [ 179.361936][ T8385] handle_bug+0xcf/0x120 [ 179.361961][ T8385] exc_invalid_op+0x1a/0x50 [ 179.361984][ T8385] asm_exc_invalid_op+0x1a/0x20 [ 179.362003][ T8385] RIP: 0010:__alloc_pages+0x2de/0x460 [ 179.362029][ T8385] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 dc 21 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 179.362045][ T8385] RSP: 0018:ffffc90003befa00 EFLAGS: 00010246 [ 179.362060][ T8385] RAX: ffffc90003befa00 RBX: 1ffff9200077df44 RCX: 0000000000000000 [ 179.362073][ T8385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003befa68 [ 179.362085][ T8385] RBP: ffffc90003befb00 R08: ffffc90003befa67 R09: 0000000000000000 [ 179.362098][ T8385] R10: ffffc90003befa40 R11: fffff5200077df4d R12: 0000000000000014 [ 179.362111][ T8385] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 179.362141][ T8385] ? zone_statistics+0x170/0x170 [ 179.362175][ T8385] ? __might_fault+0xaa/0x120 [ 179.362193][ T8385] ? __lock_acquire+0x7c80/0x7c80 [ 179.362215][ T8385] __kmalloc_large_node+0x8c/0x1e0 [ 179.362243][ T8385] ? raw_ioctl+0x19b0/0x3b70 [ 179.362260][ T8385] __kmalloc+0x111/0x240 [ 179.362286][ T8385] raw_ioctl+0x19b0/0x3b70 [ 179.362304][ T8385] ? tomoyo_path_number_perm+0x477/0x590 [ 179.362329][ T8385] ? __kmem_cache_free+0xba/0x1f0 [ 179.362359][ T8385] ? tomoyo_path_number_perm+0x4dc/0x590 [ 179.362383][ T8385] ? tomoyo_path_number_perm+0x1ba/0x590 [ 179.362409][ T8385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 179.362433][ T8385] ? make_qualifier+0x250/0x250 [ 179.362482][ T8385] ? __fget_files+0x28/0x4d0 [ 179.362518][ T8385] ? bpf_lsm_file_ioctl+0x9/0x10 [ 179.362535][ T8385] ? security_file_ioctl+0x80/0xa0 [ 179.362559][ T8385] ? make_qualifier+0x250/0x250 [ 179.362577][ T8385] __se_sys_ioctl+0xfd/0x170 [ 179.362600][ T8385] do_syscall_64+0x55/0xb0 [ 179.362621][ T8385] ? clear_bhb_loop+0x40/0x90 [ 179.362639][ T8385] ? clear_bhb_loop+0x40/0x90 [ 179.362659][ T8385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.362677][ T8385] RIP: 0033:0x7f56e438f6c9 [ 179.362698][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.362713][ T8385] RSP: 002b:00007f56e51f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.362730][ T8385] RAX: ffffffffffffffda RBX: 00007f56e45e5fa0 RCX: 00007f56e438f6c9 [ 179.362744][ T8385] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 000000000000000c [ 179.362756][ T8385] RBP: 00007f56e4411f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.362768][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.362779][ T8385] R13: 00007f56e45e6038 R14: 00007f56e45e5fa0 R15: 00007ffdcc4f9b18 [ 179.362805][ T8385] [ 179.384053][ T8385] Kernel Offset: disabled