last executing test programs: 10.227652317s ago: executing program 0 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3808002, &(0x7f0000000640), 0x3, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe") 9.575461486s ago: executing program 0 (id=1308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000002010400000000000000000a00000004000280188c0d7c545d916999620d5207e818d36372243f25311f2e2483d45a092e472fa795c6ba13871c133bcbb6574bd03ca466f487131b5ee54762a0feafa59189000f9424db31a2630efba193c9a5a7cbf4edea1f5cb87e7a072ba95c418df82bce987784206bfee2517f91d21c3156a2ef2f461b0c5cf183a50a76728f9ea98c4ad321e944fe2feebeb9670406baf9328b8ce99b57c121d3153ce60b061048121b01571effd0a80b0de018f558d32ba8e57743918d5564d7e63aa4cd30284074526b7e2438c709fff885f889ed87"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) set_mempolicy(0x3, &(0x7f0000000040)=0x5bf, 0xd) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) syz_io_uring_setup(0x88b, &(0x7f0000000280)={0x0, 0xaedf, 0x8, 0xfffffffd, 0x25d}, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f00000000c0)) setregid(0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 9.266275094s ago: executing program 0 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 9.103737933s ago: executing program 0 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010008000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r9 = creat(&(0x7f0000000380)='./file0\x00', 0xd4) pwritev2(r9, &(0x7f0000000040), 0x1, 0x10fffff, 0xffffffff, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 8.919894294s ago: executing program 0 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 5.136911748s ago: executing program 0 (id=1342): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000580)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEHos/67uPwH/CvGOhgyCjuQYTITW+6bE3arMvWbvl84JZzcu/tud/c+z05NychAQyssexPIeLliPgmidgfEUm+bjjylWMr2y3fvTydLUk0Gp/+nTS3y+qt/9Xab29eeSkifv8q4mhhbbu1xaW5Urmczuf18XrlwnhtcenYuUppNp1Nz09OTZ14e2ryvXff6Vusb5y+9/0nNz888fXh5e9+vX3gehInY1++rj2Ox3ClvTIWY/lzMhInH9pwog+NbSfJVh8AmzKU5/lIZH3A/hjKsx54/n0ZEQ1gQCXyHwZUaxzQurfv033wM+POBys3QGvjH155byR2Ne+N9iwnD9wZZfe7o31oP2vjt79uXM+W6N/7EAAbunI1Io4PD6/t/5K8/9u84z1s83Ab+j94em5m4583O41/Cqvjn+gw/tnbIXc3Y+P8L9zuQzNdZeO/9zuOf1cnrUaH8toLzTHfSHL2XDnN+rYXI+JIjOzM6uvN55xYvtXotq59/JctWfutsWB+HLeHdz64z0ypXnqcmNvduRrxSsfxb7J6/pMO5z97Pk732Mah9MZr3dZtHP+T1fgp4vWO5//+jFay/vzkePN6GG9dFWv9c+3QH93a3+r4s/O/Z/34R5P2+drao7fx465/027rHog/er/+dySfNcs78sculer1+YmIHcnHax+fvL9vq97aPov/yOH1+79O1//uiPi8x/ivHfzl1Z7i36LzP/NI5//RC7c++uKHbu331v+91SwdyR/ppf/r9QAf57kDAAAAAACA7aYQEfsiKRRXy4VCsbjy+Y6DsadQrtbqR89WF87PRPO7sqMxUmjNdO9v+zzERP552FZ98qH6VEQciIhvh3Y368Xpanlmq4MHAAAAAAAAAAAAAAAAAACAbWJvl+//Z/4c6rLT/L2f+/HbD8A24Ce/YXBtmP9e7eG55fUfBldP+b/ryR8H8PR5/YfBJf9hcMl/GFzyHwaX/IfBJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgr06fOpUtjeW7l6ez+szFxYW56sVjM2ltrlhZmC5OV+cvFGer1dkkLU5XK+v+s/8aUa5WL0xMxsKl8Xpaq4/XFpfOVKoL5+tnzlVKs+mZdORpBQYAAAAAAAAAAAAAAAAAAADPkNri0lypXE7nFRQ2VRjeHoeh0OfCVvdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDf/wEAAP//BJI7cw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r1, r1, 0x0, 0x80000000) 4.599947389s ago: executing program 4 (id=1346): syz_open_procfs(0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 4.06549871s ago: executing program 1 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 3.888083481s ago: executing program 1 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000340)={@mcast1}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r1) 3.751180299s ago: executing program 1 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000400)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x3b, 0x3, 0x0, 0x0, "e9733ba463d1fb6584f610d49386153295efbfe51d6935a300681ee5573ce1b3e45309878bba6ffaf22d74e9eb2fc86978be85a244e19870b04b1645502dbe66"}, 0x48}, 0x1, 0x0, 0x0, 0x40018090}, 0x44044) 3.582647779s ago: executing program 4 (id=1358): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000a0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x4, 0x5, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 3.095715268s ago: executing program 3 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000019c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.910549829s ago: executing program 4 (id=1361): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a010000000000000000000100"], 0x4b0}}, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000340)=""/113) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r7, r7, 0x0, 0xb) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x9) 2.596951537s ago: executing program 3 (id=1363): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sync() syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'sit0\x00', {0xff}, {0xff}, 0x33, 0xf2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x2}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x2, "4e38365e69421ea195afd718402b4ddaa1db2bb6a2c97af8264dac4a946f"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 2.426138868s ago: executing program 2 (id=1364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.193647221s ago: executing program 3 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000001c0000000400000002"], 0x50) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) 2.124052765s ago: executing program 2 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) 1.035122929s ago: executing program 2 (id=1367): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 932.190705ms ago: executing program 4 (id=1368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") 872.044009ms ago: executing program 3 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0xa0, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 830.788971ms ago: executing program 2 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 587.467506ms ago: executing program 3 (id=1371): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea417", 0x46}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903279dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f10", 0x39b}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r0) 561.456287ms ago: executing program 4 (id=1372): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001980)=ANY=[@ANYBLOB], 0x50}}, 0x0) 500.122941ms ago: executing program 1 (id=1373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 489.505701ms ago: executing program 2 (id=1374): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 364.186869ms ago: executing program 3 (id=1375): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x78c, &(0x7f0000001f00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 278.113094ms ago: executing program 4 (id=1376): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sync() syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'sit0\x00', {0xff}, {0xff}, 0x33, 0xf2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x2}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x2, "4e38365e69421ea195afd718402b4ddaa1db2bb6a2c97af8264dac4a946f"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 262.490675ms ago: executing program 2 (id=1377): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) fcntl$dupfd(r0, 0x406, r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x9, 0x3f00}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 256.376225ms ago: executing program 1 (id=1378): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 0s ago: executing program 1 (id=1379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x8}, 0x18) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): becomes ready [ 78.141554][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.172332][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.191242][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.210431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.219358][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.242577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.286457][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.304127][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 78.304229][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 78.310823][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 78.316323][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 78.353366][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.382779][ T4344] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.392166][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 78.415232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.424747][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.433138][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.445827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.649805][ T4351] random: crng reseeded on system resumption [ 81.306553][ T4379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 81.316470][ T4377] bridge0: port 3(syz_tun) entered blocking state [ 81.335224][ T4377] bridge0: port 3(syz_tun) entered disabled state [ 81.382384][ T4377] device syz_tun entered promiscuous mode [ 81.431686][ T4377] bridge0: port 3(syz_tun) entered blocking state [ 81.438524][ T4377] bridge0: port 3(syz_tun) entered forwarding state [ 81.943655][ T4390] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21'. [ 82.022553][ T4379] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 83.851752][ T4424] bridge0: port 3(syz_tun) entered blocking state [ 83.860254][ T4424] bridge0: port 3(syz_tun) entered disabled state [ 83.868607][ T4424] device syz_tun entered promiscuous mode [ 83.894491][ T4424] bridge0: port 3(syz_tun) entered blocking state [ 83.901153][ T4424] bridge0: port 3(syz_tun) entered forwarding state [ 83.909754][ T4427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 84.125781][ T4428] smc: net device bond0 applied user defined pnetid SYZ2 [ 84.131989][ T4427] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 85.877262][ T4455] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.256142][ T4465] tipc: Enabling of bearer rejected, failed to enable media [ 86.707790][ T14] cfg80211: failed to load regulatory.db [ 86.714130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 86.881815][ T4473] netlink: 168 bytes leftover after parsing attributes in process `syz.4.51'. [ 87.114099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.951113][ T4492] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 90.112360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.883103][ T4546] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 92.083587][ T4549] netlink: 168 bytes leftover after parsing attributes in process `syz.4.77'. [ 94.342630][ T4589] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 94.421684][ T4591] tipc: Enabling of bearer rejected, failed to enable media [ 97.214105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.952595][ T4683] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.435487][ T4699] netlink: 348 bytes leftover after parsing attributes in process `syz.3.136'. [ 101.176878][ T4723] bridge0: port 3(syz_tun) entered blocking state [ 101.198078][ T4723] bridge0: port 3(syz_tun) entered disabled state [ 101.216410][ T4723] device syz_tun entered promiscuous mode [ 101.228327][ T4723] bridge0: port 3(syz_tun) entered blocking state [ 101.235721][ T4723] bridge0: port 3(syz_tun) entered forwarding state [ 101.341214][ T4730] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 101.694574][ T4739] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 102.044789][ T4750] netlink: 100 bytes leftover after parsing attributes in process `syz.4.158'. [ 102.201848][ T4754] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.343494][ T4789] netlink: 100 bytes leftover after parsing attributes in process `syz.2.175'. [ 104.906092][ T4815] tipc: Enabling of bearer rejected, failed to enable media [ 105.914122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 105.923872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 105.933819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 105.943821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 107.144154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.978434][ T4860] netlink: 100 bytes leftover after parsing attributes in process `syz.0.199'. [ 109.396935][ T4878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 109.435427][ T4878] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 111.105991][ T4904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 111.128714][ T4904] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 111.356865][ T4912] loop1: detected capacity change from 0 to 128 [ 111.574197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.721974][ T4943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 113.731546][ T4943] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 114.980074][ T4968] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 115.878266][ T4983] device syz_tun left promiscuous mode [ 115.925353][ T4983] bridge0: port 3(syz_tun) entered disabled state [ 115.988033][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.061014][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.096303][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.119177][ T4983] device bridge_slave_0 left promiscuous mode [ 116.177018][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.221857][ T4983] device bridge_slave_1 left promiscuous mode [ 116.254191][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.302613][ T4983] bond0: (slave bond_slave_0): Releasing backup interface [ 116.482836][ T4983] bond0: (slave bond_slave_1): Releasing backup interface [ 116.644138][ T4983] team0: Port device team_slave_0 removed [ 117.395845][ T4983] team0: Port device team_slave_1 removed [ 117.402161][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.456246][ T4983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.491870][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.506632][ T4983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.550404][ T4999] loop2: detected capacity change from 0 to 2048 [ 117.640246][ T4988] bridge0: port 1(vlan2) entered blocking state [ 117.674342][ T4988] bridge0: port 1(vlan2) entered disabled state [ 117.736234][ T4988] device veth0_to_batadv entered promiscuous mode [ 117.768377][ T4988] bridge0: port 1(vlan2) entered blocking state [ 117.774793][ T4988] bridge0: port 1(vlan2) entered forwarding state [ 117.848391][ T4999] loop2: unable to read partition table [ 117.881428][ T5002] loop1: detected capacity change from 0 to 256 [ 117.888148][ T4999] loop2: partition table beyond EOD, truncated [ 117.903939][ T4999] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 119.293523][ T5028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.386652][ T5028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.884249][ T5031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.261'. [ 120.233310][ T5033] bridge0: port 3(syz_tun) entered blocking state [ 120.264177][ T5033] bridge0: port 3(syz_tun) entered disabled state [ 120.300104][ T5033] device syz_tun entered promiscuous mode [ 120.324357][ T5033] bridge0: port 3(syz_tun) entered blocking state [ 120.330887][ T5033] bridge0: port 3(syz_tun) entered forwarding state [ 120.804108][ T5044] loop4: detected capacity change from 0 to 2048 [ 120.834796][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 120.846958][ T5044] loop4: p1 < > p4 [ 120.853350][ T5044] loop4: p4 size 8388608 extends beyond EOD, truncated [ 120.897462][ T5046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.092439][ T5085] netlink: 'syz.0.282': attribute type 3 has an invalid length. [ 123.661665][ T5093] netlink: 14 bytes leftover after parsing attributes in process `syz.4.285'. [ 123.806050][ T27] audit: type=1326 audit(1740186882.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 123.919741][ T27] audit: type=1326 audit(1740186883.027:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 123.993140][ T27] audit: type=1326 audit(1740186883.037:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.026967][ T27] audit: type=1326 audit(1740186883.037:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.109581][ T27] audit: type=1326 audit(1740186883.037:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.154023][ T5093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.187902][ T5101] loop0: detected capacity change from 0 to 1024 [ 124.204259][ T5101] EXT4-fs: Ignoring removed orlov option [ 124.217702][ T5093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.231582][ T27] audit: type=1326 audit(1740186883.037:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.267847][ T5093] bond0 (unregistering): Released all slaves [ 124.288483][ T5101] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.341983][ T27] audit: type=1326 audit(1740186883.037:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.368401][ T27] audit: type=1326 audit(1740186883.037:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 124.577490][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 125.316174][ T5120] loop2: detected capacity change from 0 to 2048 [ 125.364495][ T5120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.426231][ T27] audit: type=1800 audit(1740186884.607:10): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 125.633969][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 125.644933][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 125.878154][ T5135] bridge0: port 3(syz_tun) entered blocking state [ 125.894256][ T5135] bridge0: port 3(syz_tun) entered disabled state [ 125.902081][ T5135] device syz_tun entered promiscuous mode [ 125.938929][ T5135] bridge0: port 3(syz_tun) entered blocking state [ 125.945483][ T5135] bridge0: port 3(syz_tun) entered forwarding state [ 126.201658][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 126.494710][ T5149] loop0: detected capacity change from 0 to 128 [ 126.558296][ T5149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.652724][ T5149] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.890873][ T27] audit: type=1326 audit(1740186886.067:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 127.041355][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 127.059881][ T5160] loop1: detected capacity change from 0 to 8192 [ 127.114940][ T5160] loop1: p1 < > p2 < p5 > p3 p4 [ 127.154238][ T5160] loop1: p3 start 83890176 is beyond EOD, truncated [ 127.194008][ T5160] loop1: p4 size 16776960 extends beyond EOD, truncated [ 127.234017][ T5160] loop1: p5 size 16776960 extends beyond EOD, truncated [ 127.368681][ T5168] bridge0: port 2(syz_tun) entered blocking state [ 127.429661][ T5168] bridge0: port 2(syz_tun) entered disabled state [ 127.441027][ T5168] device syz_tun entered promiscuous mode [ 127.463025][ T5168] device vlan2 entered promiscuous mode [ 127.485980][ T5168] bridge0: port 2(syz_tun) entered blocking state [ 127.492609][ T5168] bridge0: port 2(syz_tun) entered forwarding state [ 127.507236][ T5171] loop2: detected capacity change from 0 to 2048 [ 129.169780][ T5188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 129.519576][ T5194] netlink: 100 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.620406][ T5198] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 129.628918][ T5198] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 129.637742][ T5198] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 130.306762][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 130.306778][ T27] audit: type=1326 audit(1740186889.487:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.383179][ T27] audit: type=1326 audit(1740186889.487:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.447156][ T27] audit: type=1326 audit(1740186889.487:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.540857][ T5210] loop2: detected capacity change from 0 to 512 [ 130.549236][ T27] audit: type=1326 audit(1740186889.487:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.609972][ T27] audit: type=1326 audit(1740186889.517:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.741146][ T5210] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.332: bg 0: block 248: padding at end of block bitmap is not set [ 130.763871][ T27] audit: type=1326 audit(1740186889.527:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.826085][ T5210] Quota error (device loop2): write_blk: dquota write failed [ 130.865568][ T27] audit: type=1326 audit(1740186889.527:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 130.889937][ T5210] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 130.933900][ T5210] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.332: Failed to acquire dquot type 1 [ 130.997124][ T5210] EXT4-fs (loop2): 1 truncate cleaned up [ 131.002851][ T5210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.165711][ T5210] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.347387][ T5229] loop4: detected capacity change from 0 to 164 [ 131.391873][ T5229] Unsupported NM flag settings (8) [ 131.418108][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 131.635543][ T5231] netlink: 100 bytes leftover after parsing attributes in process `syz.2.339'. [ 132.081202][ T5243] loop4: detected capacity change from 0 to 2048 [ 132.110313][ T5243] EXT4-fs: Ignoring removed bh option [ 132.163129][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.423898][ T27] audit: type=1804 audit(1740186891.597:44): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.344" name="/newroot/63/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 132.562988][ T5260] syz.1.350[5260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.563101][ T5260] syz.1.350[5260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.770003][ T5265] netlink: 100 bytes leftover after parsing attributes in process `syz.1.352'. [ 132.798658][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805072][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.103226][ T5274] Zero length message leads to an empty skb [ 133.203292][ T5257] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.344567][ T5257] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8703 with max blocks 1 with error 28 [ 133.432136][ T5257] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.432136][ T5257] [ 133.462605][ T5257] EXT4-fs (loop4): Total free blocks count 0 [ 133.479128][ T5257] EXT4-fs (loop4): Free/Dirty block details [ 133.493978][ T5257] EXT4-fs (loop4): free_blocks=2415919104 [ 133.510219][ T5257] EXT4-fs (loop4): dirty_blocks=2368 [ 133.515676][ T5257] EXT4-fs (loop4): Block reservation details [ 133.532092][ T5257] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 133.538884][ T5276] random: crng reseeded on system resumption [ 133.578714][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.689418][ T5293] loop2: detected capacity change from 0 to 2048 [ 133.754712][ T5293] loop2: p1 < > p4 [ 133.759741][ T5293] loop2: p4 size 8388608 extends beyond EOD, truncated [ 134.329928][ T5305] netlink: 100 bytes leftover after parsing attributes in process `syz.3.365'. [ 134.711428][ T5315] loop0: detected capacity change from 0 to 512 [ 134.769576][ T5315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.846884][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.994022][ T5315] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.055676][ T5315] EXT4-fs error (device loop0): __ext4_new_inode:1285: comm syz.0.369: failed to insert inode 16: doubly allocated? [ 135.169349][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 135.400490][ T5327] loop0: detected capacity change from 0 to 8192 [ 135.611904][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 135.611920][ T27] audit: type=1326 audit(1740186894.787:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 135.722983][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.723889][ T27] audit: type=1326 audit(1740186894.837:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 135.762935][ T5335] netlink: 100 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.824059][ T27] audit: type=1326 audit(1740186894.837:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 135.887294][ T27] audit: type=1326 audit(1740186894.837:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 135.915138][ T5339] netlink: 'syz.4.379': attribute type 4 has an invalid length. [ 135.978246][ T27] audit: type=1326 audit(1740186894.837:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.033724][ T5341] loop0: detected capacity change from 0 to 164 [ 136.045207][ T27] audit: type=1326 audit(1740186894.857:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.081836][ T5341] process 'syz.0.381' launched '/dev/fd/7' with NULL argv: empty string added [ 136.114374][ T27] audit: type=1326 audit(1740186894.857:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.135765][ T5341] syz.0.381: attempt to access beyond end of device [ 136.135765][ T5341] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 136.184935][ T5341] syz.0.381: attempt to access beyond end of device [ 136.184935][ T5341] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 136.194438][ T27] audit: type=1326 audit(1740186894.857:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.270733][ T27] audit: type=1326 audit(1740186894.857:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.326788][ T27] audit: type=1326 audit(1740186894.857:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 136.463052][ T5352] loop2: detected capacity change from 0 to 2048 [ 136.524485][ T5352] loop2: p1 < > p4 [ 136.529403][ T5352] loop2: p4 size 8388608 extends beyond EOD, truncated [ 136.741826][ T5359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 136.764811][ T5359] netlink: 100 bytes leftover after parsing attributes in process `syz.4.391'. [ 137.083175][ T5369] atomic_op ffff888056d45198 conn xmit_atomic 0000000000000000 [ 137.237307][ T5371] loop2: detected capacity change from 0 to 4096 [ 137.332294][ T5371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.483118][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 137.533073][ T5384] loop3: detected capacity change from 0 to 2048 [ 137.604316][ T5384] loop3: p1 < > p4 [ 137.620215][ T5384] loop3: p4 size 8388608 extends beyond EOD, truncated [ 137.655841][ T5389] netlink: 168 bytes leftover after parsing attributes in process `syz.4.404'. [ 138.356942][ T5403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.409'. [ 138.634233][ T5403] loop4: detected capacity change from 0 to 512 [ 138.641135][ T5403] EXT4-fs: Ignoring removed nobh option [ 138.667871][ T5403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.864529][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.409: corrupted inode contents [ 138.887767][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 138.918248][ T5403] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.409: mark_inode_dirty error [ 138.964688][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.014675][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.409: corrupted inode contents [ 139.104176][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.141343][ T5403] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.409: mark_inode_dirty error [ 139.198055][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.222264][ T5403] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.409: Failed to acquire dquot type 0 [ 139.284330][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.336630][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.409: corrupted inode contents [ 139.384016][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.397226][ T5403] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #16: comm syz.4.409: mark_inode_dirty error [ 139.451949][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.464907][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.409: corrupted inode contents [ 139.514151][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.523359][ T5403] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.409: mark_inode_dirty error [ 139.561631][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.583028][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.409: corrupted inode contents [ 139.609648][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.622857][ T5403] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 139.641250][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.653042][ T5403] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.409: corrupted inode contents [ 139.675005][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.681745][ T5403] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.409: mark_inode_dirty error [ 139.697564][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.719733][ T5403] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 139.746545][ T5403] EXT4-fs (loop4): Remounting filesystem read-only [ 139.761577][ T5403] EXT4-fs (loop4): 1 truncate cleaned up [ 139.782217][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.793153][ T5403] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.947450][ T5432] netlink: 168 bytes leftover after parsing attributes in process `syz.3.419'. [ 139.962971][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 140.349985][ T5445] loop3: detected capacity change from 0 to 256 [ 140.416094][ T5445] FAT-fs (loop3): Directory bread(block 64) failed [ 140.441128][ T5445] FAT-fs (loop3): Directory bread(block 65) failed [ 140.459745][ T5449] loop4: detected capacity change from 0 to 2048 [ 140.486157][ T5445] FAT-fs (loop3): Directory bread(block 66) failed [ 140.492788][ T5445] FAT-fs (loop3): Directory bread(block 67) failed [ 140.530748][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.539627][ T5449] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.565091][ T5445] FAT-fs (loop3): Directory bread(block 68) failed [ 140.571862][ T5445] FAT-fs (loop3): Directory bread(block 69) failed [ 140.580884][ T5445] FAT-fs (loop3): Directory bread(block 70) failed [ 140.587884][ T5445] FAT-fs (loop3): Directory bread(block 71) failed [ 140.594728][ T5445] FAT-fs (loop3): Directory bread(block 72) failed [ 140.601439][ T5445] FAT-fs (loop3): Directory bread(block 73) failed [ 140.701149][ T5449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.426: bg 0: block 345: padding at end of block bitmap is not set [ 140.734958][ T5445] syz.3.424: attempt to access beyond end of device [ 140.734958][ T5445] loop3: rw=2049, sector=1264, nr_sectors = 92 limit=256 [ 140.831280][ T5445] syz.3.424: attempt to access beyond end of device [ 140.831280][ T5445] loop3: rw=2051, sector=1224, nr_sectors = 160 limit=256 [ 140.874129][ T4305] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 140.897864][ T4305] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.897864][ T4305] [ 140.924150][ T4305] EXT4-fs (loop4): Total free blocks count 0 [ 140.953063][ T4305] EXT4-fs (loop4): Free/Dirty block details [ 140.973389][ T4305] EXT4-fs (loop4): free_blocks=0 [ 140.993860][ T4305] EXT4-fs (loop4): dirty_blocks=16 [ 141.010200][ T4305] EXT4-fs (loop4): Block reservation details [ 141.030666][ T4305] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 141.061560][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 141.503097][ T5467] netlink: 168 bytes leftover after parsing attributes in process `syz.4.432'. [ 142.032995][ T5486] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 142.088248][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 142.088265][ T27] audit: type=1326 audit(1740186901.267:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.178049][ T27] audit: type=1326 audit(1740186901.267:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.238624][ T27] audit: type=1326 audit(1740186901.267:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.263699][ T5486] loop3: detected capacity change from 0 to 2048 [ 142.293060][ T5486] ======================================================= [ 142.293060][ T5486] WARNING: The mand mount option has been deprecated and [ 142.293060][ T5486] and is ignored by this kernel. Remove the mand [ 142.293060][ T5486] option from the mount to silence this warning. [ 142.293060][ T5486] ======================================================= [ 142.305947][ T5499] netlink: 168 bytes leftover after parsing attributes in process `syz.1.446'. [ 142.329533][ T27] audit: type=1326 audit(1740186901.267:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.417887][ T27] audit: type=1326 audit(1740186901.267:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.459373][ T27] audit: type=1326 audit(1740186901.267:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.523695][ T27] audit: type=1326 audit(1740186901.307:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.556072][ T27] audit: type=1326 audit(1740186901.307:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.595717][ T27] audit: type=1326 audit(1740186901.307:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.669176][ T27] audit: type=1326 audit(1740186901.307:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5485 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 142.860033][ T5514] syz.2.452[5514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.860144][ T5514] syz.2.452[5514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.994745][ T5520] syz.2.452 uses obsolete (PF_INET,SOCK_PACKET) [ 143.463047][ T5528] loop3: detected capacity change from 0 to 128 [ 143.748232][ T5528] syz.3.459: attempt to access beyond end of device [ 143.748232][ T5528] loop3: rw=2049, sector=225, nr_sectors = 816 limit=128 [ 144.502877][ T5559] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 144.611723][ T5561] devtmpfs: Too few inodes for current use [ 144.871121][ T5569] device team_slave_0 entered promiscuous mode [ 144.877841][ T5569] device team_slave_1 entered promiscuous mode [ 144.914097][ T5569] device macsec1 entered promiscuous mode [ 144.930135][ T5569] device team0 entered promiscuous mode [ 144.956369][ T5569] team0: Device macsec1 is already an upper device of the team interface [ 144.995256][ T5569] device team0 left promiscuous mode [ 145.021679][ T5569] device team_slave_0 left promiscuous mode [ 145.027737][ T5569] device team_slave_1 left promiscuous mode [ 145.242666][ T5581] loop2: detected capacity change from 0 to 2048 [ 145.315135][ T5581] loop2: p1 < > p4 [ 145.320559][ T5581] loop2: p4 size 8388608 extends beyond EOD, truncated [ 145.678482][ T5595] loop2: detected capacity change from 0 to 512 [ 145.710036][ T5595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.758549][ T5595] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.782464][ T5595] EXT4-fs (loop2): 1 truncate cleaned up [ 145.792794][ T5595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.085348][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 146.195574][ T5612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.495'. [ 146.310370][ T5617] loop2: detected capacity change from 0 to 2048 [ 146.375003][ T5617] loop2: p1 < > p4 [ 146.384527][ T5617] loop2: p4 size 8388608 extends beyond EOD, truncated [ 146.934265][ T5639] loop2: detected capacity change from 0 to 512 [ 146.997739][ T5639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.014125][ T5639] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.140294][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 147.140310][ T27] audit: type=1326 audit(1740186906.317:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.180595][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 147.215188][ T27] audit: type=1326 audit(1740186906.317:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.299410][ T27] audit: type=1326 audit(1740186906.317:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.324896][ T5654] loop1: detected capacity change from 0 to 2048 [ 147.351554][ T27] audit: type=1326 audit(1740186906.317:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.375320][ T27] audit: type=1326 audit(1740186906.317:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.405452][ T5654] loop1: p1 < > p4 [ 147.414992][ T5654] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.452402][ T27] audit: type=1326 audit(1740186906.317:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.504866][ T27] audit: type=1326 audit(1740186906.337:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.539049][ T5666] device vlan3 entered promiscuous mode [ 147.564290][ T27] audit: type=1326 audit(1740186906.337:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.640534][ T27] audit: type=1326 audit(1740186906.337:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.696193][ T5668] loop4: detected capacity change from 0 to 2048 [ 147.711072][ T27] audit: type=1326 audit(1740186906.337:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa4c958d169 code=0x7ffc0000 [ 147.747349][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 147.797814][ T5668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.919493][ T5663] device hsr_slave_1 left promiscuous mode [ 147.929968][ T5672] IPv6: Can't replace route, no match found [ 147.943968][ T5670] bridge0: port 4(vlan2) entered blocking state [ 147.972830][ T5670] bridge0: port 4(vlan2) entered disabled state [ 148.013897][ T5670] device vlan2 entered promiscuous mode [ 148.024014][ T5670] device gretap0 entered promiscuous mode [ 148.031213][ T5670] bridge0: port 4(vlan2) entered blocking state [ 148.037629][ T5670] bridge0: port 4(vlan2) entered forwarding state [ 148.309748][ T5682] loop2: detected capacity change from 0 to 1024 [ 148.367966][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 148.371027][ T5682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.440384][ T5688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.527'. [ 148.531764][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 148.695915][ T5690] loop4: detected capacity change from 0 to 2048 [ 148.732608][ T5690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.747570][ T5690] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.236831][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 149.349529][ T5709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 150.702226][ T5726] tipc: Enabling of bearer rejected, failed to enable media [ 151.114932][ T5738] netlink: 168 bytes leftover after parsing attributes in process `syz.0.544'. [ 151.735969][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 151.967254][ T5762] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.552'. [ 152.032057][ T5762] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.084115][ T5759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.205988][ T5759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.374693][ T5759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.491511][ T5759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.675124][ T5759] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.714755][ T5759] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.768119][ T5759] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.804963][ T5759] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.458695][ T5771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 153.479090][ T5771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 153.578097][ T5777] RDS: rds_bind could not find a transport for fe88::ff03, load rds_tcp or rds_rdma? [ 153.585377][ T5771] loop1: detected capacity change from 0 to 4096 [ 153.595283][ T5771] EXT4-fs: Ignoring removed orlov option [ 153.601012][ T5771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.646735][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.784313][ T5780] loop4: detected capacity change from 0 to 256 [ 153.791722][ T5780] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value [ 154.266920][ T5789] block device autoloading is deprecated and will be removed. [ 154.365744][ T5789] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 155.155353][ T5800] loop3: detected capacity change from 0 to 128 [ 156.404476][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 156.859462][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 156.859478][ T27] audit: type=1326 audit(1740186916.037:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 156.895487][ T27] audit: type=1326 audit(1740186916.037:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 156.922937][ T27] audit: type=1326 audit(1740186916.077:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 156.951133][ T27] audit: type=1326 audit(1740186916.077:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 157.001544][ T27] audit: type=1326 audit(1740186916.077:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 157.046048][ T5824] netlink: 168 bytes leftover after parsing attributes in process `syz.2.573'. [ 157.057532][ T27] audit: type=1326 audit(1740186916.097:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 157.151214][ T27] audit: type=1326 audit(1740186916.097:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 157.180277][ T27] audit: type=1326 audit(1740186916.097:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.1.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 157.260183][ T5829] loop0: detected capacity change from 0 to 1024 [ 157.268502][ T5829] EXT4-fs: Ignoring removed nobh option [ 157.274285][ T5829] EXT4-fs: Ignoring removed bh option [ 157.289677][ T5829] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.363992][ T5829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.494643][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 157.518459][ T5837] loop3: detected capacity change from 0 to 2048 [ 157.569412][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.595521][ T5837] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.591473][ T4305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set [ 158.761451][ T4305] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 158.762232][ T27] audit: type=1326 audit(1740186917.937:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 158.797286][ T4305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.797286][ T4305] [ 158.938748][ T27] audit: type=1326 audit(1740186917.987:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5859 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 159.037632][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.133124][ T5868] loop0: detected capacity change from 0 to 1024 [ 159.133348][ T4305] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 26 with error 28 [ 159.168184][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.247072][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 159.277970][ T4305] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.277970][ T4305] [ 159.293933][ T4305] EXT4-fs (loop3): Total free blocks count 0 [ 159.302156][ T4305] EXT4-fs (loop3): Free/Dirty block details [ 159.308204][ T4305] EXT4-fs (loop3): free_blocks=0 [ 159.314334][ T4305] EXT4-fs (loop3): dirty_blocks=32 [ 159.319547][ T4305] EXT4-fs (loop3): Block reservation details [ 159.428659][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.591614][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 159.602744][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.888129][ T5863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.904138][ T5863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.916738][ T5863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.959228][ T5863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.364414][ T5879] netlink: 168 bytes leftover after parsing attributes in process `syz.4.590'. [ 160.483119][ T5882] loop1: detected capacity change from 0 to 512 [ 160.536857][ T5882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.594122][ T5882] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.825934][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 161.353445][ T5901] loop1: detected capacity change from 0 to 1024 [ 161.485281][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.611385][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 162.374040][ T5920] loop4: detected capacity change from 0 to 8192 [ 163.979809][ T5944] loop3: detected capacity change from 0 to 1024 [ 163.999223][ T5942] loop2: detected capacity change from 0 to 2048 [ 164.009794][ T5946] loop0: detected capacity change from 0 to 512 [ 164.047643][ T5944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.119377][ T5942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.121799][ T5946] EXT4-fs (loop0): orphan cleanup on readonly fs [ 164.211048][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 164.211059][ T27] audit: type=1800 audit(1740186923.387:101): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.610" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 164.262236][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.613: iget: bogus i_mode (0) [ 164.287596][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 164.349462][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.613: couldn't read orphan inode 13 (err -117) [ 164.380421][ T5946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.543934][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 164.753569][ T27] audit: type=1326 audit(1740186923.927:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 164.831046][ T27] audit: type=1326 audit(1740186923.927:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 164.843717][ T5963] device bond1 entered promiscuous mode [ 164.868260][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.878868][ T27] audit: type=1326 audit(1740186923.927:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 164.922320][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 165.035386][ T27] audit: type=1326 audit(1740186923.927:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.103902][ T27] audit: type=1326 audit(1740186923.927:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.128648][ T27] audit: type=1326 audit(1740186923.927:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.177227][ T27] audit: type=1326 audit(1740186923.927:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.236549][ T27] audit: type=1326 audit(1740186923.927:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.246828][ T5973] loop1: detected capacity change from 0 to 2048 [ 165.319663][ T27] audit: type=1326 audit(1740186923.927:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 165.352165][ T5973] loop1: p1 < > p4 [ 165.404125][ T5973] loop1: p4 size 8388608 extends beyond EOD, truncated [ 165.458455][ T5963] bond1 (unregistering): Released all slaves [ 165.782306][ T5984] loop2: detected capacity change from 0 to 1024 [ 165.820658][ T5984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.873603][ T5983] loop1: detected capacity change from 0 to 4096 [ 165.903286][ T5983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.924246][ T5990] loop3: detected capacity change from 0 to 512 [ 165.931804][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 165.938738][ T5990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.991672][ T5990] EXT4-fs (loop3): 1 truncate cleaned up [ 166.013341][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.059479][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 166.110408][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 166.449642][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 166.843455][ T6006] loop1: detected capacity change from 0 to 2048 [ 166.907690][ T6006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.271398][ T6019] loop2: detected capacity change from 0 to 2048 [ 167.354686][ T6019] loop2: p1 < > p4 [ 167.360839][ T6019] loop2: p4 size 8388608 extends beyond EOD, truncated [ 167.438028][ T6028] loop4: detected capacity change from 0 to 1024 [ 167.549069][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.740281][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 167.769198][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 167.826937][ T6034] loop2: detected capacity change from 0 to 2048 [ 167.854729][ T6034] loop2: p1 < > p4 [ 167.873460][ T6034] loop2: p4 size 8388608 extends beyond EOD, truncated [ 167.946978][ T6038] capability: warning: `syz.1.642' uses deprecated v2 capabilities in a way that may be insecure [ 168.866387][ T6062] loop2: detected capacity change from 0 to 512 [ 168.922844][ T6062] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.956309][ T6062] EXT4-fs (loop2): mount failed [ 169.799759][ T6070] loop4: detected capacity change from 0 to 2048 [ 170.117289][ T6070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.161687][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 170.161703][ T27] audit: type=1800 audit(1740186929.337:134): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.653" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 170.833407][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 170.984181][ T6106] netlink: 'syz.1.666': attribute type 32 has an invalid length. [ 171.005293][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 171.510121][ T6113] loop1: detected capacity change from 0 to 512 [ 171.634012][ T27] audit: type=1326 audit(1740186930.817:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.677720][ T6113] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.704292][ T6113] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 171.724944][ T6113] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.668: Corrupt directory, running e2fsck is recommended [ 171.752484][ T6113] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 171.761174][ T6113] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.668: corrupted in-inode xattr [ 171.773888][ T27] audit: type=1326 audit(1740186930.837:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.796297][ T27] audit: type=1326 audit(1740186930.847:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.802201][ T6113] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.668: couldn't read orphan inode 15 (err -117) [ 171.819739][ T27] audit: type=1326 audit(1740186930.847:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.853246][ T27] audit: type=1326 audit(1740186930.847:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.881777][ T27] audit: type=1326 audit(1740186930.847:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.914680][ T27] audit: type=1326 audit(1740186930.847:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 171.983920][ T27] audit: type=1326 audit(1740186930.847:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 172.006542][ T6113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.234572][ T6113] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.247098][ T6113] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 172.257382][ T6113] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.668: Corrupt directory, running e2fsck is recommended [ 172.271401][ T6113] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.668: path /123/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 172.309648][ T6113] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 64: comm syz.1.668: path /123/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 173.990543][ T6118] sched: RT throttling activated [ 174.486525][ T27] audit: type=1326 audit(1740186930.847:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 174.765505][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 175.497544][ T6135] loop1: detected capacity change from 0 to 2048 [ 175.571121][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 175.584844][ T6141] syz_tun: Device is already in use. [ 175.675774][ T6135] loop1: p1 < > p4 [ 175.725032][ T6135] loop1: p4 size 8388608 extends beyond EOD, truncated [ 175.797689][ T6145] loop4: detected capacity change from 0 to 1024 [ 175.941635][ T6145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.047125][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 176.112853][ T6154] sd 0:0:1:0: device reset [ 176.950789][ T6169] loop2: detected capacity change from 0 to 2048 [ 177.494748][ T6169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.639040][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 177.639053][ T27] audit: type=1800 audit(1740186936.817:146): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.686" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 177.810358][ T6184] loop4: detected capacity change from 0 to 2048 [ 178.006414][ T6184] loop4: p1 < > p4 [ 178.047828][ T6184] loop4: p4 size 8388608 extends beyond EOD, truncated [ 178.555032][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 179.312049][ T6199] loop4: detected capacity change from 0 to 512 [ 179.432292][ T6199] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 179.473982][ T6199] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.521050][ T6199] EXT4-fs (loop4): mount failed [ 179.881300][ T6214] loop4: detected capacity change from 0 to 128 [ 179.957792][ T27] audit: type=1804 audit(1740186939.137:147): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.701" name="/newroot/142/file0/bus" dev="loop4" ino=1048604 res=1 errno=0 [ 180.024388][ T27] audit: type=1800 audit(1740186939.157:148): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.701" name="bus" dev="loop4" ino=1048604 res=0 errno=0 [ 180.686316][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 180.816681][ T6226] loop3: detected capacity change from 0 to 2048 [ 180.840105][ T6230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.938685][ T6226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.102185][ T6230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.117597][ T27] audit: type=1800 audit(1740186940.297:149): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.705" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 181.241570][ T6230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.472181][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 181.540098][ T6230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.765449][ T6230] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.871984][ T6230] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.902180][ T6230] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.047050][ T6230] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.898355][ T6286] loop3: detected capacity change from 0 to 512 [ 182.951450][ T6286] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.007681][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.025337][ T6286] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.063376][ T6286] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.722: corrupted inode contents [ 183.083861][ T6286] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.722: mark_inode_dirty error [ 183.103272][ T6286] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.722: corrupted inode contents [ 183.128748][ T6286] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.722: mark_inode_dirty error [ 183.290969][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 183.853701][ T6304] loop3: detected capacity change from 0 to 256 [ 184.063045][ T6302] loop0: detected capacity change from 0 to 8192 [ 184.961230][ T6329] loop0: detected capacity change from 0 to 2048 [ 185.017266][ T6329] loop0: p1 < > p4 [ 185.022062][ T6329] loop0: p4 size 8388608 extends beyond EOD, truncated [ 185.673062][ T27] audit: type=1326 audit(1740186944.847:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 185.769063][ T27] audit: type=1326 audit(1740186944.937:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 185.793857][ T27] audit: type=1326 audit(1740186944.937:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 185.816035][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.951967][ T27] audit: type=1326 audit(1740186944.937:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.023955][ T27] audit: type=1326 audit(1740186944.937:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.046045][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.138314][ T6342] loop2: detected capacity change from 0 to 8192 [ 186.176615][ T27] audit: type=1326 audit(1740186944.937:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.198827][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.238440][ T6346] netlink: 92 bytes leftover after parsing attributes in process `syz.1.741'. [ 186.256127][ T27] audit: type=1326 audit(1740186944.937:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.278142][ T6344] loop3: detected capacity change from 0 to 2048 [ 186.378669][ T27] audit: type=1326 audit(1740186944.937:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.481903][ T27] audit: type=1326 audit(1740186944.937:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.504441][ T27] audit: type=1326 audit(1740186944.937:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 186.572285][ T6344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.967208][ T6364] loop1: detected capacity change from 0 to 128 [ 187.479358][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 188.260324][ T6384] loop1: detected capacity change from 0 to 8192 [ 189.035125][ T6399] loop2: detected capacity change from 0 to 1024 [ 189.068213][ T6401] loop4: detected capacity change from 0 to 128 [ 189.146287][ T6399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.197892][ T6408] syz.4.759: attempt to access beyond end of device [ 189.197892][ T6408] loop4: rw=2049, sector=145, nr_sectors = 112 limit=128 [ 189.351652][ T6401] syz.4.759: attempt to access beyond end of device [ 189.351652][ T6401] loop4: rw=524288, sector=145, nr_sectors = 112 limit=128 [ 189.367970][ T6401] syz.4.759: attempt to access beyond end of device [ 189.367970][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.382748][ T6401] syz.4.759: attempt to access beyond end of device [ 189.382748][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.407890][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 189.411427][ T6401] syz.4.759: attempt to access beyond end of device [ 189.411427][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.428166][ T6401] syz.4.759: attempt to access beyond end of device [ 189.428166][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.446241][ T6401] syz.4.759: attempt to access beyond end of device [ 189.446241][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.475386][ T6401] syz.4.759: attempt to access beyond end of device [ 189.475386][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.495764][ T6401] syz.4.759: attempt to access beyond end of device [ 189.495764][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 189.515849][ T6401] syz.4.759: attempt to access beyond end of device [ 189.515849][ T6401] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 191.848544][ T27] kauditd_printk_skb: 86 callbacks suppressed [ 191.848560][ T27] audit: type=1326 audit(1740186951.027:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.1.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x0 [ 192.984577][ T27] audit: type=1326 audit(1740186952.167:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.056491][ T27] audit: type=1326 audit(1740186952.187:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.120169][ T27] audit: type=1326 audit(1740186952.197:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.152012][ T6477] xt_hashlimit: size too large, truncated to 1048576 [ 193.198213][ T27] audit: type=1326 audit(1740186952.207:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.286948][ T27] audit: type=1326 audit(1740186952.237:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.349775][ T27] audit: type=1326 audit(1740186952.237:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.417228][ T27] audit: type=1326 audit(1740186952.237:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.481320][ T27] audit: type=1326 audit(1740186952.237:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 193.559917][ T27] audit: type=1326 audit(1740186952.237:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 194.230020][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236532][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.304054][ T4251] Bluetooth: hci4: command 0x0406 tx timeout [ 196.310170][ T4251] Bluetooth: hci2: command 0x0406 tx timeout [ 196.316289][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 196.316308][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 196.322299][ T4254] Bluetooth: hci3: command 0x0406 tx timeout [ 197.301657][ T6514] bridge0: port 3(syz_tun) entered disabled state [ 197.387870][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.395365][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.981240][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.092456][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.311149][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 199.311166][ T27] audit: type=1326 audit(1740186958.487:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.1.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x0 [ 199.819915][ T6514] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.828506][ T6514] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.836941][ T6514] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.845411][ T6514] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.827360][ T6573] loop4: detected capacity change from 0 to 128 [ 201.133182][ T6582] loop4: detected capacity change from 0 to 164 [ 201.186331][ T6582] bio_check_eod: 2292 callbacks suppressed [ 201.186351][ T6582] syz.4.829: attempt to access beyond end of device [ 201.186351][ T6582] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 201.291325][ T6582] syz.4.829: attempt to access beyond end of device [ 201.291325][ T6582] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 201.730367][ T27] audit: type=1326 audit(1740186960.907:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 201.751653][ T6604] loop0: detected capacity change from 0 to 128 [ 201.802726][ T6600] loop3: detected capacity change from 0 to 512 [ 201.828703][ T27] audit: type=1326 audit(1740186960.947:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 201.851571][ T27] audit: type=1326 audit(1740186960.947:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 201.880510][ T27] audit: type=1326 audit(1740186960.947:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 201.881793][ T6600] EXT4-fs: inline encryption not supported [ 201.914290][ T27] audit: type=1326 audit(1740186960.947:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 201.997551][ T27] audit: type=1326 audit(1740186960.947:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 202.174544][ T6611] netlink: 60 bytes leftover after parsing attributes in process `syz.0.842'. [ 202.196473][ T27] audit: type=1326 audit(1740186960.947:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 202.219245][ T27] audit: type=1326 audit(1740186960.957:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 202.225465][ T6600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.241776][ T27] audit: type=1326 audit(1740186960.957:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 202.274001][ T6600] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.427238][ T6600] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.837: corrupted inode contents [ 202.530064][ T6600] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.837: mark_inode_dirty error [ 202.604649][ T6600] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.837: corrupted inode contents [ 202.638498][ T6621] netlink: 100 bytes leftover after parsing attributes in process `syz.1.845'. [ 202.664290][ T6618] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.837: corrupted inode contents [ 202.750128][ T6618] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.837: mark_inode_dirty error [ 202.787710][ T6618] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.837: corrupted inode contents [ 202.806367][ T6618] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.837: mark_inode_dirty error [ 202.821572][ T6618] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.837: corrupted inode contents [ 202.854882][ T6618] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.837: mark_inode_dirty error [ 203.096504][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 203.150045][ T6641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.854'. [ 203.881535][ T6655] netlink: 100 bytes leftover after parsing attributes in process `syz.0.859'. [ 204.017067][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 204.156302][ T6657] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.368179][ T6657] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.586341][ T6657] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.643077][ T6665] netlink: 100 bytes leftover after parsing attributes in process `syz.0.862'. [ 204.778487][ T6657] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.074082][ T6657] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.208720][ T6657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.312996][ T6657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.388330][ T6657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.682174][ T6674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.866'. [ 206.113251][ T6683] netlink: 100 bytes leftover after parsing attributes in process `syz.2.871'. [ 206.326914][ T6690] netlink: 100 bytes leftover after parsing attributes in process `syz.0.873'. [ 206.574308][ T6699] tipc: Enabling of bearer rejected, failed to enable media [ 206.592965][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'. [ 207.875128][ T6720] __nla_validate_parse: 1 callbacks suppressed [ 207.875150][ T6720] netlink: 100 bytes leftover after parsing attributes in process `syz.1.885'. [ 208.689811][ T6730] loop0: detected capacity change from 0 to 164 [ 208.864584][ T6730] rock: directory entry would overflow storage [ 208.885223][ T6730] rock: sig=0x4f50, size=4, remaining=3 [ 208.896059][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.891'. [ 208.934448][ T6730] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 208.997624][ T6739] loop1: detected capacity change from 0 to 128 [ 209.180088][ T6743] loop2: detected capacity change from 0 to 2048 [ 209.323575][ T6743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.345584][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 209.345601][ T27] audit: type=1800 audit(1740186968.527:336): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 209.484963][ T6752] netlink: 100 bytes leftover after parsing attributes in process `syz.4.896'. [ 209.506846][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 209.859574][ T6756] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 209.898233][ T6758] device ip6gretap0 entered promiscuous mode [ 209.909593][ T6761] loop0: detected capacity change from 0 to 128 [ 210.360874][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.903'. [ 210.761478][ T6781] dccp_close: ABORT with 180 bytes unread [ 210.776017][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 210.800981][ T6777] loop2: detected capacity change from 0 to 4096 [ 210.813411][ T6782] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 210.852236][ T6777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.875875][ T6777] EXT4-fs (loop2): unmounting filesystem. [ 211.117837][ T6788] loop2: detected capacity change from 0 to 512 [ 211.213011][ T6788] ext3: Unknown parameter 'seclabel' [ 211.650042][ T6796] loop0: detected capacity change from 0 to 128 [ 212.414404][ T6805] bridge0: port 4(gretap0) entered blocking state [ 212.449112][ T6805] bridge0: port 4(gretap0) entered disabled state [ 212.465331][ T6805] device gretap0 entered promiscuous mode [ 212.554163][ T6805] device gretap0 left promiscuous mode [ 212.564655][ T6805] bridge0: port 4(gretap0) entered disabled state [ 212.579534][ T6808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.918'. [ 212.773523][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 213.393349][ T6822] loop0: detected capacity change from 0 to 128 [ 213.541986][ T6826] netlink: 180 bytes leftover after parsing attributes in process `syz.2.923'. [ 214.217525][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.930'. [ 214.883088][ T6850] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.921134][ T6852] loop4: detected capacity change from 0 to 128 [ 216.001374][ T6864] loop4: detected capacity change from 0 to 2048 [ 216.073556][ T6866] loop3: detected capacity change from 0 to 512 [ 216.075207][ T6864] loop4: p1 < > p4 [ 216.087981][ T6864] loop4: p4 size 8388608 extends beyond EOD, truncated [ 216.132061][ T6866] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 216.173430][ T6866] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.197409][ T6866] EXT4-fs (loop3): mount failed [ 216.428765][ T6879] loop4: detected capacity change from 0 to 2048 [ 216.495395][ T6879] loop4: p1 < > p4 [ 216.500382][ T6879] loop4: p4 size 8388608 extends beyond EOD, truncated [ 216.829401][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 218.186427][ T6907] loop2: detected capacity change from 0 to 2048 [ 218.338901][ T6907] loop2: p1 < > p4 [ 218.344131][ T6907] loop2: p4 size 8388608 extends beyond EOD, truncated [ 218.468707][ T6912] loop1: detected capacity change from 0 to 2048 [ 218.581522][ T6912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.671019][ T27] audit: type=1800 audit(1740186977.847:337): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.957" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 218.840417][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 218.841465][ T6922] loop2: detected capacity change from 0 to 2048 [ 218.884463][ T6922] loop2: p1 < > p4 [ 218.900873][ T6922] loop2: p4 size 8388608 extends beyond EOD, truncated [ 218.983440][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 219.286673][ T6931] loop2: detected capacity change from 0 to 128 [ 219.334577][ T6932] loop0: detected capacity change from 0 to 512 [ 219.389756][ T6932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 219.389826][ T6932] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.683365][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 219.733439][ T6939] netlink: 'syz.2.966': attribute type 13 has an invalid length. [ 219.816111][ T6944] loop0: detected capacity change from 0 to 2048 [ 219.864865][ T6944] loop0: p1 < > p4 [ 219.870198][ T6944] loop0: p4 size 8388608 extends beyond EOD, truncated [ 220.188183][ T6950] loop0: detected capacity change from 0 to 2048 [ 220.270769][ T6950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.308429][ T27] audit: type=1800 audit(1740186979.487:338): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.970" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 220.389685][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 220.600382][ T6939] bridge0: port 3(syz_tun) entered disabled state [ 220.695973][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.703522][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.830607][ T6961] loop0: detected capacity change from 0 to 2048 [ 220.894753][ T6961] loop0: p1 < > p4 [ 220.909168][ T6961] loop0: p4 size 8388608 extends beyond EOD, truncated [ 221.419461][ T6967] loop0: detected capacity change from 0 to 128 [ 221.661719][ T6967] syz.0.975: attempt to access beyond end of device [ 221.661719][ T6967] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 221.745426][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.767488][ T6967] syz.0.975: attempt to access beyond end of device [ 221.767488][ T6967] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 221.790516][ T6967] syz.0.975: attempt to access beyond end of device [ 221.790516][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.804275][ T6967] syz.0.975: attempt to access beyond end of device [ 221.804275][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.819241][ T6967] syz.0.975: attempt to access beyond end of device [ 221.819241][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.833223][ T6967] syz.0.975: attempt to access beyond end of device [ 221.833223][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.862847][ T6967] syz.0.975: attempt to access beyond end of device [ 221.862847][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.892502][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.920525][ T6967] syz.0.975: attempt to access beyond end of device [ 221.920525][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 221.982124][ T6967] syz.0.975: attempt to access beyond end of device [ 221.982124][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.057497][ T6967] syz.0.975: attempt to access beyond end of device [ 222.057497][ T6967] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 222.772290][ T6974] loop0: detected capacity change from 0 to 128 [ 223.091042][ T6976] loop0: detected capacity change from 0 to 128 [ 223.210542][ T6939] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.223972][ T6939] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.232911][ T6939] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.282520][ T6939] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.448473][ T6981] loop1: detected capacity change from 0 to 2048 [ 223.464707][ T6982] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 223.514678][ T6981] loop1: p1 < > p4 [ 223.522016][ T6981] loop1: p4 size 8388608 extends beyond EOD, truncated [ 223.980436][ T6990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.020053][ T6987] loop1: detected capacity change from 0 to 2048 [ 224.034831][ T6990] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 224.135727][ T6987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.175664][ T27] audit: type=1800 audit(1740186983.357:339): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.981" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 224.415336][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 224.538235][ T7003] loop4: detected capacity change from 0 to 128 [ 224.744386][ T27] audit: type=1326 audit(1740186983.867:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.333810][ T27] audit: type=1326 audit(1740186983.867:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5d4138b9d7 code=0x7ffc0000 [ 225.513988][ T27] audit: type=1326 audit(1740186983.867:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.606205][ T27] audit: type=1326 audit(1740186983.877:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.635760][ T27] audit: type=1326 audit(1740186983.877:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.665175][ T27] audit: type=1326 audit(1740186983.877:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.689455][ T27] audit: type=1326 audit(1740186983.877:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.711848][ T27] audit: type=1326 audit(1740186983.877:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 225.738690][ T27] audit: type=1326 audit(1740186983.877:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 226.047142][ T7030] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 226.094055][ T7032] loop2: detected capacity change from 0 to 128 [ 228.894431][ T7067] loop2: detected capacity change from 0 to 8192 [ 229.835019][ T7081] loop1: detected capacity change from 0 to 512 [ 229.957797][ T7081] __quota_error: 33 callbacks suppressed [ 229.957812][ T7081] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 230.023976][ T7081] EXT4-fs warning (device loop1): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.113705][ T7081] EXT4-fs (loop1): mount failed [ 230.468349][ T7095] loop0: detected capacity change from 0 to 2048 [ 230.553835][ T7095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 230.780837][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 230.935775][ T27] audit: type=1326 audit(1740186990.117:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 230.992766][ T27] audit: type=1326 audit(1740186990.117:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.031596][ T27] audit: type=1326 audit(1740186990.147:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5d4138b9d7 code=0x7ffc0000 [ 231.164002][ T27] audit: type=1326 audit(1740186990.147:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.220718][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 231.239712][ T7115] loop0: detected capacity change from 0 to 512 [ 231.255880][ T27] audit: type=1326 audit(1740186990.147:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.278875][ T27] audit: type=1326 audit(1740186990.147:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.305110][ T27] audit: type=1326 audit(1740186990.147:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.305865][ T7113] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.327533][ T27] audit: type=1326 audit(1740186990.147:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.327578][ T27] audit: type=1326 audit(1740186990.147:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.1.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5d4138d169 code=0x7ffc0000 [ 231.994654][ T7115] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.046227][ T7113] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.072686][ T7115] EXT4-fs (loop0): mount failed [ 232.179825][ T7113] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.246987][ T7113] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.287938][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'. [ 232.467594][ T7113] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.620226][ T7113] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.636437][ T7113] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.661268][ T7113] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.329378][ T7175] loop0: detected capacity change from 0 to 1024 [ 235.349666][ T7175] EXT4-fs: Ignoring removed nobh option [ 235.362533][ T7175] EXT4-fs: Ignoring removed bh option [ 235.369743][ T7175] EXT4-fs: Ignoring removed bh option [ 235.383277][ T7175] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.401443][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 235.419037][ T7177] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.458525][ T7175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.492155][ T7177] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.540590][ T7177] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.572199][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 235.739951][ T7177] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.781278][ T7187] loop0: detected capacity change from 0 to 512 [ 235.802378][ T7187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 235.812213][ T7187] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.902656][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 236.122106][ T7196] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 237.290397][ T7212] mmap: syz.3.1058 (7212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.915470][ T7238] loop3: detected capacity change from 0 to 512 [ 238.961107][ T7238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.020288][ T7238] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.335375][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 239.915407][ T7177] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.976437][ T7177] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.998036][ T7177] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.014229][ T7177] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.370181][ T7256] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 242.670008][ T7291] loop0: detected capacity change from 0 to 128 [ 242.727994][ T7294] tipc: Enabling of bearer rejected, failed to enable media [ 242.946393][ T7300] loop0: detected capacity change from 0 to 512 [ 242.968453][ T7300] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.987380][ T7300] EXT4-fs (loop0): mount failed [ 243.043296][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 243.043312][ T27] audit: type=1326 audit(1740187002.217:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.087233][ T27] audit: type=1326 audit(1740187002.217:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.115502][ T27] audit: type=1326 audit(1740187002.227:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.143847][ T27] audit: type=1326 audit(1740187002.227:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.171760][ T27] audit: type=1326 audit(1740187002.227:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.197261][ T27] audit: type=1326 audit(1740187002.227:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.227232][ T27] audit: type=1326 audit(1740187002.227:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.262333][ T27] audit: type=1326 audit(1740187002.227:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.290440][ T27] audit: type=1326 audit(1740187002.227:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.317941][ T27] audit: type=1326 audit(1740187002.227:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7299 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 243.371184][ T7311] program syz.3.1087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.959204][ T7327] loop0: detected capacity change from 0 to 128 [ 244.074352][ T7332] loop0: detected capacity change from 0 to 128 [ 244.097498][ T7332] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 244.143779][ T7334] bridge0: port 5(gretap0) entered blocking state [ 244.150517][ T7334] bridge0: port 5(gretap0) entered disabled state [ 244.165529][ T7334] bridge0: port 5(gretap0) entered blocking state [ 244.172151][ T7334] bridge0: port 5(gretap0) entered forwarding state [ 244.188143][ T7334] bridge0: port 5(gretap0) entered disabled state [ 245.059021][ T7359] loop4: detected capacity change from 0 to 128 [ 246.288347][ T7386] loop3: detected capacity change from 0 to 2048 [ 246.474253][ T7386] loop3: p1 < > p4 [ 246.483935][ T7386] loop3: p4 size 8388608 extends beyond EOD, truncated [ 248.364338][ T7419] loop2: detected capacity change from 0 to 2048 [ 248.455582][ T7419] loop2: p1 < > p4 [ 248.464350][ T7419] loop2: p4 size 8388608 extends beyond EOD, truncated [ 249.074768][ T7437] loop0: detected capacity change from 0 to 128 [ 249.092557][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 249.092570][ T27] audit: type=1800 audit(1740187008.267:437): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1136" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 249.377332][ T7440] loop0: detected capacity change from 0 to 128 [ 249.698654][ T7446] bridge0: port 4(gretap0) entered blocking state [ 249.714087][ T7446] bridge0: port 4(gretap0) entered disabled state [ 249.726789][ T7446] device gretap0 entered promiscuous mode [ 249.770062][ T7449] device gretap0 left promiscuous mode [ 249.795576][ T7448] program syz.3.1142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.809961][ T7449] bridge0: port 4(gretap0) entered disabled state [ 250.064899][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 250.189044][ T7461] loop0: detected capacity change from 0 to 2048 [ 250.244683][ T7461] loop0: p1 < > p4 [ 250.251894][ T7461] loop0: p4 size 8388608 extends beyond EOD, truncated [ 250.968071][ T7475] loop0: detected capacity change from 0 to 4096 [ 250.999947][ T7475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.088367][ T7475] EXT4-fs (loop0): unmounting filesystem. [ 251.128152][ T7480] loop4: detected capacity change from 0 to 128 [ 251.390324][ T7488] bridge0: port 4(gretap0) entered blocking state [ 251.397298][ T7488] bridge0: port 4(gretap0) entered disabled state [ 251.405050][ T7488] device gretap0 entered promiscuous mode [ 251.427877][ T7488] device gretap0 left promiscuous mode [ 251.443954][ T7488] bridge0: port 4(gretap0) entered disabled state [ 251.513630][ T7489] loop0: detected capacity change from 0 to 512 [ 251.548852][ T7489] ext3: Unknown parameter 'seclabel' [ 251.639431][ T27] audit: type=1326 audit(1740187010.817:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x0 [ 252.718394][ T7500] loop3: detected capacity change from 0 to 2048 [ 252.775108][ T7500] loop3: p1 < > p4 [ 252.782072][ T7500] loop3: p4 size 8388608 extends beyond EOD, truncated [ 253.178168][ T27] audit: type=1326 audit(1740187012.357:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x0 [ 254.260707][ T7547] loop0: detected capacity change from 0 to 1024 [ 254.339143][ T7547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c018, mo2=0002] [ 254.365309][ T7547] System zones: 0-1, 3-12 [ 254.382545][ T7547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.498125][ T7547] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.0.1176: corrupted in-inode xattr [ 254.769880][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 254.890504][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 254.914745][ T7558] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.931758][ T7556] loop3: detected capacity change from 0 to 512 [ 255.007988][ T7556] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 255.023481][ T7558] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.070511][ T7556] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 255.121034][ T7556] EXT4-fs (loop3): mount failed [ 255.153584][ T7558] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.223258][ T7558] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.411539][ T7558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.448902][ T7558] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.480286][ T7558] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.516613][ T7558] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.527639][ T27] audit: type=1326 audit(1740187014.707:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.4.1184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4c958d169 code=0x0 [ 255.665928][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672852][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793257][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'. [ 255.895564][ T7584] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1190'. [ 255.936653][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 256.027276][ T7588] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 256.059566][ T7591] loop2: detected capacity change from 0 to 512 [ 256.107471][ T7591] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 256.138547][ T7591] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.167913][ T7591] EXT4-fs (loop2): mount failed [ 256.623072][ T7602] syz.2.1195[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.623148][ T7602] syz.2.1195[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.001675][ T7609] program syz.3.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.225236][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 257.255513][ T7617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1201'. [ 257.774796][ T27] audit: type=1326 audit(1740187016.957:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.3.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x0 [ 257.806122][ T7628] loop0: detected capacity change from 0 to 2048 [ 257.874559][ T7628] loop0: p1 < > p4 [ 257.879985][ T7628] loop0: p4 size 8388608 extends beyond EOD, truncated [ 258.361838][ T7635] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1207'. [ 258.447165][ T7639] loop4: detected capacity change from 0 to 2048 [ 258.499148][ T7639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.522000][ T7645] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 258.576054][ T7644] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 258.691733][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 258.913399][ T7651] program syz.4.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.447373][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1213'. [ 259.730440][ T7664] capability: warning: `syz.1.1216' uses 32-bit capabilities (legacy support in use) [ 259.903227][ T7669] loop4: detected capacity change from 0 to 2048 [ 260.151728][ T7669] loop4: p1 < > p4 [ 260.171839][ T7669] loop4: p4 size 8388608 extends beyond EOD, truncated [ 260.724832][ T7687] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1223'. [ 260.903624][ T7689] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 261.644864][ T7702] loop2: detected capacity change from 0 to 512 [ 261.704046][ T7702] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 261.721778][ T7702] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.742779][ T7702] EXT4-fs (loop2): mount failed [ 261.993012][ T7712] loop2: detected capacity change from 0 to 256 [ 262.034825][ T7712] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.105150][ T7712] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.625402][ T7719] loop2: detected capacity change from 0 to 128 [ 263.089520][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 263.091555][ T7730] loop3: detected capacity change from 0 to 128 [ 263.614589][ T7740] loop2: detected capacity change from 0 to 2048 [ 263.675240][ T7740] loop2: p1 < > p4 [ 263.681774][ T7740] loop2: p4 size 8388608 extends beyond EOD, truncated [ 263.977253][ T7750] loop3: detected capacity change from 0 to 128 [ 264.221091][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 264.251104][ T7759] tipc: Enabling of bearer rejected, failed to enable media [ 264.386575][ T7762] tipc: Started in network mode [ 264.432225][ T27] audit: type=1326 audit(1740187023.607:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.434621][ T7762] tipc: Node identity 326b00000000000006, cluster identity 4711 [ 264.478257][ T7764] loop2: detected capacity change from 0 to 512 [ 264.491583][ T27] audit: type=1326 audit(1740187023.637:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.521583][ T7764] EXT4-fs: Ignoring removed oldalloc option [ 264.530500][ T27] audit: type=1326 audit(1740187023.637:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.581690][ T7764] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1254: Parent and EA inode have the same ino 15 [ 264.626743][ T7764] EXT4-fs (loop2): Remounting filesystem read-only [ 264.673136][ T27] audit: type=1326 audit(1740187023.637:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.728681][ T7764] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1254: Parent and EA inode have the same ino 15 [ 264.757922][ T7764] EXT4-fs (loop2): Remounting filesystem read-only [ 264.767161][ T27] audit: type=1326 audit(1740187023.637:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.799115][ T7764] EXT4-fs (loop2): 1 orphan inode deleted [ 264.807691][ T7764] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.830663][ T27] audit: type=1326 audit(1740187023.637:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.909535][ T27] audit: type=1326 audit(1740187023.637:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 264.938792][ T7775] loop1: detected capacity change from 0 to 512 [ 264.947402][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 264.959829][ T27] audit: type=1326 audit(1740187023.637:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 265.042474][ T27] audit: type=1326 audit(1740187023.647:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ff8d169 code=0x7ffc0000 [ 265.073775][ T7775] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 265.092743][ T7775] System zones: 0-2, 18-18, 34-35 [ 265.108309][ T7775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.117786][ T7775] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.188581][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 265.260724][ T7784] loop0: detected capacity change from 0 to 2048 [ 265.340365][ T7784] loop0: p1 < > p4 [ 265.349155][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1263'. [ 265.350249][ T7784] loop0: p4 size 8388608 extends beyond EOD, truncated [ 265.579955][ T7795] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1265'. [ 265.615792][ T7797] loop0: detected capacity change from 0 to 512 [ 265.662016][ T7797] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.684990][ T7797] EXT4-fs (loop0): mount failed [ 265.765765][ T7802] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 266.106726][ T7816] program syz.4.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.302542][ T7822] loop2: detected capacity change from 0 to 128 [ 266.603470][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 266.653675][ T7832] loop2: detected capacity change from 0 to 512 [ 266.695689][ T7830] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.728139][ T7832] __quota_error: 23 callbacks suppressed [ 266.728159][ T7832] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 266.763927][ T7832] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.793357][ T7830] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.795002][ T7832] EXT4-fs (loop2): mount failed [ 266.913050][ T7830] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.968041][ T7843] tipc: Enabling of bearer rejected, failed to enable media [ 267.042175][ T7830] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.195228][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 267.205061][ T7830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.224600][ T7830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.240899][ T7830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.262099][ T7853] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1287'. [ 267.272494][ T7853] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.302433][ T7830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.605661][ T7861] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1290'. [ 267.729768][ T7862] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 268.569999][ T7877] program syz.2.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.611382][ T7878] sd 0:0:1:0: device reset [ 269.132267][ T7886] loop1: detected capacity change from 0 to 512 [ 269.147308][ T7886] EXT4-fs: inline encryption not supported [ 269.157522][ T7886] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 269.241947][ T7886] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.1299: corrupted in-inode xattr [ 269.261433][ T7886] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1299: couldn't read orphan inode 15 (err -117) [ 269.280485][ T7886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.438811][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 269.608416][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 269.849043][ T27] audit: type=1326 audit(1740187029.027:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 269.934563][ T27] audit: type=1326 audit(1740187029.027:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.011938][ T27] audit: type=1326 audit(1740187029.047:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.121707][ T27] audit: type=1326 audit(1740187029.047:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.185582][ T7903] loop0: detected capacity change from 0 to 512 [ 270.208107][ T27] audit: type=1326 audit(1740187029.047:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.277532][ T7903] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 270.297919][ T7903] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 270.343570][ T27] audit: type=1326 audit(1740187029.057:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.369272][ T27] audit: type=1326 audit(1740187029.057:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.381846][ T7903] EXT4-fs (loop0): mount failed [ 270.401145][ T27] audit: type=1326 audit(1740187029.057:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2f58d169 code=0x7ffc0000 [ 270.434369][ T7910] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1306'. [ 270.601656][ T7910] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 270.791151][ T7921] program syz.4.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.102010][ T7930] loop3: detected capacity change from 0 to 2048 [ 271.157679][ T7932] loop0: detected capacity change from 0 to 128 [ 271.167536][ T7930] loop3: p1 < > p4 [ 271.174183][ T7930] loop3: p4 size 8388608 extends beyond EOD, truncated [ 271.492632][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 271.511610][ T7941] loop1: detected capacity change from 0 to 128 [ 271.788920][ T7948] loop1: detected capacity change from 0 to 512 [ 271.969116][ T7948] EXT4-fs (loop1): orphan cleanup on readonly fs [ 271.988889][ T7948] EXT4-fs warning (device loop1): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 272.021178][ T7948] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 272.081176][ T7948] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 272.139699][ T7948] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1321: couldn't read orphan inode 13 (err -117) [ 272.161497][ T7948] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.250323][ T7958] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1325'. [ 272.312978][ T7948] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 272.352376][ T7948] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2 [ 272.446458][ T7958] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 272.485879][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 272.641293][ T7965] loop1: detected capacity change from 0 to 2048 [ 272.724562][ T7965] loop1: p1 < > p4 [ 272.732053][ T7965] loop1: p4 size 8388608 extends beyond EOD, truncated [ 273.490602][ T7975] loop1: detected capacity change from 0 to 1024 [ 273.553672][ T7975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 273.581479][ T7975] EXT4-fs (loop1): shut down requested (0) [ 273.763062][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 274.683179][ T7993] loop2: detected capacity change from 0 to 512 [ 274.722195][ T7993] __quota_error: 15 callbacks suppressed [ 274.722216][ T7993] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 274.740296][ T7993] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 274.756345][ T7993] EXT4-fs (loop2): mount failed [ 275.101346][ T8000] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1338'. [ 275.161568][ T8006] loop1: detected capacity change from 0 to 512 [ 275.174172][ T8005] loop0: detected capacity change from 0 to 1024 [ 275.194852][ T8005] EXT4-fs: Ignoring removed nobh option [ 275.201179][ T8005] EXT4-fs: Ignoring removed bh option [ 275.207886][ T8005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.225194][ T8006] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 275.238832][ T8006] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 275.250347][ T8006] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1340: Failed to acquire dquot type 1 [ 275.265985][ T8005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.276433][ T8006] EXT4-fs (loop1): 1 truncate cleaned up [ 275.282131][ T8006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 275.307073][ T8016] loop3: detected capacity change from 0 to 128 [ 275.337639][ T8006] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.412353][ T8006] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 275.449707][ T8006] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 275.473866][ T8006] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1340: Failed to acquire dquot type 1 [ 275.640111][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 275.785105][ T8028] loop3: detected capacity change from 0 to 512 [ 275.834607][ T8028] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 275.846464][ T8028] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 275.862671][ T8028] EXT4-fs (loop3): mount failed [ 275.903664][ T8035] loop1: detected capacity change from 0 to 2048 [ 275.964717][ T8035] loop1: p1 < > p4 [ 275.971038][ T8035] loop1: p4 size 8388608 extends beyond EOD, truncated [ 276.055780][ T8037] loop3: detected capacity change from 0 to 1024 [ 276.067387][ T8037] EXT4-fs: Ignoring removed orlov option [ 276.089282][ T8037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.130686][ T27] audit: type=1804 audit(1740187035.307:496): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1350" name="/newroot/277/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 277.088859][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 277.532920][ T8067] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1361'. [ 277.804571][ T8074] loop3: detected capacity change from 0 to 2048 [ 277.864775][ T8074] loop3: p1 < > p4 [ 277.869750][ T8074] loop3: p4 size 8388608 extends beyond EOD, truncated [ 279.449039][ T8090] loop4: detected capacity change from 0 to 128 [ 279.992784][ T8104] loop3: detected capacity change from 0 to 2048 [ 280.131965][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 280.148707][ T8106] loop4: detected capacity change from 0 to 2048 [ 280.211814][ T27] audit: type=1326 audit(1740187039.387:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.274889][ T8106] loop4: p1 < > p4 [ 280.279859][ T8106] loop4: p4 size 8388608 extends beyond EOD, truncated [ 280.304480][ T8012] ------------[ cut here ]------------ [ 280.310474][ T8012] kernel BUG at fs/buffer.c:2666! [ 280.326583][ T27] audit: type=1326 audit(1740187039.417:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.326916][ T8012] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 280.354942][ T8012] CPU: 0 PID: 8012 Comm: kmmpd-loop0 Not tainted 6.1.129-syzkaller #0 [ 280.363120][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.373196][ T8012] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 280.378694][ T8012] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 11 40 e0 ff e9 b1 fe ff ff e8 d7 e7 88 ff 0f 0b e8 d0 e7 88 ff <0f> 0b e8 c9 e7 88 ff 0f 0b e8 c2 e7 88 ff 0f 0b e8 bb e7 88 ff 0f [ 280.398336][ T8012] RSP: 0000:ffffc9000c5d7c40 EFLAGS: 00010293 [ 280.404422][ T8012] RAX: ffffffff8201af00 RBX: 0000000000000000 RCX: ffff8880583dd940 [ 280.412407][ T8012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.420400][ T8012] RBP: ffffc9000c5d7d50 R08: ffffffff8201aadd R09: ffffed100abac140 [ 280.428378][ T8012] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100abac13f [ 280.436350][ T8012] R13: ffff888055d609f8 R14: 0000000000000000 R15: 0000000000003801 [ 280.444333][ T8012] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 280.453276][ T8012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.459860][ T8012] CR2: 00007f5d42123f98 CR3: 000000002895c000 CR4: 00000000003506f0 [ 280.467839][ T8012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.475824][ T8012] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.483794][ T8012] Call Trace: [ 280.487069][ T8012] [ 280.490018][ T8012] ? __die_body+0x5e/0xa0 [ 280.494361][ T8012] ? die+0x83/0xb0 [ 280.498093][ T8012] ? do_trap+0x11e/0x350 [ 280.502342][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.507119][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.511889][ T8012] ? do_error_trap+0x13d/0x1e0 [ 280.516654][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.521426][ T8012] ? do_int3+0x30/0x30 [ 280.525497][ T8012] ? report_bug+0x3e0/0x500 [ 280.530011][ T8012] ? rcu_is_watching+0x11/0xb0 [ 280.534778][ T8012] ? handle_invalid_op+0x2c/0x40 [ 280.539719][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.544484][ T8012] ? exc_invalid_op+0x2f/0x40 [ 280.549160][ T8012] ? asm_exc_invalid_op+0x16/0x20 [ 280.554189][ T8012] ? submit_bh_wbc+0x9d/0x4e0 [ 280.558874][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.563640][ T8012] ? submit_bh_wbc+0x4c0/0x4e0 [ 280.568410][ T8012] write_mmp_block_thawed+0x3b6/0x5a0 [ 280.573788][ T8012] ? read_mmp_block+0x7e0/0x7e0 [ 280.578655][ T8012] ? update_process_times+0x1b0/0x1b0 [ 280.584041][ T8012] ? kmmpd+0x40c/0xa70 [ 280.588122][ T8012] write_mmp_block+0x13f/0x390 [ 280.592901][ T8012] kmmpd+0x40c/0xa70 [ 280.596813][ T8012] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 280.602367][ T8012] ? __kthread_parkme+0x168/0x1c0 [ 280.607438][ T8012] kthread+0x28d/0x320 [ 280.611510][ T8012] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 280.617058][ T8012] ? kthread_blkcg+0xd0/0xd0 [ 280.621675][ T8012] ret_from_fork+0x1f/0x30 [ 280.626115][ T8012] [ 280.629135][ T8012] Modules linked in: [ 280.650215][ T27] audit: type=1326 audit(1740187039.427:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.676544][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 280.739092][ T27] audit: type=1326 audit(1740187039.427:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.795199][ T27] audit: type=1326 audit(1740187039.427:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.840667][ T27] audit: type=1326 audit(1740187039.427:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.887494][ T27] audit: type=1326 audit(1740187039.427:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.933930][ T27] audit: type=1326 audit(1740187039.427:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 280.979439][ T27] audit: type=1326 audit(1740187039.427:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0a98d169 code=0x7ffc0000 [ 281.194163][ T8012] ---[ end trace 0000000000000000 ]--- [ 281.205200][ T8012] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 281.217200][ T8012] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 11 40 e0 ff e9 b1 fe ff ff e8 d7 e7 88 ff 0f 0b e8 d0 e7 88 ff <0f> 0b e8 c9 e7 88 ff 0f 0b e8 c2 e7 88 ff 0f 0b e8 bb e7 88 ff 0f [ 281.257745][ T8012] RSP: 0000:ffffc9000c5d7c40 EFLAGS: 00010293 [ 281.276735][ T8012] RAX: ffffffff8201af00 RBX: 0000000000000000 RCX: ffff8880583dd940 [ 281.295944][ T8012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.315359][ T8012] RBP: ffffc9000c5d7d50 R08: ffffffff8201aadd R09: ffffed100abac140 [ 281.334334][ T8012] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100abac13f [ 281.353436][ T8012] R13: ffff888055d609f8 R14: 0000000000000000 R15: 0000000000003801 [ 281.370370][ T8012] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 281.390123][ T8012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.403773][ T8012] CR2: 00007fa4c97762d8 CR3: 00000000738b8000 CR4: 00000000003506f0 [ 281.420547][ T8012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.436372][ T8012] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.453300][ T8012] Kernel panic - not syncing: Fatal exception [ 281.459696][ T8012] Kernel Offset: disabled [ 281.464030][ T8012] Rebooting in 86400 seconds..