last executing test programs: 6m20.468086154s ago: executing program 32 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x24}}, 0xc00) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x11, 0xffffffffffffffff, 0xffffe000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000086) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0xfffffffd, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x9, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r7, 0xffffffef}}, 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x35c, 0x0) preadv(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) close(r6) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = dup(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={r12, 0xc6}, &(0x7f0000000180)=0x8) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$char_usb(r13, &(0x7f0000000000)=""/158, 0x9e) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 6m14.315766319s ago: executing program 33 (id=425): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="4448fc748b2c81958feb5caa3cfac85342ab98e194", 0x15, 0xc005, 0x0, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x400000107ffff000, 0x0) 5m56.588215764s ago: executing program 34 (id=499): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) 5m30.45506254s ago: executing program 1 (id=602): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth0_to_hsr\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x2020}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1102000000000000000001000000280001801400040000000000000000000000ffffac1414aa0800060001000000060001000a"], 0x3c}}, 0x0) 5m30.004052917s ago: executing program 1 (id=606): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3, 0x12) 5m28.470857621s ago: executing program 4 (id=614): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40401) openat$ppp(0xffffffffffffff9c, 0x0, 0x484802, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = accept(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002200)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2d, 0x2c, 0x66, 0x0, 0xf9, 0x21, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @generic={0x88, 0x2}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, "2868bd", 0x1, "0404b1"}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) pipe(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 5m27.816759771s ago: executing program 1 (id=617): r0 = creat(0x0, 0x0) close(r0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5m27.756288462s ago: executing program 1 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m27.609189384s ago: executing program 1 (id=619): socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 5m27.304070109s ago: executing program 4 (id=620): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00'], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 5m27.303655999s ago: executing program 1 (id=621): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 5m27.250621419s ago: executing program 4 (id=622): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8", 0x7a, 0xc001, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x5, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) timer_create(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) 5m27.20125377s ago: executing program 6 (id=623): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 5m26.536136701s ago: executing program 35 (id=621): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 5m26.531781411s ago: executing program 6 (id=625): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3, 0x12) 5m26.530545631s ago: executing program 4 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m26.333926364s ago: executing program 4 (id=629): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40401) openat$ppp(0xffffffffffffff9c, 0x0, 0x484802, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002200)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2d, 0x2c, 0x66, 0x0, 0xf9, 0x21, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @generic={0x88, 0x2}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, "2868bd", 0x1, "0404b1"}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) pipe(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 5m25.903288431s ago: executing program 4 (id=631): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00'], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 5m25.2832452s ago: executing program 36 (id=631): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00'], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 5m25.023129994s ago: executing program 6 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5m24.700219309s ago: executing program 6 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m24.323842675s ago: executing program 6 (id=637): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) 5m23.832056002s ago: executing program 6 (id=638): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40401) openat$ppp(0xffffffffffffff9c, 0x0, 0x484802, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002200)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2d, 0x2c, 0x66, 0x0, 0xf9, 0x21, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @generic={0x88, 0x2}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, "2868bd", 0x1, "0404b1"}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) pipe(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 5m23.34511611s ago: executing program 37 (id=638): socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40401) openat$ppp(0xffffffffffffff9c, 0x0, 0x484802, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x41424344], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002200)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x2, 0x2d, 0x2c, 0x66, 0x0, 0xf9, 0x21, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @generic={0x88, 0x2}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, "2868bd", 0x1, "0404b1"}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) pipe(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 5m23.33832602s ago: executing program 2 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x24000045) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 5m23.263744461s ago: executing program 2 (id=641): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3, 0x12) 5m21.665315716s ago: executing program 2 (id=642): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth0_to_hsr\x00'}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x2020}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1102000000000000000001000000280001801400040000000000000000000000ffffac1414aa0800060001000000060001000a"], 0x3c}}, 0x0) 5m21.504230299s ago: executing program 2 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m21.47311154s ago: executing program 2 (id=644): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) 5m21.125701095s ago: executing program 2 (id=645): socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008"], 0x74}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) socket$inet_smc(0x2b, 0x1, 0x0) 5m20.75308623s ago: executing program 38 (id=645): socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008"], 0x74}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) socket$inet_smc(0x2b, 0x1, 0x0) 4m14.307608632s ago: executing program 7 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4m14.150394274s ago: executing program 7 (id=1060): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='{\x00\x00\x00\x00\x00\x00\x00,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno', @ANYBLOB]) 4m10.035471258s ago: executing program 7 (id=1066): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1411, 0x105, 0x70bd2a}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 4m9.087897353s ago: executing program 3 (id=1069): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 4m8.977252785s ago: executing program 7 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 4m8.747273878s ago: executing program 3 (id=1072): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r5, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m8.743927018s ago: executing program 7 (id=1073): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x401c5820, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, 0x0, 0x8000) sendmsg$nl_route(r0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 4m7.560889537s ago: executing program 3 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r1, 0x431, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) 4m7.452220899s ago: executing program 7 (id=1078): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4m7.095247094s ago: executing program 39 (id=1078): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4m7.083090184s ago: executing program 3 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101491, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 4m6.839193488s ago: executing program 3 (id=1083): socket$inet_smc(0x2b, 0x1, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x150, 0x30, 0xb, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xf0, 0x2, 0x0, 0x0, {{0xa}, {0xc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x150}}, 0x4004010) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m4.833295439s ago: executing program 3 (id=1087): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.355912146s ago: executing program 40 (id=1087): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 49.708677029s ago: executing program 9 (id=1782): r0 = socket$inet6(0xa, 0x400000000001, 0x0) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)}, 0x80}], 0x1, 0x2001, 0x0) 48.396053528s ago: executing program 9 (id=1784): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000700, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) 47.880318007s ago: executing program 9 (id=1786): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x1, 0xa}, {0xbd1, 0x0, 0x3, 0x1000000}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x9}, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4, 0x10000}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 47.511022932s ago: executing program 9 (id=1789): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffee8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x67, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000043f1d63f004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='thermal_power_cpu_limit\x00', 0xffffffffffffffff, 0x0, 0x410}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0xa, 0x0, &(0x7f00000000c0)) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) stat(0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x28b6825, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_pidfd_open(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(0x0, 0x2) umount2(&(0x7f0000000040)='.\x00', 0x0) 45.979344346s ago: executing program 9 (id=1794): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) 45.460669824s ago: executing program 9 (id=1797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 15.086661036s ago: executing program 5 (id=1836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") write$UHID_INPUT(r2, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 12.531385375s ago: executing program 5 (id=1841): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x111) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 10.403835558s ago: executing program 5 (id=1843): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3, 0x12) 8.583705557s ago: executing program 0 (id=1846): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) close_range(r1, 0xffffffffffffffff, 0x0) 7.213105318s ago: executing program 8 (id=1848): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, 0x0, 0x0) 7.144506669s ago: executing program 0 (id=1849): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x0, 0xf9, 0x120}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.983954861s ago: executing program 8 (id=1850): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0xe3aa6ea) 6.953715562s ago: executing program 0 (id=1851): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x6) sendmsg$TIPC_NL_MON_PEER_GET(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x60000480) 6.079801016s ago: executing program 8 (id=1852): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") 5.870817089s ago: executing program 0 (id=1853): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.610253558s ago: executing program 0 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 4.54086593s ago: executing program 8 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x3ec4, 0x0, &(0x7f0000000280), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 4.47773364s ago: executing program 5 (id=1856): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) open$dir(0x0, 0x8a100, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f0000002680)=ANY=[], 0x1, 0x203, &(0x7f0000000580)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x4, 0xfffef034}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.452431026s ago: executing program 0 (id=1857): socket$inet_smc(0x2b, 0x1, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x108, 0x30, 0xb, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xa8, 0x2, 0x0, 0x0, {{0xa}, {0x7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x4}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x108}}, 0x4004010) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.000037829s ago: executing program 5 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32], 0xe) unshare(0x22020600) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.8915261s ago: executing program 8 (id=1859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200040014000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.732165493s ago: executing program 8 (id=1860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6e8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001900)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)={&(0x7f0000000380)=@l2={0x1f, 0x400, @none, 0x1000, 0x1}, 0x80, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)="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", 0xa36}], 0x6}, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x187840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000380)={0x3920e, r3, 0x2, 0x0, 0x42}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r4}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xc, 0x1, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r5, r6, r7], &(0x7f0000000300)=[{0x0, 0x1, 0x6, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7000, 0x4000000}, 0x28) kernel console output (not intermixed with test programs): multicast mode [ 319.532616][ T8966] bridge_slave_1: entered promiscuous mode [ 319.568915][ T8939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.580516][ T8939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.627024][ T8939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.639912][ T8939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.665780][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.668895][ T8992] loop8: detected capacity change from 0 to 512 [ 319.693371][ T5801] Bluetooth: hci2: command tx timeout [ 319.702609][ T8992] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.716219][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.786118][ T8966] team0: Port device team_slave_0 added [ 319.810789][ T8966] team0: Port device team_slave_1 added [ 319.811938][ T8992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.913512][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.924958][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.952120][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.968680][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.978868][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.016417][ T5801] Bluetooth: hci1: command tx timeout [ 320.037945][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.056917][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.250249][ T8966] hsr_slave_0: entered promiscuous mode [ 320.258834][ T8966] hsr_slave_1: entered promiscuous mode [ 320.266832][ T8966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.274977][ T8966] Cannot create hsr debugfs directory [ 320.365328][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.458529][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.499643][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.506904][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.535113][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.542385][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.898262][ T9013] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1102'. [ 321.177925][ T8966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.195707][ T8966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.229545][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.243235][ T8966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.265841][ T8966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.506572][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.632355][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.361259][ T5801] Bluetooth: hci2: command tx timeout [ 322.366961][ T5801] Bluetooth: hci1: command tx timeout [ 322.403973][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1106'. [ 322.525285][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.532559][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.577375][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.584610][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.610177][ T8939] veth0_vlan: entered promiscuous mode [ 322.678413][ T8939] veth1_vlan: entered promiscuous mode [ 322.820343][ T8939] veth0_macvtap: entered promiscuous mode [ 322.875493][ T8939] veth1_macvtap: entered promiscuous mode [ 322.966966][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.006652][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.031541][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.043519][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.053976][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.065409][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.078156][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.096892][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.113523][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.124518][ T9046] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1109'. [ 323.133680][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.155059][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.175843][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.198259][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.219486][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.249098][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.269041][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.279800][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.290709][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.307953][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.356709][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.379135][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.399696][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.438919][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.458134][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.479212][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.507574][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.541170][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.561702][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.580075][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.600497][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.631225][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.658076][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.669031][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.685089][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.695897][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.706262][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.739570][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.753880][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.817230][ T8939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.826466][ T8939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.836911][ T8939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.846119][ T8939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.909599][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.142212][ T8632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.150095][ T8632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.233790][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.249036][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.398693][ T5802] Bluetooth: hci1: command tx timeout [ 324.405018][ T5802] Bluetooth: hci2: command tx timeout [ 324.446662][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1114'. [ 325.280122][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 325.280139][ T28] audit: type=1326 audit(1752017180.081:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.383455][ T28] audit: type=1326 audit(1752017180.081:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.407967][ T28] audit: type=1326 audit(1752017180.091:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.457527][ T28] audit: type=1326 audit(1752017180.091:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.487284][ T28] audit: type=1326 audit(1752017180.091:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.522765][ T28] audit: type=1326 audit(1752017180.101:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.532327][ T9077] veth0_to_bond: entered allmulticast mode [ 325.587984][ T28] audit: type=1326 audit(1752017180.101:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.658966][ T28] audit: type=1326 audit(1752017180.101:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.737198][ T28] audit: type=1326 audit(1752017180.121:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 325.778328][ T8966] veth0_vlan: entered promiscuous mode [ 325.815042][ T8966] veth1_vlan: entered promiscuous mode [ 325.829350][ T28] audit: type=1326 audit(1752017180.121:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.8.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909378e929 code=0x7ffc0000 [ 326.099649][ T8966] veth0_macvtap: entered promiscuous mode [ 326.137330][ T8966] veth1_macvtap: entered promiscuous mode [ 326.247329][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.497551][ T5801] Bluetooth: hci2: command tx timeout [ 326.931264][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.969701][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.994652][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.005207][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.020450][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.069424][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.100631][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.120428][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.159091][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.169356][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.180319][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.198420][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.210081][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.220431][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.231872][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.242614][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.253320][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.264151][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.281869][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.305792][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.313739][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1123'. [ 327.494036][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.561266][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.590042][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.621238][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.641711][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.661178][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.671069][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.708970][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.727859][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.751435][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.762435][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.773101][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.783037][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.794807][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.814711][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.825570][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.837085][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.847991][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.858153][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.869001][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.940065][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.976929][ T8966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.986218][ T8966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.006267][ T8966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.050279][ T8966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.156367][ T9114] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1130'. [ 328.279609][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.311517][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.412850][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.439093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.566845][ T9116] loop0: detected capacity change from 0 to 8192 [ 328.595286][ T9120] loop8: detected capacity change from 0 to 512 [ 328.678725][ T9120] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.766378][ T9116] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 328.799224][ T9120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.817681][ T9116] FAT-fs (loop0): Filesystem has been set read-only [ 328.989986][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1134'. [ 329.813090][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.078961][ T9143] loop9: detected capacity change from 0 to 1024 [ 330.154394][ T9143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.171539][ T9143] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.650910][ T9161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1144'. [ 330.926969][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 330.926987][ T28] audit: type=1326 audit(1752017185.731:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.065752][ T28] audit: type=1326 audit(1752017185.791:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.118705][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1145'. [ 331.508066][ T28] audit: type=1326 audit(1752017185.791:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.765849][ T28] audit: type=1326 audit(1752017185.791:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.806344][ T28] audit: type=1326 audit(1752017185.791:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.857233][ T28] audit: type=1326 audit(1752017185.791:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.932354][ T28] audit: type=1326 audit(1752017185.791:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 331.985566][ T28] audit: type=1326 audit(1752017185.791:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 332.081393][ T28] audit: type=1326 audit(1752017185.791:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 332.151994][ T28] audit: type=1326 audit(1752017185.791:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18158e929 code=0x7ffc0000 [ 332.447447][ T1084] EXT4-fs error (device loop9): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 15) [ 332.511534][ T1084] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 332.539448][ T1084] EXT4-fs (loop9): This should not happen!! Data will be lost [ 332.539448][ T1084] [ 332.586575][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.743937][ T9187] loop5: detected capacity change from 0 to 512 [ 332.771647][ T9189] loop0: detected capacity change from 0 to 512 [ 332.780579][ T9189] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.836913][ T9187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.850763][ T9187] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.867052][ T9189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.007175][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.086445][ T8939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.402849][ T9204] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1160'. [ 334.054842][ T9223] loop8: detected capacity change from 0 to 512 [ 334.077435][ T9223] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.103085][ T9223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.206131][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.493925][ T9235] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1172'. [ 335.334104][ T9256] loop8: detected capacity change from 0 to 512 [ 335.345291][ T9256] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.370125][ T9256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.498824][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.707681][ T9262] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1184'. [ 336.230706][ T9281] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 336.341669][ T9285] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1195'. [ 337.518082][ T9314] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1206'. [ 338.357817][ T9329] loop9: detected capacity change from 0 to 8192 [ 338.475293][ T9343] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1217'. [ 338.493805][ T9329] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 338.523389][ T9329] FAT-fs (loop9): Filesystem has been set read-only [ 338.991242][ T9357] loop8: detected capacity change from 0 to 512 [ 339.033337][ T9357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.095213][ T9357] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.176650][ T28] audit: type=1800 audit(1752017193.981:374): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1224" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 339.240547][ T9367] netlink: 'syz.0.1226': attribute type 25 has an invalid length. [ 339.259443][ T9367] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1226'. [ 339.305903][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.437856][ T9369] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1228'. [ 340.189354][ T9389] loop8: detected capacity change from 0 to 512 [ 340.262444][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.270080][ T9391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.300374][ T9389] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.368117][ T9389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.397569][ T9395] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1237'. [ 340.630773][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.672029][ T9398] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 341.453531][ T9424] loop0: detected capacity change from 0 to 512 [ 341.475572][ T9424] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.520078][ T9424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.674434][ T8939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.883188][ T9430] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1249'. [ 342.258404][ T9436] loop5: detected capacity change from 0 to 512 [ 342.340017][ T9436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.395635][ T9436] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.734662][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.957050][ T9455] loop5: detected capacity change from 0 to 1024 [ 343.012245][ T9455] EXT4-fs: Ignoring removed orlov option [ 343.081567][ T9455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.713182][ T9455] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.1258: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 345.903379][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.989524][ T9523] loop9: detected capacity change from 0 to 512 [ 349.027500][ T9523] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.1282: invalid block [ 349.165985][ T9523] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1282: invalid indirect mapped block 10 (level 1) [ 349.200311][ T9523] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1282: invalid indirect mapped block 8 (level 1) [ 349.284885][ T9523] EXT4-fs (loop9): 1 truncate cleaned up [ 349.306924][ T9523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.368826][ T9523] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.1282: unexpected EA_INODE flag [ 349.542539][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.906804][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1293'. [ 349.916152][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1293'. [ 350.102664][ T9549] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 350.533632][ T9561] loop9: detected capacity change from 0 to 512 [ 350.547090][ T9561] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 350.576779][ T9561] EXT4-fs (loop9): 1 truncate cleaned up [ 350.583485][ T9561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.457265][ T9573] tipc: Enabling of bearer rejected, already enabled [ 352.539222][ T9595] tipc: Enabling of bearer rejected, failed to enable media [ 352.612196][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'. [ 354.320208][ T9626] tipc: Enabling of bearer rejected, already enabled [ 354.380196][ T9628] overlayfs: failed to resolve './file0': -2 [ 354.412982][ T9628] loop0: detected capacity change from 0 to 512 [ 354.447533][ T9628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.485090][ T9628] ext4: Unknown parameter 'smackfsdef' [ 354.938257][ T9636] loop0: detected capacity change from 0 to 256 [ 354.965140][ T9636] 9pnet_fd: Insufficient options for proto=fd [ 355.052701][ T9632] loop8: detected capacity change from 0 to 8192 [ 356.263628][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.756438][ T9668] loop9: detected capacity change from 0 to 16 [ 357.815322][ T9668] erofs: (device loop9): mounted with root inode @ nid 36. [ 360.102491][ T9674] loop8: detected capacity change from 0 to 1024 [ 360.110701][ T9674] EXT4-fs: Ignoring removed i_version option [ 360.341931][ T9674] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.473818][ T9674] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:478: comm syz.8.1336: Invalid block bitmap block 0 in block_group 0 [ 360.497869][ T9674] Quota error (device loop8): write_blk: dquota write failed [ 360.506042][ T9674] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 360.516520][ T9674] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1336: Failed to acquire dquot type 0 [ 360.568710][ T9674] EXT4-fs error (device loop8): ext4_free_blocks:6681: comm syz.8.1336: Freeing blocks not in datazone - block = 0, count = 4096 [ 360.598117][ T9674] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1336: Invalid inode bitmap blk 0 in block_group 0 [ 360.630836][ T9674] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 360.647424][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 360.653811][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 360.698514][ T9674] EXT4-fs (loop8): 1 orphan inode deleted [ 360.719504][ T9674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.424473][ T2950] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 361.469454][ T2950] EXT4-fs error (device loop8): ext4_release_dquot:6974: comm kworker/u4:8: Failed to release dquot type 0 [ 362.364873][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.690986][ T9699] loop5: detected capacity change from 0 to 512 [ 362.736625][ T9699] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.771400][ T9699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.223557][ T9704] loop8: detected capacity change from 0 to 40427 [ 363.240624][ T9704] F2FS-fs (loop8): Unrecognized mount option "" or missing value [ 363.253136][ T8966] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 363.285738][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.529742][ T2950] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.795964][ T9712] loop5: detected capacity change from 0 to 512 [ 363.856757][ T9704] loop8: detected capacity change from 0 to 40427 [ 363.858181][ T2950] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.875945][ T9704] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 363.883895][ T9704] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 363.900374][ T9704] F2FS-fs (loop8): invalid crc value [ 363.919122][ T9712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.956840][ T9712] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.988905][ T9704] F2FS-fs (loop8): Found nat_bits in checkpoint [ 364.064089][ T9704] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 364.071751][ T9704] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 364.244484][ T2950] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.366709][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.616069][ T2950] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.679538][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.690975][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.700025][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.711897][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.738160][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 364.757903][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.313575][ T9745] loop5: detected capacity change from 0 to 1024 [ 365.341717][ T9745] EXT4-fs: Ignoring removed i_version option [ 365.363357][ T9745] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.400385][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 365.424197][ T9745] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1357: Invalid block bitmap block 0 in block_group 0 [ 365.466006][ T9745] Quota error (device loop5): write_blk: dquota write failed [ 365.473866][ T9745] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 365.484177][ T9745] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1357: Failed to acquire dquot type 0 [ 365.515943][ T9745] EXT4-fs error (device loop5): ext4_free_blocks:6681: comm syz.5.1357: Freeing blocks not in datazone - block = 0, count = 4096 [ 365.544333][ T9745] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1357: Invalid inode bitmap blk 0 in block_group 0 [ 365.585603][ T8622] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 365.632173][ T9745] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 365.640973][ T8622] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:12: Failed to release dquot type 0 [ 365.675523][ T9745] EXT4-fs (loop5): 1 orphan inode deleted [ 365.713190][ T9745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.863703][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.938813][ T9756] loop9: detected capacity change from 0 to 512 [ 365.949539][ T1077] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 365.968713][ T9756] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.991602][ T1077] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 366.017265][ T9756] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.115784][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.123541][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.130974][ T9728] bridge_slave_0: entered allmulticast mode [ 366.155374][ T9728] bridge_slave_0: entered promiscuous mode [ 366.177380][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.288038][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.351585][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.379460][ T9728] bridge_slave_1: entered allmulticast mode [ 366.447610][ T9763] syz.5.1361[9763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.448668][ T9763] syz.5.1361[9763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.560557][ T9763] loop5: detected capacity change from 0 to 512 [ 366.585422][ T9763] EXT4-fs: Ignoring removed nobh option [ 366.722642][ T9763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.870068][ T9728] bridge_slave_1: entered promiscuous mode [ 366.877920][ T5801] Bluetooth: hci1: command tx timeout [ 367.606797][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.692514][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.968414][ T9728] team0: Port device team_slave_0 added [ 368.010012][ T9728] team0: Port device team_slave_1 added [ 368.687376][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.756682][ T9781] loop8: detected capacity change from 0 to 512 [ 368.854404][ T9781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.870473][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.879158][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.879743][ T9781] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.951597][ T5801] Bluetooth: hci1: command tx timeout [ 368.980386][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.021253][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.069081][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.517533][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.905535][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.029750][ T9792] loop9: detected capacity change from 0 to 1024 [ 370.039795][ T9792] EXT4-fs: Ignoring removed i_version option [ 370.082466][ T9792] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.124355][ T9792] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:478: comm syz.9.1370: Invalid block bitmap block 0 in block_group 0 [ 370.156854][ T9728] hsr_slave_0: entered promiscuous mode [ 370.163603][ T9792] Quota error (device loop9): write_blk: dquota write failed [ 370.171068][ T9792] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 370.215130][ T9728] hsr_slave_1: entered promiscuous mode [ 370.225576][ T9728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.233862][ T9792] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.1370: Failed to acquire dquot type 0 [ 370.251339][ T9728] Cannot create hsr debugfs directory [ 370.296626][ T9792] EXT4-fs error (device loop9): ext4_free_blocks:6681: comm syz.9.1370: Freeing blocks not in datazone - block = 0, count = 4096 [ 370.341930][ T9792] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.1370: Invalid inode bitmap blk 0 in block_group 0 [ 370.385731][ T9792] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 370.412060][ T9792] EXT4-fs (loop9): 1 orphan inode deleted [ 370.452872][ T9792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.003891][ T2950] hsr_slave_0: left promiscuous mode [ 371.012320][ T2950] hsr_slave_1: left promiscuous mode [ 371.031685][ T5801] Bluetooth: hci1: command tx timeout [ 371.039069][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.052047][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.059510][ T8630] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 371.060776][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.100878][ T8630] EXT4-fs error (device loop9): ext4_release_dquot:6974: comm kworker/u4:15: Failed to release dquot type 0 [ 371.153132][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.215421][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.311780][ T2950] bridge_slave_1: left allmulticast mode [ 371.317499][ T2950] bridge_slave_1: left promiscuous mode [ 371.343846][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.475922][ T9800] loop9: detected capacity change from 0 to 16 [ 374.154031][ T9800] erofs: (device loop9): mounted with root inode @ nid 36. [ 374.663788][ T9800] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 36 [ 374.936669][ T5802] Bluetooth: hci1: command tx timeout [ 375.151286][ T9805] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1373'. [ 375.450732][ T9813] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1375'. [ 375.476736][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 375.637761][ T2950] bridge_slave_0: left allmulticast mode [ 375.659346][ T2950] bridge_slave_0: left promiscuous mode [ 375.677858][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.748538][ T2950] veth1_macvtap: left promiscuous mode [ 375.761045][ T2950] veth0_macvtap: left promiscuous mode [ 375.891338][ T9822] loop5: detected capacity change from 0 to 128 [ 375.939184][ T2950] veth1_vlan: left promiscuous mode [ 376.154314][ T2950] veth0_vlan: left promiscuous mode [ 376.869257][ T9827] loop9: detected capacity change from 0 to 512 [ 376.889666][ T9827] EXT4-fs (loop9): can't mount with both data=journal and dax [ 377.198728][ T9831] loop5: detected capacity change from 0 to 8192 [ 377.594990][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1384'. [ 377.605448][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 377.750949][ T9840] loop5: detected capacity change from 0 to 256 [ 377.848395][ T9840] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 377.935940][ T9840] syz.5.1385: attempt to access beyond end of device [ 377.935940][ T9840] loop5: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 377.969745][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 377.978014][ T9840] syz.5.1385: attempt to access beyond end of device [ 377.978014][ T9840] loop5: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 378.025864][ T28] audit: type=1800 audit(1752017232.831:375): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1385" name="file1" dev="loop5" ino=1048692 res=0 errno=0 [ 378.092393][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 378.225049][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.244765][ T9847] loop9: detected capacity change from 0 to 512 [ 378.262799][ T9847] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.308771][ T9847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.348555][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.487651][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.831655][ T9857] loop5: detected capacity change from 0 to 8192 [ 378.908463][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.915903][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.117428][ T9862] loop9: detected capacity change from 0 to 512 [ 379.155645][ T9862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.199088][ T9862] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.245225][ T9866] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 379.336109][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.496724][ T9871] syz.9.1396[9871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.496868][ T9871] syz.9.1396[9871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.599015][ T2950] bond0 (unregistering): Released all slaves [ 379.853560][ T9878] loop5: detected capacity change from 0 to 512 [ 380.105760][ T9878] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 380.603638][ T9878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.850238][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.002875][ T9889] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 381.306579][ T9897] loop5: detected capacity change from 0 to 512 [ 382.149625][ T9897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.216082][ T9897] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.328290][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.527123][ T9906] loop8: detected capacity change from 0 to 1024 [ 382.539681][ T9906] EXT4-fs: Ignoring removed i_version option [ 382.579957][ T9906] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.631829][ T9906] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:478: comm syz.8.1408: Invalid block bitmap block 0 in block_group 0 [ 382.647666][ T9906] Quota error (device loop8): write_blk: dquota write failed [ 382.655447][ T9906] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 382.665946][ T9906] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1408: Failed to acquire dquot type 0 [ 382.699325][ T9906] EXT4-fs error (device loop8): ext4_free_blocks:6681: comm syz.8.1408: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.716413][ T9906] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1408: Invalid inode bitmap blk 0 in block_group 0 [ 382.734865][ T9906] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 382.745775][ T9906] EXT4-fs (loop8): 1 orphan inode deleted [ 382.757831][ T9906] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.882513][ T8626] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 383.098134][ T8626] EXT4-fs error (device loop8): ext4_release_dquot:6974: comm kworker/u4:14: Failed to release dquot type 0 [ 383.342648][ T9728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.413193][ T9728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.463255][ T9728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.498659][ T9911] loop9: detected capacity change from 0 to 256 [ 383.543950][ T9728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.553912][ T9911] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf0c1951c, utbl_chksum : 0xe619d30d) [ 384.010799][ T9923] loop5: detected capacity change from 0 to 512 [ 384.072504][ T9923] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.094472][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.135772][ T9923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.217116][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.263732][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.270984][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.367455][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.374750][ T8626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.519390][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.595899][ T9728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.618223][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.881851][ T9939] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 385.958552][ T28] audit: type=1107 audit(1752017240.751:376): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 386.221241][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.451665][ T9728] veth0_vlan: entered promiscuous mode [ 386.509343][ T9728] veth1_vlan: entered promiscuous mode [ 386.635918][ T9728] veth0_macvtap: entered promiscuous mode [ 386.671447][ T9728] veth1_macvtap: entered promiscuous mode [ 386.718273][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.754076][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.777654][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.792407][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.812234][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.836967][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.854164][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.881290][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.911715][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.931299][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.958658][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.075284][ T9967] loop5: detected capacity change from 0 to 1024 [ 387.086093][ T9967] EXT4-fs: Ignoring removed i_version option [ 387.146435][ T9967] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 387.277709][ T9967] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1424: Invalid block bitmap block 0 in block_group 0 [ 387.293580][ T9967] Quota error (device loop5): write_blk: dquota write failed [ 387.303943][ T9967] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 387.314838][ T9967] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1424: Failed to acquire dquot type 0 [ 387.343781][ T9967] EXT4-fs error (device loop5): ext4_free_blocks:6681: comm syz.5.1424: Freeing blocks not in datazone - block = 0, count = 4096 [ 387.361495][ T9967] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1424: Invalid inode bitmap blk 0 in block_group 0 [ 387.375494][ T9967] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 387.386461][ T9967] EXT4-fs (loop5): 1 orphan inode deleted [ 387.398240][ T9967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.476669][ T2989] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 387.547035][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.656466][ T2989] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 0 [ 387.812518][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.861366][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.907556][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.956686][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.001292][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.061626][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.106040][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.116655][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.130280][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.142279][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.153161][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.163292][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.174218][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.439444][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.331445][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.362805][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.419825][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.468298][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.510611][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.555324][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.581343][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.601235][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.624937][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.642168][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.675618][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.699194][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.720961][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.744692][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.781368][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.826912][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.887112][ T9728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.892354][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.896405][ T9728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.931184][ T9728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.940064][ T9728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.061829][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.117170][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.194129][ T8626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.228118][ T9994] loop5: detected capacity change from 0 to 512 [ 391.242077][ T8626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.313577][ T9994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.382770][ T9994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.622663][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.197110][T10044] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 392.557843][T10067] loop8: detected capacity change from 0 to 512 [ 392.608700][T10067] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.677715][T10067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.598009][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1449'. [ 393.608073][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1449'. [ 393.773037][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.249266][T10087] loop9: detected capacity change from 0 to 256 [ 394.262839][T10087] exfat: Deprecated parameter 'namecase' [ 394.269194][T10087] exfat: Unknown parameter 'audit' [ 394.570851][T10087] loop9: detected capacity change from 0 to 1024 [ 394.583883][T10087] EXT4-fs: Ignoring removed nobh option [ 394.589585][T10087] EXT4-fs: Ignoring removed bh option [ 394.845260][T10087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.946154][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.442848][T10105] loop0: detected capacity change from 0 to 256 [ 397.469422][T10105] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿÿÿIC now" or missing value [ 399.270747][T10105] netlink: 'syz.0.1458': attribute type 4 has an invalid length. [ 399.947117][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1459'. [ 400.012052][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1459'. [ 400.291243][T10114] loop0: detected capacity change from 0 to 512 [ 400.331425][T10114] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 400.425724][T10114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.535890][T10125] loop5: detected capacity change from 0 to 512 [ 400.586272][T10125] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1464: casefold flag without casefold feature [ 400.622833][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.651297][T10125] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1464: couldn't read orphan inode 15 (err -117) [ 400.668085][T10054] tipc: Subscription rejected, illegal request [ 400.736883][T10125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.323846][T10145] loop9: detected capacity change from 0 to 512 [ 403.451838][T10145] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1470: bad orphan inode 15 [ 403.508108][T10145] ext4_test_bit(bit=14, block=18) = 1 [ 403.522532][T10145] is_bad_inode(inode)=0 [ 403.545903][T10145] NEXT_ORPHAN(inode)=1023 [ 403.564878][T10145] max_ino=32 [ 403.568154][T10145] i_nlink=0 [ 403.572500][T10145] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2983: inode #15: comm syz.9.1470: corrupted xattr block 19: invalid header [ 403.622351][T10145] EXT4-fs warning (device loop9): ext4_evict_inode:272: xattr delete (err -117) [ 403.660694][T10145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 403.694822][T10145] ext4 filesystem being mounted at /211/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 403.727066][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.829573][T10151] loop0: detected capacity change from 0 to 512 [ 403.874325][T10151] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.921246][T10151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.200184][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.421960][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 404.605532][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 405.412935][T10166] loop0: detected capacity change from 0 to 512 [ 405.500194][T10166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.562337][T10166] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.057304][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.104550][T10195] capability: warning: `syz.8.1488' uses 32-bit capabilities (legacy support in use) [ 407.151951][T10054] tipc: Subscription rejected, illegal request [ 407.715399][T10202] loop5: detected capacity change from 0 to 512 [ 407.756547][T10202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.773498][T10202] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.845315][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.201555][ T28] audit: type=1326 audit(2000000018.880:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.321247][ T28] audit: type=1326 audit(2000000018.880:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.371347][ T28] audit: type=1326 audit(2000000018.920:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.407246][ T28] audit: type=1326 audit(2000000018.920:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.457636][ T28] audit: type=1326 audit(2000000018.940:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.524420][ T28] audit: type=1326 audit(2000000018.940:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.618456][ T28] audit: type=1326 audit(2000000018.940:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.781567][ T28] audit: type=1326 audit(2000000018.940:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 409.881603][T10221] loop0: detected capacity change from 0 to 512 [ 409.940401][T10221] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 410.036844][T10221] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 410.064506][T10221] EXT4-fs (loop0): 1 truncate cleaned up [ 410.082144][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.793961][ T28] audit: type=1326 audit(2000000018.940:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 410.938807][ T28] audit: type=1326 audit(2000000018.940:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5dd8e929 code=0x7ffc0000 [ 412.230558][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.705565][T10236] loop9: detected capacity change from 0 to 512 [ 412.727144][T10236] ext4: Unknown parameter '" d' [ 413.073572][T10245] loop5: detected capacity change from 0 to 128 [ 413.284106][T10245] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.299425][T10245] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.128305][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 416.736918][ T8966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.882644][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1512'. [ 417.196013][T10274] loop0: detected capacity change from 0 to 512 [ 417.253507][T10274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.324636][T10274] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.356167][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.497069][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1517'. [ 418.542183][T10289] loop0: detected capacity change from 0 to 512 [ 418.554011][T10289] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 418.605489][T10289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.807204][T10297] loop9: detected capacity change from 0 to 128 [ 418.834654][T10297] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.963100][T10297] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.954072][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.397970][T10307] loop5: detected capacity change from 0 to 128 [ 422.405378][T10307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.412091][T10307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.163361][T10307] EXT4-fs (loop5): Test dummy encryption mode enabled [ 425.217095][T10307] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 425.217781][T10307] EXT4-fs: failed to create workqueue [ 425.234080][T10307] EXT4-fs (loop5): mount failed [ 425.388440][ T7668] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.571514][T10314] loop5: detected capacity change from 0 to 256 [ 425.606488][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 425.796616][T10320] loop9: detected capacity change from 0 to 128 [ 425.841338][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 425.841354][ T28] audit: type=1800 audit(2000000035.520:392): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1528" name="file1" dev="loop9" ino=1048699 res=0 errno=0 [ 426.112902][ T5879] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 426.321500][ T5879] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 58290, setting to 64 [ 426.347805][ T5879] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.394586][ T5879] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 426.429020][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.454321][ T5879] usb 10-1: Product: syz [ 426.466463][ T5879] usb 10-1: Manufacturer: syz [ 426.482295][ T5879] usb 10-1: SerialNumber: syz [ 426.498477][ T5879] hub 10-1:1.0: bad descriptor, ignoring hub [ 426.507992][ T5879] hub: probe of 10-1:1.0 failed with error -5 [ 427.822516][T10333] loop0: detected capacity change from 0 to 512 [ 427.829813][T10333] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.839477][T10333] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 427.842618][T10335] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1531'. [ 427.925946][T10337] loop5: detected capacity change from 0 to 128 [ 427.934483][T10337] EXT4-fs (loop5): Test dummy encryption mode enabled [ 427.956812][T10337] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.972083][T10337] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.165944][T10348] loop8: detected capacity change from 0 to 128 [ 428.365478][T10348] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.406236][T10348] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.193808][T10337] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 429.434970][ T8966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.446712][ T5879] usb 10-1: USB disconnect, device number 2 [ 429.892315][ T28] audit: type=1326 audit(2000000039.570:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.036802][ T28] audit: type=1326 audit(2000000039.570:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.175518][ T28] audit: type=1326 audit(2000000039.580:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.198157][ T28] audit: type=1326 audit(2000000039.580:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.246141][ T28] audit: type=1326 audit(2000000039.580:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.300746][ T28] audit: type=1326 audit(2000000039.610:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.581630][T10365] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1542'. [ 430.646428][ T28] audit: type=1326 audit(2000000039.610:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.670674][ T28] audit: type=1326 audit(2000000039.610:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 430.695189][ T7654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.708478][ T28] audit: type=1326 audit(2000000039.620:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5cbd8e929 code=0x7ffc0000 [ 431.187950][T10377] loop8: detected capacity change from 0 to 128 [ 431.200207][T10377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.207108][T10377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.301908][T10377] EXT4-fs (loop8): Test dummy encryption mode enabled [ 431.421129][T10377] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.465833][T10377] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.944114][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 432.944151][ T28] audit: type=1326 audit(2000000042.620:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 433.562630][ T28] audit: type=1326 audit(2000000042.690:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 433.810677][ T28] audit: type=1326 audit(2000000042.690:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 434.015797][ T28] audit: type=1326 audit(2000000042.690:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 434.160072][ T28] audit: type=1326 audit(2000000042.720:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 434.204213][ T28] audit: type=1326 audit(2000000042.880:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 434.223257][ T7654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 434.271565][ T28] audit: type=1326 audit(2000000042.920:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.9.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 434.452255][T10398] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1553'. [ 436.098811][T10403] loop8: detected capacity change from 0 to 128 [ 436.519541][T10403] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.570369][T10403] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 437.234227][T10408] loop9: detected capacity change from 0 to 16 [ 437.268302][T10408] erofs: (device loop9): mounted with root inode @ nid 36. [ 438.289841][T10416] loop9: detected capacity change from 0 to 512 [ 438.371510][T10416] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.378145][T10416] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.462417][T10417] loop0: detected capacity change from 0 to 2048 [ 438.483081][T10416] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.520714][T10417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.559642][T10416] EXT4-fs (loop9): Test dummy encryption mode enabled [ 438.582964][T10416] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 438.642521][ T7654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.681846][T10416] EXT4-fs (loop9): 1 truncate cleaned up [ 438.688932][T10416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.751171][T10410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 438.813329][T10410] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 438.861136][T10410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 438.861136][T10410] [ 438.870849][T10410] EXT4-fs (loop0): Total free blocks count 0 [ 438.901524][T10410] EXT4-fs (loop0): Free/Dirty block details [ 438.907551][T10410] EXT4-fs (loop0): free_blocks=2415919104 [ 438.951547][T10410] EXT4-fs (loop0): dirty_blocks=32 [ 438.956755][T10410] EXT4-fs (loop0): Block reservation details [ 438.981210][T10410] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 439.442545][T10432] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 439.467094][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.343827][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.350219][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.397315][T10442] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1563'. [ 440.519922][T10444] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1564'. [ 441.761626][T10456] loop0: detected capacity change from 0 to 512 [ 441.854067][T10456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.882165][T10456] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.002800][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.207040][T10466] loop5: detected capacity change from 0 to 2048 [ 442.307529][T10466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.409895][ T28] audit: type=1800 audit(2000000052.090:432): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1571" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 442.479182][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 442.793676][T10473] loop8: detected capacity change from 0 to 512 [ 443.068479][T10473] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1572: iget: bad i_size value: 38620345925642 [ 443.091637][T10473] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1572: couldn't read orphan inode 15 (err -117) [ 443.151813][T10473] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.902690][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.020814][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.269356][T10487] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1575'. [ 447.030010][T10504] loop8: detected capacity change from 0 to 256 [ 447.203731][T10506] loop5: detected capacity change from 0 to 128 [ 447.216056][T10506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.222960][T10506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.328260][T10506] EXT4-fs (loop5): Test dummy encryption mode enabled [ 447.466163][T10506] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.510601][T10506] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 450.235170][ T8966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.485108][T10518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1586'. [ 450.496751][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.506141][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.722997][T10521] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 451.395393][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.637981][T10539] loop9: detected capacity change from 0 to 512 [ 451.716000][T10539] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.741665][T10539] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.960221][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.417746][T10553] syz.8.1596[10553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.418444][T10553] syz.8.1596[10553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.458939][T10553] loop8: detected capacity change from 0 to 128 [ 453.349905][T10554] loop5: detected capacity change from 0 to 256 [ 453.957941][T10555] loop9: detected capacity change from 0 to 512 [ 454.027956][T10555] EXT4-fs (loop9): 1 truncate cleaned up [ 454.036105][T10555] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.583139][T10564] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 456.117481][T10580] loop8: detected capacity change from 0 to 512 [ 456.320893][T10580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.381324][T10580] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.714028][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.736451][T10588] loop0: detected capacity change from 0 to 256 [ 456.843829][T10589] loop5: detected capacity change from 0 to 512 [ 456.854077][T10589] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.860884][T10589] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.867925][T10589] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.027800][T10589] EXT4-fs (loop5): Test dummy encryption mode enabled [ 457.036244][T10589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 457.125454][T10589] EXT4-fs (loop5): 1 truncate cleaned up [ 457.136987][T10589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.042870][T10588] FAT-fs (loop0): Directory bread(block 64) failed [ 458.090322][T10588] FAT-fs (loop0): Directory bread(block 65) failed [ 458.141272][T10588] FAT-fs (loop0): Directory bread(block 66) failed [ 458.147870][T10588] FAT-fs (loop0): Directory bread(block 67) failed [ 458.185370][T10588] FAT-fs (loop0): Directory bread(block 68) failed [ 458.231656][T10588] FAT-fs (loop0): Directory bread(block 69) failed [ 458.258826][T10588] FAT-fs (loop0): Directory bread(block 70) failed [ 458.297020][T10588] FAT-fs (loop0): Directory bread(block 71) failed [ 458.326577][T10588] FAT-fs (loop0): Directory bread(block 72) failed [ 458.367918][T10588] FAT-fs (loop0): Directory bread(block 73) failed [ 459.225281][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.101605][T10609] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 460.975555][T10618] loop0: detected capacity change from 0 to 128 [ 460.987967][T10618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.994788][T10618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.046571][T10618] EXT4-fs (loop0): Test dummy encryption mode enabled [ 461.115856][T10618] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.140142][T10618] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.568393][T10625] loop5: detected capacity change from 0 to 512 [ 463.594333][T10624] loop8: detected capacity change from 0 to 512 [ 463.641403][T10625] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 463.703432][T10625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.719016][T10624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.827257][T10624] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.945738][ T9728] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.024981][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.045185][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.323251][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.455245][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1625'. [ 464.588830][T10654] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 464.601361][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1626'. [ 464.701876][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1627'. [ 464.749577][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1627'. [ 464.907712][T10664] loop5: detected capacity change from 0 to 512 [ 464.989747][T10664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.026469][T10664] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.055160][T10669] loop8: detected capacity change from 0 to 1024 [ 465.119133][T10669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.174112][T10669] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.194038][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.672188][T10620] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 465.894387][T10681] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1635'. [ 466.254887][T10688] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 467.204733][T10694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1639'. [ 467.214904][T10694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1639'. [ 467.354880][T10696] loop5: detected capacity change from 0 to 512 [ 467.362219][T10696] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.368736][T10696] ext4: Unknown parameter 'seclabel' [ 467.393729][ T8622] EXT4-fs error (device loop8): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 15) [ 467.471898][ T8622] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 467.548423][ T8622] EXT4-fs (loop8): This should not happen!! Data will be lost [ 467.548423][ T8622] [ 467.619005][T10700] loop9: detected capacity change from 0 to 512 [ 467.664066][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.706778][T10700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.774334][T10700] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.819094][T10705] netlink: 'syz.0.1643': attribute type 27 has an invalid length. [ 468.169885][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.906038][T10710] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1644'. [ 469.204996][T10717] loop9: detected capacity change from 0 to 256 [ 471.209948][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.315282][T10705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.920964][T10705] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.930330][T10705] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.940577][T10705] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.949700][T10705] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.165636][T10706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.174667][T10706] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.187409][T10706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.220343][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1648'. [ 472.242807][T10728] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1648'. [ 472.611700][T10740] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1654'. [ 472.768798][T10745] loop5: detected capacity change from 0 to 512 [ 472.786281][T10745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.888348][T10745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.931041][T10745] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.821774][T10755] loop9: detected capacity change from 0 to 512 [ 474.829008][T10755] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.835701][T10755] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.842201][T10755] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.950928][T10755] EXT4-fs (loop9): Test dummy encryption mode enabled [ 474.959289][T10755] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 475.033677][T10755] EXT4-fs (loop9): 1 truncate cleaned up [ 475.046821][T10755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.014537][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.097240][T10760] veth0_to_bond: entered allmulticast mode [ 477.162421][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.348566][T10780] loop5: detected capacity change from 0 to 512 [ 477.380828][T10780] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.567580][T10780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.386004][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.689774][T10794] veth0_to_bond: entered allmulticast mode [ 479.600108][T10805] loop5: detected capacity change from 0 to 4096 [ 479.639764][T10805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.840155][T10813] loop8: detected capacity change from 0 to 256 [ 480.095575][T10815] loop0: detected capacity change from 0 to 512 [ 480.136851][T10815] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.149994][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.166829][T10815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.966879][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.018769][T10848] vlan2: entered promiscuous mode [ 483.023991][T10848] bridge0: entered promiscuous mode [ 483.620478][T10851] loop8: detected capacity change from 0 to 512 [ 483.683122][T10851] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.830464][T10851] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.037253][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.210843][T10866] loop5: detected capacity change from 0 to 512 [ 484.452128][T10866] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #16: comm syz.5.1696: corrupted inode contents [ 484.511866][T10866] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #16: comm syz.5.1696: mark_inode_dirty error [ 485.780753][T10866] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #16: comm syz.5.1696: corrupted inode contents [ 485.823188][T10866] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.1696: mark_inode_dirty error [ 485.870750][T10866] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #16: comm syz.5.1696: corrupted inode contents [ 485.932989][T10866] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 485.956147][T10866] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #16: comm syz.5.1696: corrupted inode contents [ 486.030186][T10866] EXT4-fs error (device loop5): ext4_truncate:4288: inode #16: comm syz.5.1696: mark_inode_dirty error [ 486.062304][T10866] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 486.098213][T10866] EXT4-fs (loop5): 1 truncate cleaned up [ 486.110601][T10866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.191617][T10866] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.221319][ T28] audit: type=1326 audit(2000000095.840:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.9.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 486.271760][T10028] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.298017][ T28] audit: type=1326 audit(2000000095.840:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.9.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 486.325068][T10028] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:40: Failed to release dquot type 1 [ 486.337014][ T28] audit: type=1326 audit(2000000095.840:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.9.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 486.364432][ T28] audit: type=1326 audit(2000000095.850:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.9.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 486.401793][T10866] ext4: Unknown parameter 'sit0' [ 486.416958][ T28] audit: type=1326 audit(2000000095.850:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.9.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f918e929 code=0x7ffc0000 [ 486.498566][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.659913][T10895] loop5: detected capacity change from 0 to 512 [ 486.704131][T10897] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 486.764909][T10895] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.845853][T10895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.926244][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1709'. [ 486.940119][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1709'. [ 487.153120][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.195801][T10908] loop8: detected capacity change from 0 to 256 [ 487.252304][T10908] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 487.292252][ T785] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 487.513342][ T785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 487.534928][ T785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 487.781180][ T785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 487.803869][ T785] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.821180][ T785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.831518][ T785] usb 10-1: Product: syz [ 487.835882][ T785] usb 10-1: Manufacturer: syz [ 487.840662][ T785] usb 10-1: SerialNumber: syz [ 487.986983][ T785] usb 10-1: config 0 descriptor?? [ 488.496793][ T785] usb 10-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 488.530175][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 488.740153][ T785] usb 10-1: USB disconnect, device number 3 [ 489.016087][T10930] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 489.222621][T10934] loop5: detected capacity change from 0 to 512 [ 489.244285][T10934] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 489.461588][T10934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.382309][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.451826][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.485342][T10950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1726'. [ 490.721616][T10960] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1728'. [ 491.078238][T10968] loop0: detected capacity change from 0 to 128 [ 491.203859][T10968] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.218626][T10968] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.839786][T10974] loop9: detected capacity change from 0 to 512 [ 491.882334][T10974] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 492.020555][T10974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.364312][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.383526][T10983] veth0_to_bond: entered allmulticast mode [ 493.876833][ T9728] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.040705][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1736'. [ 494.249068][T10996] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1740'. [ 494.301517][T11000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.415679][T11020] loop9: detected capacity change from 0 to 128 [ 497.434638][T11021] loop8: detected capacity change from 0 to 1024 [ 497.446030][T11021] EXT4-fs: Ignoring removed i_version option [ 497.762064][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1748'. [ 499.239875][T11020] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 499.240349][T11020] EXT4-fs: failed to create workqueue [ 499.255579][T11020] EXT4-fs (loop9): mount failed [ 499.275972][T11021] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.286875][T11021] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 499.287294][T11021] EXT4-fs: failed to create workqueue [ 499.302375][T11021] EXT4-fs (loop8): mount failed [ 499.744343][T11031] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1751'. [ 500.205773][T11036] loop0: detected capacity change from 0 to 256 [ 500.304358][T11038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.388984][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.398659][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.690343][T11052] loop0: detected capacity change from 0 to 512 [ 502.728616][T11052] EXT4-fs (loop0): Invalid log block size: 32768 [ 502.820698][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1758'. [ 502.950390][T11059] vlan2: entered promiscuous mode [ 502.955801][T11059] bridge0: entered promiscuous mode [ 504.057727][T11065] loop9: detected capacity change from 0 to 1024 [ 504.099344][T11069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1762'. [ 504.205162][T11073] loop5: detected capacity change from 0 to 16 [ 504.230290][T11073] erofs: (device loop5): mounted with root inode @ nid 36. [ 506.203356][T11065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.248531][T11065] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.315895][T11081] netlink: 'syz.5.1765': attribute type 13 has an invalid length. [ 506.569215][T11081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.030019][T11100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.680538][T11078] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 507.948415][T10031] EXT4-fs error (device loop9): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:43: lblock 1 mapped to illegal pblock 1 (length 15) [ 507.985907][T10031] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 508.009018][T10031] EXT4-fs (loop9): This should not happen!! Data will be lost [ 508.009018][T10031] [ 508.046080][T11109] loop8: detected capacity change from 0 to 256 [ 508.066463][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.121866][T11109] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 510.813241][T11132] loop5: detected capacity change from 0 to 1024 [ 510.893654][T11132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.957397][T11132] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.393995][T11145] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1783'. [ 511.419850][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1783'. [ 512.378140][T11150] loop9: detected capacity change from 0 to 4096 [ 512.417306][T11150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.469694][T11152] loop8: detected capacity change from 0 to 512 [ 512.543283][T11152] EXT4-fs (loop8): too many log groups per flexible block group [ 512.567231][T11152] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 512.577174][T11152] EXT4-fs (loop8): mount failed [ 512.714173][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.405473][T10058] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:61: lblock 1 mapped to illegal pblock 1 (length 15) [ 513.463638][T10058] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 513.524988][T10058] EXT4-fs (loop5): This should not happen!! Data will be lost [ 513.524988][T10058] [ 514.626094][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.034713][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1793'. [ 515.061627][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 515.338980][T10058] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.391177][T10058] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.537128][T10058] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.563338][T10058] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.701677][T10058] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.744296][T10058] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.976763][T10058] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.012462][T10058] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.144986][T11195] loop5: detected capacity change from 0 to 1024 [ 516.448850][T11195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.501705][T11195] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.889243][T10058] tipc: Disabling bearer [ 517.263844][T10058] tipc: Left network mode [ 517.733358][T11205] syz.8.1803[11205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.733575][T11205] syz.8.1803[11205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.758337][T11205] loop8: detected capacity change from 0 to 512 [ 517.777242][T11205] EXT4-fs: Ignoring removed nobh option [ 521.429531][T11136] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 521.455476][T11205] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 521.455943][T11205] EXT4-fs: failed to create workqueue [ 521.471144][T11205] EXT4-fs (loop8): mount failed [ 521.675086][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.712877][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.724778][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.757770][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.771676][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.779352][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.893016][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 521.941229][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 521.941229][ T12] [ 521.958799][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 521.965627][ T12] EXT4-fs (loop5): Free/Dirty block details [ 521.971868][ T12] EXT4-fs (loop5): free_blocks=4293918720 [ 521.977806][ T12] EXT4-fs (loop5): dirty_blocks=16 [ 521.985183][ T12] EXT4-fs (loop5): Block reservation details [ 521.991539][ T12] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 522.003050][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.192636][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1807'. [ 522.212953][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 523.267895][T11227] loop0: detected capacity change from 0 to 1024 [ 523.275351][T11227] EXT4-fs: Ignoring removed i_version option [ 523.282701][T11227] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 523.314118][T11227] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1809: Invalid block bitmap block 0 in block_group 0 [ 523.334578][T11227] Quota error (device loop0): write_blk: dquota write failed [ 523.342161][T11227] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 523.352342][T11227] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1809: Failed to acquire dquot type 0 [ 523.368442][T11227] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.1809: Freeing blocks not in datazone - block = 0, count = 4096 [ 523.382892][T11227] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1809: Invalid inode bitmap blk 0 in block_group 0 [ 523.401353][T11227] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 523.431697][T11227] EXT4-fs (loop0): 1 orphan inode deleted [ 523.438856][T11227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.468581][ T1084] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 523.498988][ T1084] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0 [ 523.834724][ T5801] Bluetooth: hci0: command tx timeout [ 523.890632][T11237] netlink: 'syz.5.1812': attribute type 13 has an invalid length. [ 523.936076][T11237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.031607][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.043807][T11241] loop8: detected capacity change from 0 to 1024 [ 524.112883][T11241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.159026][T11241] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.178059][T11207] chnl_net:caif_netlink_parms(): no params data found [ 524.837367][ T1084] EXT4-fs error (device loop8): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 15) [ 524.918992][ T1084] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 524.960747][ T1084] EXT4-fs (loop8): This should not happen!! Data will be lost [ 524.960747][ T1084] [ 524.993686][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.000917][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.009454][T11207] bridge_slave_0: entered allmulticast mode [ 525.016271][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.030236][T11207] bridge_slave_0: entered promiscuous mode [ 525.053573][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.061625][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.068890][T11207] bridge_slave_1: entered allmulticast mode [ 525.174541][T11207] bridge_slave_1: entered promiscuous mode [ 525.321519][T10058] hsr_slave_0: left promiscuous mode [ 525.341929][T10058] hsr_slave_1: left promiscuous mode [ 525.391353][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.398820][T10058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.407311][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.414977][T10058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.423334][T10058] bridge_slave_1: left allmulticast mode [ 525.428998][T10058] bridge_slave_1: left promiscuous mode [ 525.473556][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.502317][T10058] bridge_slave_0: left allmulticast mode [ 525.508034][T10058] bridge_slave_0: left promiscuous mode [ 525.521693][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.645004][T10058] veth1_macvtap: left promiscuous mode [ 525.650701][T10058] veth0_macvtap: left promiscuous mode [ 525.671338][T10058] veth1_vlan: left promiscuous mode [ 525.676751][T10058] veth0_vlan: left promiscuous mode [ 525.922908][ T5801] Bluetooth: hci0: command tx timeout [ 526.214238][T11264] loop0: detected capacity change from 0 to 512 [ 526.221673][T11264] EXT4-fs: Ignoring removed nobh option [ 528.743808][ T5801] Bluetooth: hci0: command tx timeout [ 528.828050][T11264] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 528.828524][T11264] EXT4-fs: failed to create workqueue [ 528.843773][T11264] EXT4-fs (loop0): mount failed [ 530.651598][T10058] team0 (unregistering): Port device team_slave_1 removed [ 530.887468][ T5801] Bluetooth: hci0: command tx timeout [ 531.382831][T10058] team0 (unregistering): Port device team_slave_0 removed [ 531.450085][T10058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.512528][T10058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.186426][T10058] bond0 (unregistering): Released all slaves [ 532.337532][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.379492][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.668232][T11207] team0: Port device team_slave_0 added [ 532.762642][T11289] loop5: detected capacity change from 0 to 128 [ 534.688999][T11289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.703428][T11289] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 535.962705][ T8966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.973913][T11207] team0: Port device team_slave_1 added [ 536.056212][T11300] 9pnet_fd: Insufficient options for proto=fd [ 536.272398][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.279420][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.379476][T11307] loop0: detected capacity change from 0 to 16 [ 536.741586][T11307] erofs: (device loop0): mounted with root inode @ nid 36. [ 536.832427][T11307] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 537.454161][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.476958][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.534711][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.567386][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.851621][T11314] loop5: detected capacity change from 0 to 16 [ 539.762915][T11314] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 543.992889][T11207] hsr_slave_0: entered promiscuous mode [ 544.031992][T11207] hsr_slave_1: entered promiscuous mode [ 544.050444][T11207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.090957][T11207] Cannot create hsr debugfs directory [ 545.732052][T11344] loop5: detected capacity change from 0 to 128 [ 545.883296][T11344] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.910811][T11344] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 547.119220][T11352] loop0: detected capacity change from 0 to 1024 [ 547.256605][T11352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.366616][T11352] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.393103][T11207] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 547.543251][T11207] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 547.705342][T11207] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 548.047594][T11207] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 548.063959][ T8966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.572881][T11367] loop8: detected capacity change from 0 to 512 [ 548.642980][T11367] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 548.672879][T11364] loop5: detected capacity change from 0 to 512 [ 548.727408][T11367] EXT4-fs (loop8): 1 truncate cleaned up [ 548.745608][T11367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.813927][T11367] EXT4-fs error (device loop8): __ext4_iget:5053: inode #12: block 2: comm syz.8.1840: invalid block [ 548.856622][T11367] EXT4-fs (loop8): Remounting filesystem read-only [ 549.123181][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.134095][T11364] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #3: comm syz.5.1841: corrupted inode contents [ 549.202825][T11364] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #3: comm syz.5.1841: mark_inode_dirty error [ 549.246376][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.277608][T11364] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #3: comm syz.5.1841: corrupted inode contents [ 549.325281][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.332564][T10013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.361520][T11364] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1841: mark_inode_dirty error [ 549.393658][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.400916][T10013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.447389][T11364] Quota error (device loop5): write_blk: dquota write failed [ 549.471477][T11364] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 549.528378][T11364] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1841: Failed to acquire dquot type 0 [ 549.590573][ T9728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.639805][T11364] EXT4-fs (loop5): 1 orphan inode deleted [ 549.679252][T11364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.722105][T11364] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.749024][T10016] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 549.778154][T10016] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:32: Failed to release dquot type 1 [ 549.835036][T11364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.576600][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.853354][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.689641][T11409] loop8: detected capacity change from 0 to 1024 [ 553.904740][T11409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.921481][T11409] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.173478][T11207] veth0_vlan: entered promiscuous mode [ 554.243235][T11207] veth1_vlan: entered promiscuous mode [ 554.445105][T11207] veth0_macvtap: entered promiscuous mode [ 554.479305][T11207] veth1_macvtap: entered promiscuous mode [ 554.506581][ T7654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.531734][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.580297][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.683133][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.694199][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.706336][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.728360][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.738745][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.749640][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.770064][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.782258][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.793997][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.812421][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.836203][T11420] input: syz0 as /devices/virtual/input/input5 [ 554.846147][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.867227][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.879623][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.890557][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.901972][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.912545][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.061756][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.096259][T11424] loop8: detected capacity change from 0 to 128 [ 555.521845][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.897094][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.971606][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.041458][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.068183][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.101396][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.121184][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.132113][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.142332][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.154071][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.167312][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.179097][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.192118][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.203141][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.213688][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.224750][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.236765][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.249354][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.266335][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.299118][T11430] loop5: detected capacity change from 0 to 16 [ 556.315432][T11430] erofs: (device loop5): mounted with root inode @ nid 36. [ 556.812560][T11207] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.969496][T11207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.123800][T11207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.163947][T11207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.751547][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1859'. [ 558.770968][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1859'. [ 558.996815][T11449] syz.5.1858[11449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.997907][T11449] syz.5.1858[11449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.060388][T11449] loop5: detected capacity change from 0 to 512 [ 559.084234][T11449] EXT4-fs: Ignoring removed nobh option [ 559.273108][T11449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.572720][ T8966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.739322][T10049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.774971][T10049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.835533][T11455] ------------[ cut here ]------------ [ 560.841126][T11455] Please remove unsupported % in format string [ 560.848514][T11455] WARNING: CPU: 0 PID: 11455 at lib/vsprintf.c:2679 format_decode+0xcfd/0x13d0 [ 560.857631][T11455] Modules linked in: [ 560.861639][T11455] CPU: 0 PID: 11455 Comm: syz.5.1861 Not tainted 6.6.96-syzkaller #0 [ 560.869776][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.880009][T11455] RIP: 0010:format_decode+0xcfd/0x13d0 [ 560.885616][T11455] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 560.905340][T11455] RSP: 0018:ffffc9000421f888 EFLAGS: 00010246 [ 560.911558][T11455] RAX: d0b7b167610fa300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 560.919592][T11455] RDX: ffffc9000d42c000 RSI: 0000000000003391 RDI: 0000000000003392 [ 560.927692][T11455] RBP: ffff0000ffffff00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 560.935778][T11455] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff92000843f55 [ 560.943889][T11455] R13: 0000000000000000 R14: ffffc9000421faac R15: ffff0a00ffffff00 [ 560.951963][T11455] FS: 00007fea5dbde6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 560.960952][T11455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.967667][T11455] CR2: 00007fea5dbddf98 CR3: 000000006cfd8000 CR4: 00000000003506f0 [ 560.975754][T11455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.983853][T11455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.991925][T11455] Call Trace: [ 560.995248][T11455] [ 560.998243][T11455] bstr_printf+0xc4/0xf90 [ 561.002698][T11455] ? lock_chain_count+0x20/0x20 [ 561.007610][T11455] ? bpf_trace_printk+0xc2/0x190 [ 561.012684][T11455] bpf_trace_printk+0x10f/0x190 [ 561.017599][T11455] ? ktime_get+0x7f/0x280 [ 561.022050][T11455] ? bpf_probe_write_user+0xe0/0xe0 [ 561.027313][T11455] ? bpf_prog_test_run+0x321/0x390 [ 561.032574][T11455] ? __local_bh_disable_ip+0xf2/0x190 [ 561.038011][T11455] ? read_tsc+0x9/0x20 [ 561.042165][T11455] ? ktime_get+0x24b/0x280 [ 561.046625][T11455] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 561.052185][T11455] bpf_test_run+0x340/0x8a0 [ 561.056733][T11455] ? bpf_test_run+0x1da/0x8a0 [ 561.061498][T11455] ? convert___skb_to_skb+0x590/0x590 [ 561.066937][T11455] ? eth_get_headlen+0x200/0x200 [ 561.072041][T11455] ? slab_build_skb+0x25f/0x3f0 [ 561.076953][T11455] ? convert___skb_to_skb+0x3d/0x590 [ 561.082367][T11455] bpf_prog_test_run_skb+0xa67/0x11c0 [ 561.087818][T11455] ? cpu_online+0x60/0x60 [ 561.092260][T11455] bpf_prog_test_run+0x321/0x390 [ 561.097224][T11455] __sys_bpf+0x440/0x800 [ 561.101623][T11455] ? bpf_link_show_fdinfo+0x350/0x350 [ 561.107033][T11455] ? lock_chain_count+0x20/0x20 [ 561.111959][T11455] __x64_sys_bpf+0x7c/0x90 [ 561.116395][T11455] do_syscall_64+0x55/0xb0 [ 561.120828][T11455] ? clear_bhb_loop+0x40/0x90 [ 561.125562][T11455] ? clear_bhb_loop+0x40/0x90 [ 561.130258][T11455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.136209][T11455] RIP: 0033:0x7fea5dd8e929 [ 561.140642][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.160330][T11455] RSP: 002b:00007fea5dbde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.168799][T11455] RAX: ffffffffffffffda RBX: 00007fea5dfb6080 RCX: 00007fea5dd8e929 [ 561.176830][T11455] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 561.184901][T11455] RBP: 00007fea5de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 561.193007][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.201008][T11455] R13: 0000000000000000 R14: 00007fea5dfb6080 R15: 00007fff9ed66398 [ 561.209125][T11455] [ 561.212200][T11455] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 561.219483][T11455] CPU: 0 PID: 11455 Comm: syz.5.1861 Not tainted 6.6.96-syzkaller #0 [ 561.227554][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.237624][T11455] Call Trace: [ 561.240910][T11455] [ 561.243846][T11455] dump_stack_lvl+0x16c/0x230 [ 561.248541][T11455] ? show_regs_print_info+0x20/0x20 [ 561.253772][T11455] ? load_image+0x3b0/0x3b0 [ 561.258313][T11455] panic+0x2c0/0x710 [ 561.262228][T11455] ? bpf_jit_dump+0xd0/0xd0 [ 561.266843][T11455] __warn+0x2e0/0x470 [ 561.270832][T11455] ? format_decode+0xcfd/0x13d0 [ 561.275708][T11455] ? format_decode+0xcfd/0x13d0 [ 561.280591][T11455] report_bug+0x2be/0x4f0 [ 561.284939][T11455] ? format_decode+0xcfd/0x13d0 [ 561.289798][T11455] ? format_decode+0xcfd/0x13d0 [ 561.294654][T11455] ? format_decode+0xcff/0x13d0 [ 561.299510][T11455] handle_bug+0xcf/0x120 [ 561.303802][T11455] exc_invalid_op+0x1a/0x50 [ 561.308321][T11455] asm_exc_invalid_op+0x1a/0x20 [ 561.313179][T11455] RIP: 0010:format_decode+0xcfd/0x13d0 [ 561.318746][T11455] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 561.338361][T11455] RSP: 0018:ffffc9000421f888 EFLAGS: 00010246 [ 561.344445][T11455] RAX: d0b7b167610fa300 RBX: dffffc0000000000 RCX: 0000000000080000 [ 561.352422][T11455] RDX: ffffc9000d42c000 RSI: 0000000000003391 RDI: 0000000000003392 [ 561.360401][T11455] RBP: ffff0000ffffff00 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 561.368401][T11455] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff92000843f55 [ 561.376389][T11455] R13: 0000000000000000 R14: ffffc9000421faac R15: ffff0a00ffffff00 [ 561.384393][T11455] ? format_decode+0xcfd/0x13d0 [ 561.389269][T11455] bstr_printf+0xc4/0xf90 [ 561.393608][T11455] ? lock_chain_count+0x20/0x20 [ 561.398461][T11455] ? bpf_trace_printk+0xc2/0x190 [ 561.403416][T11455] bpf_trace_printk+0x10f/0x190 [ 561.408284][T11455] ? ktime_get+0x7f/0x280 [ 561.412629][T11455] ? bpf_probe_write_user+0xe0/0xe0 [ 561.417841][T11455] ? bpf_prog_test_run+0x321/0x390 [ 561.422964][T11455] ? __local_bh_disable_ip+0xf2/0x190 [ 561.428349][T11455] ? read_tsc+0x9/0x20 [ 561.432456][T11455] ? ktime_get+0x24b/0x280 [ 561.436907][T11455] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 561.442417][T11455] bpf_test_run+0x340/0x8a0 [ 561.446984][T11455] ? bpf_test_run+0x1da/0x8a0 [ 561.451670][T11455] ? convert___skb_to_skb+0x590/0x590 [ 561.457052][T11455] ? eth_get_headlen+0x200/0x200 [ 561.462004][T11455] ? slab_build_skb+0x25f/0x3f0 [ 561.466863][T11455] ? convert___skb_to_skb+0x3d/0x590 [ 561.472159][T11455] bpf_prog_test_run_skb+0xa67/0x11c0 [ 561.477571][T11455] ? cpu_online+0x60/0x60 [ 561.481914][T11455] bpf_prog_test_run+0x321/0x390 [ 561.486866][T11455] __sys_bpf+0x440/0x800 [ 561.491124][T11455] ? bpf_link_show_fdinfo+0x350/0x350 [ 561.496537][T11455] ? lock_chain_count+0x20/0x20 [ 561.501404][T11455] __x64_sys_bpf+0x7c/0x90 [ 561.505835][T11455] do_syscall_64+0x55/0xb0 [ 561.510259][T11455] ? clear_bhb_loop+0x40/0x90 [ 561.514944][T11455] ? clear_bhb_loop+0x40/0x90 [ 561.519628][T11455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.525528][T11455] RIP: 0033:0x7fea5dd8e929 [ 561.529953][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.549564][T11455] RSP: 002b:00007fea5dbde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.557982][T11455] RAX: ffffffffffffffda RBX: 00007fea5dfb6080 RCX: 00007fea5dd8e929 [ 561.565959][T11455] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 561.573936][T11455] RBP: 00007fea5de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 561.581950][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.589936][T11455] R13: 0000000000000000 R14: 00007fea5dfb6080 R15: 00007fff9ed66398 [ 561.597929][T11455] [ 561.601226][T11455] Kernel Offset: disabled [ 561.605616][T11455] Rebooting in 86400 seconds..