last executing test programs: 4m50.982490308s ago: executing program 0 (id=52): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000, 0x0) 4m50.732896088s ago: executing program 0 (id=53): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flistxattr(r2, 0x0, 0x0) 4m49.085476892s ago: executing program 0 (id=57): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb04001800000000000000240000002400000002000000000000000200000f05"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) 4m44.915528522s ago: executing program 0 (id=65): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x10}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000545c4dd7756e060000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xffffff63) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 4m41.959881599s ago: executing program 0 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x7a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setreuid(0x0, 0xee01) 4m40.564166232s ago: executing program 0 (id=76): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) getuid() 4m25.465270157s ago: executing program 32 (id=76): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) getuid() 2m51.270000089s ago: executing program 2 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000160000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) 2m50.045850921s ago: executing program 2 (id=392): r0 = io_uring_setup(0x6b52, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) 2m48.874754034s ago: executing program 2 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2m48.626263865s ago: executing program 2 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) io_setup(0xffff7135, &(0x7f0000000240)=0x0) io_getevents(r3, 0xf29, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7cd, &(0x7f0000001780)="$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") r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43]}, 0x33) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 2m47.384132548s ago: executing program 2 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000160000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) 2m44.375904515s ago: executing program 2 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendfile(r5, r4, 0x0, 0x1000) 2m43.984567795s ago: executing program 33 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendfile(r5, r4, 0x0, 0x1000) 2m18.096233486s ago: executing program 1 (id=510): r0 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f00000001c0)={0x2, 0xfffb, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="a905000000007464005cfe9e0574a2000000003552ff7fc164c65ba7e0a4fec85009d239", 0x24}], 0x1}}], 0x1, 0x24040080) 2m16.79212334s ago: executing program 1 (id=514): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c757466383d302c726f6469722c757466383d302c726f6469722c696f636861727365743d6d6163726f6d616e2c73686f77657865632c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c00f395f574a499af5e6cdfaa1a85f1ed7bd2a302c79bac684196a181472941f3e8d5f0c25b6b1c813a1a585c9a4b2e13d0e6703ebf775aedddb03cfe9b5b41dbb7f281b7a692d1565d86f1141aeb77ef42aecc9119695ebc164be81adcb319b0a2625908bc71d4ed437b3a8a4bb41531458712657ad8b2849b1b9667bd67ae74df4e33d4f2e6346539944f4a70793058926800"/288], 0x3, 0x36c, &(0x7f00000006c0)="$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") socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) 2m14.187628685s ago: executing program 1 (id=523): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000180), 0xfb, 0x5bb, &(0x7f0000000b40)="$eJzs3d9rk1cfAPDvk7ZWre9rBZH3fS9eBBlzOFPb7ocDYe5yOJmw3WtoY5GmRppUbCdML+bNboYMxpggu99uxy5l14P9BbsUtoIMKRtsDDKe5EnXH0lba2w68/nA05zz/Mg5J+dHz8mTkAB61tH0Ty7ivxHxSRJxcMWx/sgOHm2ct/T45kS6JVGrvfdLEklELYmYaJ6fZI9DWeQ/EfHdRxEncuvTrcwvTBdKpeJsFh+pzlwbqcwvnLwy03ya8dOvjo+98fprHSvrSxd++/zdB2+f/vjY0mdfLx66m8TZOJAdW9rTkSRurYwcLfyZhQbi7JoTRzuS3O6RVdr31frD0IPu5oat6sv6+UCkY8DB6Mt6PfD8+zAiakCPSvR/6FHNeUBzbZ9u3Z2R7KxHbzUWQOvL3994byT21tdG+5eSVSujdL073IH00zS+/fne3XSLrB7anLpvkzjAE7l1OyJO9fevH/+SbPzbvlP1N483tjaN9ePfwFPmAmjnQTr/ebnV/Ce3PP+JFvOfoRZ9dzs27/+5xQ4k01Y6/zvTcv67PHQN92Wxf9XnfAPJ5Sul4qmI+HdEHI+BwTS+0f2c00sPa+2OrZz/pVuafnMumOVjsX9w9TWThWrhacq80qPbEf9rOf9Nlus/aVH/6etxYYtpHCne+3+7Y5uX/9mqfRnxYsv6T5bPSVbfnyxMFaeKV8fGm/cnR+rtYaTZKtb79c6RH1bvub8c6nb5f3yhsQ7coPzDycr7tZXV15/Zwr/n+3v/KLY7toX2H9Gi/e9J3q+Hm7dtbxSq1dnRiD3JO+v3j/19bTNefxxstP/jx1bX/3CW7kbtP118XVqO7d2w/HcO37m0/fI/W2n5Jzdu/2vqv1Xgm1qt1ubQdKH08NwHXzSe6qttlD8d/16ph45ne7Yy/rXKaV+LDD7t6wcAAAAAAAC7SS4iDkSSyy+Hc7l8vvH5jsOxP1cqV6onLpfnrk5G/buywzGQa97pPrji8xCj2edhm/GxNfHxiDgUEZ/27avH8xPl0mS3Cw8AAAAAAAAAAAAAAAAAAAC7xFCb7/+nfurrdu6AZ67+wwaD3c4F0A2b/uR/J37pCdiVNu3/wHNL/4fepf9D79L/oXfp/9C79H/oXfo/9C79HwAAAAAAAAAAAAAAAAAAAAAAAAAAADrqwvnz6VZbenxzIo1PXp+fmy5fPzlZrEznZ+Ym8hPl2Wv5qXJ5qlTMT5RnNnu+Url8bXQs5m6MVIuV6khlfuHiTHnuavXilZnCVN/F4sCOlAoAAAAAAAAAAAAAAAAAAAD+WSrzC9OFUqk4K9A28GbsbKK/1xqKs5XYoQI2PNlVg42Xpb++Z98TX755YPHcLmkAPRno8sAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8FQAA//8jLDtq") mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe3c) 2m11.633634982s ago: executing program 1 (id=531): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) accept(0xffffffffffffffff, 0x0, 0x0) r5 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRESDEC, @ANYRES32=r5], 0x1, 0x52b, &(0x7f0000001600)="$eJzs1bGKE1EUBuCz2bhGq63F4oKN1bLaWRmRLCwOCEoErQxsbDIiZJpJqn0EH8AHs/AhJNV2kWUS466WzkxIvq/J4f6ZOfdchpmPDz9PLr4Un75//Ra9/kF0+nGvc3UQx9GJtcsAAHbJ1XIZP5eVtvcCADTD9x8A9s/b9x9evciywZuUehGLy3JYDqvfKj87zwan6drRH1ctynJ4+Dt/kio38ztxf5U//Wd+FI8fVfl19vJ1diu/Gxe1Tw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvtJKVuRKSU0vFmdVGWw8MqP0lrt/KqOjvPBqerP9zMu/Gg29gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9QzOaTUZ6PpztWRPyIhpv2Vkdae693EbFZ6a/absvJ11k8r+POzyJiWwZsuli/BjYP718RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwb4rZfDLK8/G0aHsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2KGbzySjPx9Mai7ZnBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrxKwAA//9LaiYQ") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000ffc219352e110000000000030000005800028044000400200001000a000000000000005b8000000000000000000000000000200002000a0002000000000000000000000000000000000000000000000000000d"], 0x6c}}, 0x0) 2m8.27140731s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) 2m6.792175463s ago: executing program 1 (id=549): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) accept(r4, 0x0, 0x0) r5 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRESDEC, @ANYRES32=r5], 0x1, 0x52b, &(0x7f0000001600)="$eJzs1bGKE1EUBuCz2bhGq63F4oKN1bLaWRmRLCwOCEoErQxsbDIiZJpJqn0EH8AHs/AhJNV2kWUS466WzkxIvq/J4f6ZOfdchpmPDz9PLr4Un75//Ra9/kF0+nGvc3UQx9GJtcsAAHbJ1XIZP5eVtvcCADTD9x8A9s/b9x9evciywZuUehGLy3JYDqvfKj87zwan6drRH1ctynJ4+Dt/kio38ztxf5U//Wd+FI8fVfl19vJ1diu/Gxe1Tw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvtJKVuRKSU0vFmdVGWw8MqP0lrt/KqOjvPBqerP9zMu/Gg29gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9QzOaTUZ6PpztWRPyIhpv2Vkdae693EbFZ6a/absvJ11k8r+POzyJiWwZsuli/BjYP718RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwb4rZfDLK8/G0aHsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2KGbzySjPx9Mai7ZnBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrxKwAA//9LaiYQ") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000ffc219352e110000000000030000005800028044000400200001000a000000000000005b8000000000000000000000000000200002000a0002000000000000000000000000000000000000000000000000000d"], 0x6c}}, 0x0) 1m54.720126561s ago: executing program 6 (id=582): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000005e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 1m54.328034022s ago: executing program 6 (id=587): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m53.958318513s ago: executing program 6 (id=589): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$inet(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}, 0x0) 1m51.444291209s ago: executing program 34 (id=549): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) accept(r4, 0x0, 0x0) r5 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRESDEC, @ANYRES32=r5], 0x1, 0x52b, &(0x7f0000001600)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000ffc219352e110000000000030000005800028044000400200001000a000000000000005b8000000000000000000000000000200002000a0002000000000000000000000000000000000000000000000000000d"], 0x6c}}, 0x0) 1m51.424504129s ago: executing program 6 (id=594): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x9, 0x10001, 0x9, 0x6, 0x0, 0x9, 0x2, 0x1, 0x9, 0x1, 0x3, 0xca80, 0x2, 0x4, 0xa1, 0xd1, 0x1000000, 0xa, 0x8354, 0x6, 0x3, 0x7, 0x5, 0x2, 0xffff, 0x6, 0x8001, 0x80000000, 0xb9, 0xb, 0x2, 0xa0, 0x2ced, 0xfffff800, 0x3, 0x3, 0x3, 0x1d6, 0xd66c0000, 0x1, 0x101, 0xbf66, 0x101, 0x0, 0x4e3493f6, 0xb, 0x8, 0x1ff, 0x7, 0xfffffffc, 0xb05, 0x400, 0x40, 0x1, 0x2, 0x6, 0x4, 0x1, 0x5, 0x9d, 0xdd, 0x5, 0x4, 0xfffffffd, 0x10000, 0x3, 0x10001, 0x2, 0x8, 0x8, 0x3, 0x10000, 0x5, 0x5, 0x7b29, 0xff, 0x2cd4, 0x6, 0x5bed50f0, 0x4, 0x40, 0xfffffff8, 0x1, 0x8, 0x401, 0x632199cd, 0x4, 0x6, 0x2, 0x2, 0x7, 0x4, 0x3ff, 0x0, 0x7fff, 0x1, 0x6, 0x0, 0x0, 0x9, 0x400, 0x7, 0x81, 0x4, 0x0, 0x1, 0x80000001, 0x8, 0x3, 0x1, 0x8000, 0xfffffff9, 0x3, 0xe, 0x5, 0x2, 0x100, 0x1, 0x80, 0x6, 0x1, 0x6, 0xa04, 0x0, 0x80000000, 0x6, 0x0, 0x4, 0x2, 0x4a, 0x8, 0x0, 0x14, 0x4, 0xd, 0x25b, 0x2, 0xe, 0x3, 0x8001, 0x6, 0xa955, 0x8, 0x8, 0xffff, 0xb, 0x3, 0x20000000, 0xffffffff, 0x1, 0x1, 0x6, 0x2, 0x6e, 0x13, 0x0, 0x2, 0x9, 0x0, 0xfffffffd, 0x8, 0xff, 0x4, 0x8, 0x5, 0x5, 0x80, 0x80000000, 0x96c0, 0x7, 0xe, 0xffffffb6, 0x3, 0x5114, 0x58, 0x9, 0x8, 0x8, 0x2, 0x0, 0x5, 0x3, 0x9, 0x9, 0x6, 0x2, 0x40, 0xc, 0xdb23, 0xff, 0x8, 0x7ff, 0x401, 0x2, 0x200, 0xd6, 0xfffffffc, 0xfff, 0x5a1, 0xfffffff8, 0x4, 0x4, 0x10000, 0x7, 0x2, 0x8, 0x7d292747, 0x1, 0x6, 0x1, 0x5e2, 0x3ff, 0x9, 0xc, 0xfffffe01, 0x9, 0xd220, 0x2, 0x8, 0x1, 0x63037f66, 0x387, 0x6, 0x7, 0x3, 0x0, 0x20000000, 0xf, 0xfffffc00, 0x2, 0x8, 0xd691, 0x3, 0xfffffffd, 0x1, 0x67f0, 0x7, 0x8, 0x4, 0x1, 0x8, 0x3, 0x5, 0xb, 0x45e3, 0x0, 0x5, 0x86, 0x401, 0x4, 0xd, 0x4, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffa3, 0x0, 0x401, 0xfffffffc, 0x80000001, 0x40, 0xf, 0x7, 0x8, 0x400, 0x7, 0x7, 0x8, 0x63, 0x3ff, 0x20, 0x1ff, 0x0, 0xae9, 0x9, 0x1, 0x5, 0x7a9e3569, 0x0, 0x5, 0xc000000, 0x4, 0x81, 0xda96, 0x380000, 0x6, 0x1000, 0x2, 0x3, 0x4, 0x2, 0xfffffff7, 0x56, 0x3, 0x4, 0x3, 0x4, 0x1, 0x6, 0x5, 0x86c, 0x5863, 0x1, 0xc9, 0x1, 0x0, 0x3, 0x8, 0xa, 0x668ea10c, 0xb, 0x0, 0x2, 0x6, 0x0, 0xb, 0x92, 0x3, 0x3, 0x8, 0x5, 0x8, 0xd7c6, 0x50, 0x8, 0x3, 0x7fffffff, 0x0, 0xa458, 0x0, 0x6, 0x0, 0x800, 0x8, 0x7, 0x7, 0x3, 0x0, 0xfffff82d, 0x7, 0x1, 0x8, 0x7f, 0x9, 0x4, 0x3ff, 0x0, 0x7, 0x2, 0x8, 0x8d, 0xb655, 0x2, 0x1, 0xffffff15, 0x1, 0xb6e1, 0x9, 0x9, 0x10001, 0x65, 0xc, 0x7, 0x10, 0xf, 0x40, 0xffff8452, 0x6, 0x6, 0x8e44, 0x5f39, 0xb, 0x2, 0xffff, 0x7, 0x7ffffffe, 0x8, 0x4, 0xf, 0x6, 0x0, 0x2, 0x3, 0xc87d, 0x14, 0x4, 0x8000, 0x8, 0x101, 0x7, 0x10000, 0x6, 0x2, 0x6, 0x9, 0x6, 0x6, 0x2, 0x9, 0x3, 0xfffffffb, 0x8, 0x68, 0x7, 0x2, 0x5, 0x0, 0x4, 0x2, 0x85, 0xa, 0x1, 0xfffffe01, 0x6, 0x7, 0x1, 0x100, 0xfffffff7, 0xfffffff8, 0x0, 0x2, 0xffff, 0xfff, 0x7, 0x5, 0x7, 0xfe6e, 0x3, 0xfffffffe, 0x3, 0x7, 0x8f, 0xffffff00, 0x0, 0x8001, 0xc42f, 0x7, 0x9, 0x2, 0x4, 0x4, 0x9, 0x7, 0xcd, 0x6, 0x0, 0x5, 0xa49, 0x2, 0x200, 0x0, 0x6, 0x5, 0x4, 0x4, 0x0, 0x5, 0x352b, 0x0, 0x7ff, 0x1, 0x3, 0x9, 0x9, 0xb9, 0x98, 0x8, 0x200, 0x7, 0x1ff, 0x401, 0xa9d, 0xe6ab14, 0x9, 0xfffffffd, 0x1, 0x7fff, 0xc, 0xfff, 0xa, 0x7ff, 0x0, 0x5, 0x400, 0x6, 0x7f, 0x0, 0x8000, 0xfff, 0x8, 0x7, 0x4e, 0x11e, 0xf, 0x5, 0x1, 0x200, 0x9, 0x8001, 0x5, 0x400, 0x6, 0x1, 0x3, 0xa, 0x68, 0xfffffffd, 0x6, 0x3, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x34, 0x4, 0x1000, 0x1, 0x0, {0x3, 0x1, 0x4, 0x6, 0x0, 0x52}, {0x4, 0x0, 0x5, 0x8, 0x85d, 0x4}, 0xffff31c4, 0x8, 0x9}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}]}, 0x884}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m50.600837831s ago: executing program 6 (id=599): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000180), 0xfb, 0x5bb, &(0x7f0000000b40)="$eJzs3d9rk1cfAPDvk7ZWre9rBZH3fS9eBBlzOFPb7ocDYe5yOJmw3WtoY5GmRppUbCdML+bNboYMxpggu99uxy5l14P9BbsUtoIMKRtsDDKe5EnXH0lba2w68/nA05zz/Mg5J+dHz8mTkAB61tH0Ty7ivxHxSRJxcMWx/sgOHm2ct/T45kS6JVGrvfdLEklELYmYaJ6fZI9DWeQ/EfHdRxEncuvTrcwvTBdKpeJsFh+pzlwbqcwvnLwy03ya8dOvjo+98fprHSvrSxd++/zdB2+f/vjY0mdfLx66m8TZOJAdW9rTkSRurYwcLfyZhQbi7JoTRzuS3O6RVdr31frD0IPu5oat6sv6+UCkY8DB6Mt6PfD8+zAiakCPSvR/6FHNeUBzbZ9u3Z2R7KxHbzUWQOvL3994byT21tdG+5eSVSujdL073IH00zS+/fne3XSLrB7anLpvkzjAE7l1OyJO9fevH/+SbPzbvlP1N483tjaN9ePfwFPmAmjnQTr/ebnV/Ce3PP+JFvOfoRZ9dzs27/+5xQ4k01Y6/zvTcv67PHQN92Wxf9XnfAPJ5Sul4qmI+HdEHI+BwTS+0f2c00sPa+2OrZz/pVuafnMumOVjsX9w9TWThWrhacq80qPbEf9rOf9Nlus/aVH/6etxYYtpHCne+3+7Y5uX/9mqfRnxYsv6T5bPSVbfnyxMFaeKV8fGm/cnR+rtYaTZKtb79c6RH1bvub8c6nb5f3yhsQ7coPzDycr7tZXV15/Zwr/n+3v/KLY7toX2H9Gi/e9J3q+Hm7dtbxSq1dnRiD3JO+v3j/19bTNefxxstP/jx1bX/3CW7kbtP118XVqO7d2w/HcO37m0/fI/W2n5Jzdu/2vqv1Xgm1qt1ubQdKH08NwHXzSe6qttlD8d/16ph45ne7Yy/rXKaV+LDD7t6wcAAAAAAAC7SS4iDkSSyy+Hc7l8vvH5jsOxP1cqV6onLpfnrk5G/buywzGQa97pPrji8xCj2edhm/GxNfHxiDgUEZ/27avH8xPl0mS3Cw8AAAAAAAAAAAAAAAAAAAC7xFCb7/+nfurrdu6AZ67+wwaD3c4F0A2b/uR/J37pCdiVNu3/wHNL/4fepf9D79L/oXfp/9C79H/oXfo/9C79HwAAAAAAAAAAAAAAAAAAAAAAAAAAADrqwvnz6VZbenxzIo1PXp+fmy5fPzlZrEznZ+Ym8hPl2Wv5qXJ5qlTMT5RnNnu+Url8bXQs5m6MVIuV6khlfuHiTHnuavXilZnCVN/F4sCOlAoAAAAAAAAAAAAAAAAAAAD+WSrzC9OFUqk4K9A28GbsbKK/1xqKs5XYoQI2PNlVg42Xpb++Z98TX755YPHcLmkAPRno8sAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8FQAA//8jLDtq") mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe3c) 1m48.884109045s ago: executing program 6 (id=603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x10}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 1m33.76827175s ago: executing program 35 (id=603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x10}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 11.640219303s ago: executing program 5 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7216a446a00683782c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d52dce18bd10a48b043ccc42646d25ddd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c3dc5da860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce27e698a3c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0778f23526ec0fd97f734c4c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe0f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f290276df9b7ac8d8cd249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9690100000000000000c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f00000000000000006952be5cb0417d33d3ab25493418494d9d10d76e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df7ce88282dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f7558cbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c359afe73947afebdf5536ee267258e0d613261c5ab2b8d8b63667ab3401d33b06055162ca577f0965ce0c19a11c74253755b9c544b43c442ea1e9dd43457bc644892075638fef8ae345054df1546f3e04d934e87dd5ec4d7654193e56de857e84c696eed500f80afbe140a12c83467a73bc2c0ce1e272f98f718839b041c64ac6b2fb724f7c5eb3dc217661843a5baa646e9bd8c72b7868014b8bc0e60b8fd493a762b85e470f73756342187620b771a60074e8686510085c2d3b915c10ab4b7fd90c63b8e73c264cc3917a0f4e0ce368a59cec421948be7a0d5b58c216040109f70a15738798fd9b59fe31dc2748028fde470d4252dc7aecf0b074a757662f01d43d27698ed0796cb1be1602e5e85c40822bdf9392cbf549322fc8a4219bb4ba20f3cde8bdb3702f909450db4032765d4be284d8eef7ff608fa6bf9fe4abe881acded27830f076ee6b6bef6b9000000ee2e8cbc4e89269658ea07ee7627397fbe79103b1c5fddceefd1addced50c56b0fc225aaad12819c1ddf703f4e7b65cadc071270dd42f8"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) 10.672026866s ago: executing program 4 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 9.327414679s ago: executing program 5 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x4, 0x1}, {0x4, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x4, 0x4, 0x80, 0x7}) 8.862646349s ago: executing program 4 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000010140)=@gcm_128={{0x303, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\x00', "614db5b3ffffffff"}, 0x28) 8.52422819s ago: executing program 4 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000548500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4000004) 8.50133264s ago: executing program 5 (id=863): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) io_setup(0xffff7135, &(0x7f0000000240)=0x0) io_getevents(r3, 0xf29, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7cd, &(0x7f0000001780)="$eJzs3U1sHOXdAPD/GpvkNVKEeFGIohAmgVcKUjDrNZjX4gDLemwPrHdXu+vKUVVBRBxkxQEERS05lOYCbdWq6qlH2iu33lpVaqUe2p4qlUMvvSFxqmjVSlWrqpKrmd11/LG2A3E+Cr+fFT+PZ/7zfIwn89+xPbMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAESpNlsuT5ainjWWlpMdRiIiub8fu7hj9fr6+nqvNmjvl1uKPfqNKOX/4vDhONZbdOz+a6uP5p9Ox4neVyficF4cjiv3HL336f8dHRlsv3PAN+zUdcaVIr6ZD+rS+bW1lTduwkBuoe/8fK+1o8MW/rP4vs+njazTzBar82mSdZrJzPR0+fGFuU4yl9XTzrlON11Mau202m22kzO1R5PJmZmpJJ0411xqzM9W6+lg4VOPVcrl6eT5iVZabXeajcefn+jUFrJ6PWvMFzGV8tcij3kqqc22X8i6STetLibJxdW1lan9ZpcHTe6x/sQj93781kd/W13JD8jdgkr9A7MyOVmpTE4/OfPkU+XyaKVc2bqgvE1sRMRIRB5xUw5a7hzFKXMvB3PihgMw0s//UY8sGrEUy5EM+RiLWsxGO5qxmH/9h7EdEX2D/P9/j//5d3v1uzn/D7L8sWurj0eR/0/2vjq5W/4fOtaD/Bjpj2e39W/G23ElLsX5WIu1WIk3bvqIbvBj5GDbm480GpFFJ5qRxWJUiyVJf0kSMzEd01GOF2Mh5qITScxFFvVIoxPnohPdSIsjqhbtSKMa3WhGO5I4E7V4NJKYjJmYialIIo2JOBfNWIpGzMdsVItWLsZqsd+nto3r6Dde+tkrv//4/by+ETS5x0RK+Yu5POivewTtSPfXn//Xox8h/3/RHfAZHD679UH+BwAAAD63SsVP3/Pr/7F4sKjNZfX0y7d7WAAAAMABKn7zfyIvxvLag1HKr//LQyI/vOVjAwAAAA5GqbjHrhQR4/FQrza4XWrYDwEAAACA/0LF7/9P5sV4xDvFAtf/AAAA8Dnzrd2esf/R4Bm7ndah0i/+Eu32WOlqa/mR0uVqHle9fFdvu37xpY0Wu3PHS4ej10jR1vTolXtKETFaS0+UBk+//PehXvlJ8fn46Mbmuz3rv7RtABtb3LV9SvkAjlzZNoCjRcffjVO9mFMXeuWFflz/icTjc1k9nag1608Xj0TM/3XfenX161FM/9uNxSOluLi6tjLx8mtrF4qxXM1buXq5/wDFHc9RHD6Wosf1/h6IB4fPeKy4EaPf73iv3/Lmb8DIs8XmI3v3Wdrc57txuhdzerxXjm+d/+G8z8mJpyejWj0y0k2Xu2+tb5p9fxSTNzjzd+PhXszDZx7uFUNGUdkyild3jqKyeRT9nbDPvth3FGP9A+v9U+8s//3XzVI6td8opraN4vCnHAXA7XKxeOrPtSz0P0UW+td6T57/r+XdpBfQ1z/LPbDRVH6WG6SBbWe5i7GxZrD9plw3Gjuy+/aXF7Gtl13O6Gd6MWd6rydGjw/JK+UhZ/TXV1//Tf+M/sQHP/zRV07+9iefPbt9EI/2YvpF3PerXXJsPufvNRbHB40uP9Ov/HjXfjv1SinGIu766uXX4+ibb195bPXy+VdWXll5tVKZmi4/US4/WYmx4qVCv5B7ABhi//fY2Tei9MQ+V9X3bfxJwUS8HK/FWlyIs8XdBhHx0PBWxzf9GcLZOB3FxfIuV63jm97h5ew+15bXYis7YwevK3bETm3aYw/8oCj+cRO/KQBwk53eJw9fT/4/u89199Zcvu3qOHbP5cP8/03dGwDwxZC2PymNd98rtdtZ68XJmZnJanchTdrN2gtJO5udT5Os0U3btYVqYz5NWu1mt1kb/OB4Nu0knaVWq9nuJnPNdtJqdrLl4p3fk/5bv3fSxWqjm9U6rXpa7aRJrdnoVmvdZDbr1JLW3c/Vs85C2i427rTSWjaX1ardrNlIOs2ldi2dSJJOmiatpUFgNps2utlcllcbSaudLVbbVyOivrSYJrNpp9bOWt1mr8FaM4q+ssZcs71YNDuxc/p/utX7GwDuBG++feXS+bW1lTe2Vo7E9iXbKqNRVP64V8ygcrvnCABsJUsDAAAAAAAAAAAAAMCdb+ftevnSfW/pG1Y5FJ9+q0Pxqbq4wUo+tVvV1+2v5LO9A4ZxeysvPfPMpd1innvn2ML1tTP8f8qwW13fOxJx90+/31vy7K2a6Yef7cBeL+0Rc5tPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwxH8CAAD//+mvWJQ=") r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43]}, 0x33) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 7.428731953s ago: executing program 5 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x5}) 7.422812073s ago: executing program 4 (id=865): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x14, r0, 0x333, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0xa60d000000000000}, 0x0) 7.319463603s ago: executing program 7 (id=866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 7.073833154s ago: executing program 4 (id=869): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) 5.461806767s ago: executing program 3 (id=871): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x8000000, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 5.411641828s ago: executing program 4 (id=872): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="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"/288], 0x3, 0x36c, &(0x7f00000006c0)="$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") socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1001f0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 5.251999668s ago: executing program 5 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x4, 0x1}, {0x4, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x4, 0x4, 0x80, 0x7}) 5.192357158s ago: executing program 7 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.842711739s ago: executing program 3 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) io_setup(0xffff7135, &(0x7f0000000240)=0x0) io_getevents(r3, 0xf29, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7cd, &(0x7f0000001780)="$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") r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43]}, 0x33) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 3.854423551s ago: executing program 8 (id=877): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) io_setup(0xffff7135, &(0x7f0000000240)=0x0) io_getevents(r3, 0xf29, 0x0, 0x0, &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7cd, &(0x7f0000001780)="$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") r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43]}, 0x33) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 3.724881512s ago: executing program 5 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f21cd0f001b66b9c50900000f323e0f2299f2e3060f013d66b8001000000f23d80f21f86635400000600f23f836660f3a0a6063f3b800008ed0f30f167005", 0x3f}], 0x1, 0xa, &(0x7f0000000180), 0x0) madvise(&(0x7f000028c000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000004b2d7596301226c4157e791360820000e3d4211d00"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r7, r7, 0x0, 0x6) 3.656209932s ago: executing program 3 (id=879): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$clear(0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 3.342288232s ago: executing program 7 (id=880): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x880) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40c4) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.363454985s ago: executing program 8 (id=881): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) 2.320102885s ago: executing program 3 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) 2.201767075s ago: executing program 7 (id=883): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) 872.438548ms ago: executing program 8 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, 0x0, 0x0, 0x400c0c0) 857.356538ms ago: executing program 3 (id=885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x8000000, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 732.221609ms ago: executing program 7 (id=886): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 552.110509ms ago: executing program 8 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 511.800709ms ago: executing program 3 (id=888): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d", 0x2}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 322.8598ms ago: executing program 7 (id=889): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x4, 0x1}, {0x4, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x4, 0x4, 0x80, 0x7}) 242.08061ms ago: executing program 8 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 0s ago: executing program 8 (id=891): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0xfff2}, {0xe424ff20b4fa5b94}}}, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd2f, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x608) kernel console output (not intermixed with test programs): [ T5582] loop4: detected capacity change from 0 to 256 [ 205.290847][ T5582] FAT-fs (loop4): Directory bread(block 64) failed [ 205.291779][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 205.316661][ T5582] FAT-fs (loop4): Directory bread(block 65) failed [ 205.323376][ T5582] FAT-fs (loop4): Directory bread(block 66) failed [ 205.396896][ T5582] FAT-fs (loop4): Directory bread(block 67) failed [ 205.403598][ T5582] FAT-fs (loop4): Directory bread(block 68) failed [ 205.438843][ T5582] FAT-fs (loop4): Directory bread(block 69) failed [ 205.486906][ T5582] FAT-fs (loop4): Directory bread(block 70) failed [ 205.493501][ T5582] FAT-fs (loop4): Directory bread(block 71) failed [ 205.537174][ T5582] FAT-fs (loop4): Directory bread(block 72) failed [ 205.543866][ T5582] FAT-fs (loop4): Directory bread(block 73) failed [ 207.242439][ T5614] loop2: detected capacity change from 0 to 512 [ 207.482948][ T5623] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 207.520208][ T5614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.552802][ T5614] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.254726][ T5642] loop3: detected capacity change from 0 to 2048 [ 209.392996][ T5642] netlink: 88 bytes leftover after parsing attributes in process `syz.3.301'. [ 210.878774][ T4456] kworker/u4:10: attempt to access beyond end of device [ 210.878774][ T4456] loop4: rw=1048577, sector=1224, nr_sectors = 608 limit=256 [ 210.975755][ T4456] kworker/u4:10: attempt to access beyond end of device [ 210.975755][ T4456] loop4: rw=1048577, sector=1864, nr_sectors = 1444 limit=256 [ 211.440079][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 212.209765][ T5657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.256769][ T5657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.317227][ T5657] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 212.369723][ T5657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.375909][ T5657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.383006][ T5657] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 212.391391][ T5657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.397577][ T5657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.403571][ T5657] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 212.410916][ T5657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.416917][ T5657] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 212.423006][ T5657] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 212.430442][ T5657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.444499][ T5657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.587974][ T5657] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 212.742104][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 212.742121][ T27] audit: type=1326 audit(1734108387.893:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d44985d19 code=0x7ffc0000 [ 212.784985][ T27] audit: type=1326 audit(1734108387.893:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d44985d19 code=0x7ffc0000 [ 212.846844][ T27] audit: type=1326 audit(1734108387.933:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2d44985d19 code=0x7ffc0000 [ 212.921089][ T27] audit: type=1326 audit(1734108387.933:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d44985d19 code=0x7ffc0000 [ 212.944069][ T5677] netlink: 48 bytes leftover after parsing attributes in process `syz.5.309'. [ 213.023717][ T27] audit: type=1326 audit(1734108387.933:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d44985d19 code=0x7ffc0000 [ 214.531959][ T4254] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.538136][ T4254] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.753278][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.759932][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.766005][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.820877][ T5694] loop4: detected capacity change from 0 to 256 [ 214.945432][ T5694] FAT-fs (loop4): Directory bread(block 64) failed [ 214.952571][ T5694] FAT-fs (loop4): Directory bread(block 65) failed [ 215.013772][ T5694] FAT-fs (loop4): Directory bread(block 66) failed [ 215.029664][ T5694] FAT-fs (loop4): Directory bread(block 67) failed [ 215.056380][ T5694] FAT-fs (loop4): Directory bread(block 68) failed [ 215.082202][ T5694] FAT-fs (loop4): Directory bread(block 69) failed [ 215.150936][ T5694] FAT-fs (loop4): Directory bread(block 70) failed [ 215.191083][ T5694] FAT-fs (loop4): Directory bread(block 71) failed [ 215.206676][ T5694] FAT-fs (loop4): Directory bread(block 72) failed [ 215.213274][ T5694] FAT-fs (loop4): Directory bread(block 73) failed [ 215.907571][ T5710] loop3: detected capacity change from 0 to 1024 [ 216.127460][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.856613][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 216.990296][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 216.996449][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 216.996624][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 217.002494][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 217.160682][ T46] kworker/u4:3: attempt to access beyond end of device [ 217.160682][ T46] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 217.208486][ T46] kworker/u4:3: attempt to access beyond end of device [ 217.208486][ T46] loop4: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 217.356290][ T27] audit: type=1804 audit(1734108392.503:133): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.320" name="/newroot/68/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 217.813718][ T5735] loop4: detected capacity change from 0 to 1024 [ 217.830767][ T5739] netlink: 1 bytes leftover after parsing attributes in process `syz.5.328'. [ 217.840650][ T5735] EXT4-fs: Ignoring removed orlov option [ 217.846353][ T5735] EXT4-fs: Ignoring removed orlov option [ 217.979168][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.982522][ T5741] loop1: detected capacity change from 0 to 512 [ 218.182998][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 218.195342][ T5741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.211639][ T5741] ext4 filesystem being mounted at /63/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 218.263030][ T5741] EXT4-fs (loop1): unmounting filesystem. [ 218.506212][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 218.770574][ T5756] loop3: detected capacity change from 0 to 512 [ 218.874926][ T5756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.915908][ T5756] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.057543][ T5764] loop4: detected capacity change from 0 to 512 [ 219.075603][ T5765] serio: Serial port ptm0 [ 219.093264][ T5764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.156271][ T5764] EXT4-fs (loop4): 1 orphan inode deleted [ 219.182519][ T5765] loop1: detected capacity change from 0 to 1024 [ 219.194757][ T5764] EXT4-fs (loop4): 1 truncate cleaned up [ 219.201216][ T5764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.206833][ T5765] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.286753][ T5765] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.356552][ T5765] JBD2: no valid journal superblock found [ 219.386572][ T5765] EXT4-fs (loop1): error loading journal [ 220.258615][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 221.183167][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 221.201249][ T5782] syz.5.343[5782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.201356][ T5782] syz.5.343[5782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.253350][ T5785] syz.5.343[5785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.311523][ T5785] syz.5.343[5785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.561055][ T27] audit: type=1326 audit(1734108396.713:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.584331][ T5795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 221.601628][ T5795] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 221.637507][ T5795] vhci_hcd vhci_hcd.0: Device attached [ 221.666109][ T5803] loop2: detected capacity change from 0 to 512 [ 221.709288][ T27] audit: type=1326 audit(1734108396.713:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.753285][ T27] audit: type=1326 audit(1734108396.713:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.775831][ T27] audit: type=1326 audit(1734108396.713:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.808271][ T27] audit: type=1326 audit(1734108396.713:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.818782][ T5803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.838253][ T27] audit: type=1326 audit(1734108396.713:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.865056][ T27] audit: type=1326 audit(1734108396.713:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.889054][ T27] audit: type=1326 audit(1734108396.713:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.917777][ T5803] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.945503][ T27] audit: type=1326 audit(1734108396.713:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 221.974138][ T14] usb 38-1: SetAddress Request (2) to port 0 [ 221.995338][ T14] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 222.024228][ T27] audit: type=1326 audit(1734108396.723:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c5d85d19 code=0x7ffc0000 [ 222.092677][ T5813] loop4: detected capacity change from 0 to 512 [ 222.144917][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.154691][ T5813] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.137976][ T5800] vhci_hcd: connection reset by peer [ 223.175147][ T4457] vhci_hcd: stop threads [ 223.185414][ T4457] vhci_hcd: release socket [ 223.235475][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 223.241862][ T4457] vhci_hcd: disconnect device [ 223.304488][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 223.983443][ T5852] loop1: detected capacity change from 0 to 512 [ 224.087304][ T5852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.096308][ T5852] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.152930][ T5854] loop4: detected capacity change from 0 to 2048 [ 224.202115][ T5854] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.495767][ T5862] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 224.504467][ T5862] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 224.588775][ T5862] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 225.011681][ T5870] loop3: detected capacity change from 0 to 512 [ 225.156835][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 225.192877][ T5854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.448199][ T5870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.486108][ T5854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.368: bg 0: block 234: padding at end of block bitmap is not set [ 225.513763][ T5870] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.660745][ T5854] EXT4-fs (loop4): Remounting filesystem read-only [ 225.671889][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 225.832979][ T5881] loop5: detected capacity change from 0 to 512 [ 225.863942][ T5881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.880910][ T5881] EXT4-fs (loop5): 1 orphan inode deleted [ 225.908832][ T5881] EXT4-fs (loop5): 1 truncate cleaned up [ 225.915241][ T5881] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 226.075132][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 226.126859][ T5885] loop1: detected capacity change from 0 to 1024 [ 226.151441][ T5885] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 226.309605][ T5885] EXT4-fs (loop1): invalid journal inode [ 226.365609][ T5885] EXT4-fs (loop1): can't get journal size [ 226.745389][ T5885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.125759][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 227.717564][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 227.842260][ T14] usb 38-1: device descriptor read/8, error -110 [ 227.979923][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 227.979938][ T27] audit: type=1326 audit(1734108403.133:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.093241][ T27] audit: type=1326 audit(1734108403.183:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.236530][ T27] audit: type=1326 audit(1734108403.183:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.268919][ T14] usb usb38-port1: attempt power cycle [ 228.300552][ T27] audit: type=1326 audit(1734108403.183:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.649439][ T27] audit: type=1326 audit(1734108403.183:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.672894][ T27] audit: type=1326 audit(1734108403.183:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.695952][ T27] audit: type=1326 audit(1734108403.183:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.718575][ T27] audit: type=1326 audit(1734108403.193:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.747898][ T27] audit: type=1326 audit(1734108403.193:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 228.972017][ T14] usb usb38-port1: unable to enumerate USB device [ 229.004525][ T27] audit: type=1326 audit(1734108403.193:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 229.619721][ T5930] loop3: detected capacity change from 0 to 16 [ 229.634242][ T5930] erofs: (device loop3): mounted with root inode @ nid 36. [ 229.663294][ T4259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 229.675439][ T5930] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 230.030088][ T5933] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 230.041333][ T5933] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 231.008953][ T5941] loop2: detected capacity change from 0 to 764 [ 231.087398][ T5941] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 232.796347][ T5963] loop3: detected capacity change from 0 to 2048 [ 234.166072][ T5971] loop5: detected capacity change from 0 to 2048 [ 234.215226][ T5970] loop4: detected capacity change from 0 to 512 [ 234.303240][ T5970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.317697][ T5971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.409330][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.446962][ T5970] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.527478][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 234.527495][ T27] audit: type=1800 audit(1734108409.683:249): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 234.926342][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 234.935789][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 235.114526][ T5987] loop5: detected capacity change from 0 to 512 [ 235.287987][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.313378][ T5987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.412: inode #1: comm syz.5.412: iget: illegal inode # [ 235.398530][ T5987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.412: error while reading EA inode 1 err=-117 [ 235.471274][ T5987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.412: inode #1: comm syz.5.412: iget: illegal inode # [ 235.537102][ T5987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.412: error while reading EA inode 1 err=-117 [ 235.562335][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.581645][ T5987] EXT4-fs (loop5): 1 orphan inode deleted [ 235.588147][ T5987] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 235.687113][ T27] audit: type=1326 audit(1734108410.843:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 235.771559][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.775571][ T27] audit: type=1326 audit(1734108410.843:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 235.831334][ T6005] netlink: 'syz.1.418': attribute type 27 has an invalid length. [ 235.859150][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 235.884012][ T27] audit: type=1326 audit(1734108410.843:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 235.993230][ T27] audit: type=1326 audit(1734108410.843:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 236.083481][ T27] audit: type=1326 audit(1734108410.843:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 236.174525][ T27] audit: type=1326 audit(1734108410.853:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 236.262597][ T27] audit: type=1326 audit(1734108410.853:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 236.291231][ T6010] loop5: detected capacity change from 0 to 512 [ 236.340667][ T6010] EXT4-fs: Ignoring removed orlov option [ 236.350413][ T27] audit: type=1326 audit(1734108410.853:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 236.383228][ T6010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.404450][ T6010] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.423388][ T6010] EXT4-fs (loop5): 1 orphan inode deleted [ 236.436529][ T6010] EXT4-fs (loop5): 1 truncate cleaned up [ 236.446895][ T6010] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.479832][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.491814][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.501242][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.513020][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.523813][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.531401][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.590691][ T6005] device sit0 left promiscuous mode [ 236.931011][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.940257][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.436021][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.494314][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.954068][ T6005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.963322][ T6005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.972881][ T6005] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.981946][ T6005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.227576][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.313425][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 238.344537][ T6025] loop3: detected capacity change from 0 to 128 [ 238.375443][ T6025] FAT-fs (loop3): bogus number of reserved sectors [ 238.393685][ T6025] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 238.622862][ T6025] FAT-fs (loop3): Can't find a valid FAT filesystem [ 238.656632][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 239.441768][ T6035] sg_write: data in/out 682/1526 bytes for SCSI command 0x0-- guessing data in; [ 239.441768][ T6035] program syz.5.427 not setting count and/or reply_len properly [ 239.516294][ T6037] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 239.616781][ T6037] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.428'. [ 239.764797][ T36] tipc: Left network mode [ 239.787868][ T6012] chnl_net:caif_netlink_parms(): no params data found [ 240.610176][ T27] audit: type=1326 audit(1734108415.763:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 240.686623][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 240.764145][ T27] audit: type=1326 audit(1734108415.763:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 240.820572][ T6057] loop1: detected capacity change from 0 to 512 [ 240.857211][ T27] audit: type=1326 audit(1734108415.763:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 240.882862][ T6052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 240.889436][ T6052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.912051][ T27] audit: type=1326 audit(1734108415.763:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 240.935748][ T6052] vhci_hcd vhci_hcd.0: Device attached [ 240.983592][ T27] audit: type=1326 audit(1734108415.763:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 241.008139][ T27] audit: type=1326 audit(1734108415.763:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 241.034932][ T27] audit: type=1326 audit(1734108415.793:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 241.047248][ T6057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.088366][ T6057] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.114285][ T27] audit: type=1326 audit(1734108415.793:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 241.146450][ T27] audit: type=1326 audit(1734108415.793:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 241.175898][ T27] audit: type=1326 audit(1734108415.793:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.1.431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d44985d19 code=0x0 [ 241.266983][ T26] usb 36-1: SetAddress Request (2) to port 0 [ 241.285892][ T26] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 241.398930][ T6057] IPVS: Error connecting to the multicast addr [ 241.451197][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.474319][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.482758][ T6012] device bridge_slave_0 entered promiscuous mode [ 241.527456][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.535787][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.544233][ T6012] device bridge_slave_1 entered promiscuous mode [ 241.639634][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.693033][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.760172][ T6012] team0: Port device team_slave_0 added [ 241.821508][ T6012] team0: Port device team_slave_1 added [ 241.931502][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.946432][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.995934][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.058377][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.076092][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.153233][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.767085][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 243.618525][ T6012] device hsr_slave_0 entered promiscuous mode [ 243.636680][ T6012] device hsr_slave_1 entered promiscuous mode [ 243.645176][ T6012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.663992][ T6012] Cannot create hsr debugfs directory [ 243.952106][ T36] device hsr_slave_0 left promiscuous mode [ 243.998234][ T36] device hsr_slave_1 left promiscuous mode [ 244.007245][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.025048][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.046059][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.056620][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.076609][ T36] device bridge_slave_1 left promiscuous mode [ 244.083141][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.115066][ T36] device bridge_slave_0 left promiscuous mode [ 244.126597][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.184856][ T36] device veth1_macvtap left promiscuous mode [ 244.195018][ T36] device veth0_macvtap left promiscuous mode [ 244.211819][ T36] device veth1_vlan left promiscuous mode [ 244.224191][ T36] device veth0_vlan left promiscuous mode [ 244.761499][ T6054] vhci_hcd: connection reset by peer [ 244.776960][ T4542] vhci_hcd: stop threads [ 244.781363][ T4542] vhci_hcd: release socket [ 244.785824][ T4542] vhci_hcd: disconnect device [ 244.814294][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 244.847286][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 245.282070][ T36] team0 (unregistering): Port device team_slave_1 removed [ 245.326238][ T36] team0 (unregistering): Port device team_slave_0 removed [ 245.367285][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.407889][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.897247][ T36] bond0 (unregistering): Released all slaves [ 246.212058][ T6121] loop1: detected capacity change from 0 to 764 [ 246.251983][ T6121] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 246.376645][ T26] usb 36-1: device descriptor read/8, error -110 [ 246.507244][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 246.834980][ T26] usb usb36-port1: attempt power cycle [ 247.179621][ T6126] Zero length message leads to an empty skb [ 247.232642][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'. [ 247.256253][ T6012] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.319144][ T6012] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.363757][ T6130] loop5: detected capacity change from 0 to 1024 [ 247.383635][ T6130] EXT4-fs: Ignoring removed nobh option [ 247.393170][ T6012] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.425444][ T6012] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.496582][ T6130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.585005][ T6134] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 247.604057][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.604543][ T26] usb usb36-port1: unable to enumerate USB device [ 247.627318][ T6130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 247.631631][ T6134] bond0: (slave team0): Enslaving as an active interface with an up link [ 247.733063][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 247.733081][ T27] audit: type=1800 audit(1734108422.883:304): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.452" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 247.865807][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.891907][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.937288][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.949218][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 247.993737][ T6012] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.046097][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.077017][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.110410][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.117731][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.154917][ T6154] loop3: detected capacity change from 0 to 764 [ 248.161665][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.171904][ T6154] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 248.193389][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.209873][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.228299][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.235518][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.259363][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.330468][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.349549][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.383903][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.398030][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.407718][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.441112][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.472022][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.502909][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.543826][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.584718][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.654152][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.735887][ T6167] 9pnet_fd: Insufficient options for proto=fd [ 250.023951][ T6191] loop5: detected capacity change from 0 to 512 [ 250.125070][ T6191] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 250.144752][ T6191] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.167982][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.181171][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.194914][ T27] audit: type=1800 audit(1734108425.343:305): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.469" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 250.286314][ T6012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.302531][ T27] audit: type=1800 audit(1734108425.343:306): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.469" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 250.355673][ T6199] loop1: detected capacity change from 0 to 512 [ 250.464702][ T6199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 250.477577][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 250.561927][ T6199] EXT4-fs (loop1): 1 orphan inode deleted [ 250.602359][ T6199] EXT4-fs (loop1): 1 truncate cleaned up [ 250.663474][ T6199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.705920][ T27] audit: type=1326 audit(1734108425.853:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 250.816363][ T27] audit: type=1326 audit(1734108425.853:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ea8b84680 code=0x7ffc0000 [ 250.864088][ T27] audit: type=1326 audit(1734108425.883:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ea8b87547 code=0x7ffc0000 [ 250.890174][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 250.906014][ T6217] device bridge_slave_1 left promiscuous mode [ 250.932963][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.954443][ T27] audit: type=1326 audit(1734108425.883:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 250.978260][ T27] audit: type=1326 audit(1734108425.883:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ea8b87547 code=0x7ffc0000 [ 251.002809][ T27] audit: type=1326 audit(1734108425.883:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ea8b8497a code=0x7ffc0000 [ 251.025975][ T6217] device bridge_slave_0 left promiscuous mode [ 251.036596][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.045406][ T27] audit: type=1326 audit(1734108425.883:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 251.733561][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 252.147234][ T6238] 9pnet_fd: Insufficient options for proto=fd [ 252.805253][ T6240] loop3: detected capacity change from 0 to 2048 [ 252.823902][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.841307][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.967560][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.983375][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.024387][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.033137][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.082854][ T6012] device veth0_vlan entered promiscuous mode [ 253.138194][ T6012] device veth1_vlan entered promiscuous mode [ 253.242377][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.259081][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.292764][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.337179][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.361148][ T6012] device veth0_macvtap entered promiscuous mode [ 253.400179][ T6012] device veth1_macvtap entered promiscuous mode [ 253.485222][ T6259] netlink: 'syz.5.483': attribute type 1 has an invalid length. [ 253.612856][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.632232][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.697945][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.709380][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.720522][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.730559][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.741811][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.753571][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.773360][ T6261] device vlan3 entered promiscuous mode [ 253.782570][ T6261] device bond1 entered promiscuous mode [ 253.793734][ T6261] device bond1 left promiscuous mode [ 253.849430][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.858884][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.872651][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.883329][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.912006][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.937794][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.959070][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.977206][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.001336][ T6012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.040108][ T6012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.155239][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.191056][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.201440][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.230209][ T6012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.242372][ T6012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.254234][ T6012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.263360][ T6012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.275284][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 254.333844][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.274289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.280702][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.713316][ T6295] loop4: detected capacity change from 0 to 2048 [ 256.781077][ T6295] netlink: 88 bytes leftover after parsing attributes in process `syz.4.491'. [ 257.303343][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.353975][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.430876][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.905494][ T6305] device vlan0 entered promiscuous mode [ 257.949009][ T6305] device team_slave_0 entered promiscuous mode [ 257.955717][ T6305] device team_slave_1 entered promiscuous mode [ 258.014232][ T6305] device team0 entered promiscuous mode [ 258.082194][ T6305] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 258.427230][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.435613][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.564675][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.605364][ T6313] loop5: detected capacity change from 0 to 256 [ 258.662624][ T6313] FAT-fs (loop5): Directory bread(block 64) failed [ 258.688620][ T6313] FAT-fs (loop5): Directory bread(block 65) failed [ 258.712803][ T6313] FAT-fs (loop5): Directory bread(block 66) failed [ 258.732323][ T6313] FAT-fs (loop5): Directory bread(block 67) failed [ 258.789152][ T6313] FAT-fs (loop5): Directory bread(block 68) failed [ 258.795760][ T6313] FAT-fs (loop5): Directory bread(block 69) failed [ 258.852488][ T6313] FAT-fs (loop5): Directory bread(block 70) failed [ 258.872321][ T6313] FAT-fs (loop5): Directory bread(block 71) failed [ 258.900810][ T6313] FAT-fs (loop5): Directory bread(block 72) failed [ 258.916083][ T6313] FAT-fs (loop5): Directory bread(block 73) failed [ 260.744535][ T4279] kworker/u4:5: attempt to access beyond end of device [ 260.744535][ T4279] loop5: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 260.840149][ T4279] kworker/u4:5: attempt to access beyond end of device [ 260.840149][ T4279] loop5: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 261.013258][ T6335] loop6: detected capacity change from 0 to 2048 [ 261.081962][ T6335] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.216826][ T6335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 261.764906][ T6357] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.504: bg 0: block 234: padding at end of block bitmap is not set [ 261.791093][ T6357] EXT4-fs (loop6): Remounting filesystem read-only [ 262.686730][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 262.970314][ T6371] loop1: detected capacity change from 0 to 256 [ 264.005257][ T6371] FAT-fs (loop1): Directory bread(block 64) failed [ 264.014485][ T6012] EXT4-fs (loop6): unmounting filesystem. [ 264.080908][ T6371] FAT-fs (loop1): Directory bread(block 65) failed [ 264.143957][ T6371] FAT-fs (loop1): Directory bread(block 66) failed [ 264.186498][ T6371] FAT-fs (loop1): Directory bread(block 67) failed [ 264.236690][ T6371] FAT-fs (loop1): Directory bread(block 68) failed [ 264.312737][ T6371] FAT-fs (loop1): Directory bread(block 69) failed [ 264.353345][ T6371] FAT-fs (loop1): Directory bread(block 70) failed [ 264.406280][ T6371] FAT-fs (loop1): Directory bread(block 71) failed [ 264.454122][ T6371] FAT-fs (loop1): Directory bread(block 72) failed [ 264.500470][ T6371] FAT-fs (loop1): Directory bread(block 73) failed [ 264.516338][ T6384] loop4: detected capacity change from 0 to 764 [ 264.603632][ T6384] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.756498][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 264.756516][ T27] audit: type=1326 audit(1734108439.893:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 264.983867][ T27] audit: type=1326 audit(1734108439.893:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.236450][ T27] audit: type=1326 audit(1734108439.893:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.370496][ T27] audit: type=1326 audit(1734108439.893:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.393173][ T27] audit: type=1326 audit(1734108439.893:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.416071][ T27] audit: type=1326 audit(1734108439.893:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.438334][ T27] audit: type=1326 audit(1734108439.893:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.461552][ T27] audit: type=1326 audit(1734108440.003:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.482230][ T11] kworker/u4:1: attempt to access beyond end of device [ 265.482230][ T11] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 265.483959][ T27] audit: type=1326 audit(1734108440.003:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.536631][ T27] audit: type=1326 audit(1734108440.003:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 265.585257][ T11] kworker/u4:1: attempt to access beyond end of device [ 265.585257][ T11] loop1: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 265.919756][ T6410] loop1: detected capacity change from 0 to 1024 [ 266.108472][ T6410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.977176][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 269.369141][ T6442] loop1: detected capacity change from 0 to 2048 [ 269.495199][ T6442] netlink: 88 bytes leftover after parsing attributes in process `syz.1.531'. [ 270.372859][ T6451] : renamed from ipvlan1 [ 272.078218][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 272.078235][ T27] audit: type=1326 audit(1734108447.233:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 272.206952][ T27] audit: type=1326 audit(1734108447.233:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 272.287878][ T27] audit: type=1326 audit(1734108447.233:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 272.383035][ T27] audit: type=1326 audit(1734108447.233:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 272.530721][ T27] audit: type=1326 audit(1734108447.233:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.5.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 272.560608][ T27] audit: type=1326 audit(1734108447.313:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.6.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7d85d19 code=0x7ffc0000 [ 273.154155][ T6483] loop4: detected capacity change from 0 to 2048 [ 273.163805][ T6483] ext4: Unknown parameter 'smackfsdef' [ 273.382636][ T27] audit: type=1326 audit(1734108447.313:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.6.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7d85d19 code=0x7ffc0000 [ 273.456534][ T27] audit: type=1326 audit(1734108447.313:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.6.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0be7d85d19 code=0x7ffc0000 [ 273.640839][ T27] audit: type=1326 audit(1734108447.313:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.6.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7d85d19 code=0x7ffc0000 [ 273.755640][ T27] audit: type=1326 audit(1734108447.313:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.6.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7d85d19 code=0x7ffc0000 [ 275.512492][ T6529] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 275.891443][ T6493] loop1: detected capacity change from 0 to 2048 [ 276.086987][ T6493] netlink: 88 bytes leftover after parsing attributes in process `syz.1.549'. [ 276.162550][ T6537] loop6: detected capacity change from 0 to 512 [ 276.171483][ T6537] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 276.207758][ T6537] EXT4-fs (loop6): 1 orphan inode deleted [ 276.233945][ T6537] EXT4-fs (loop6): 1 truncate cleaned up [ 276.267451][ T6537] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 278.066941][ T6012] EXT4-fs (loop6): unmounting filesystem. [ 279.812437][ T6573] loop4: detected capacity change from 0 to 1024 [ 280.139373][ T6573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 280.365549][ T6582] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 280.591538][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 280.592205][ T27] audit: type=1804 audit(1734108455.723:442): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.571" name="/newroot/112/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 281.168469][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 281.223436][ T6587] loop3: detected capacity change from 0 to 512 [ 281.247810][ T6587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.451482][ T6587] EXT4-fs (loop3): 1 orphan inode deleted [ 281.472443][ T6587] EXT4-fs (loop3): 1 truncate cleaned up [ 281.516575][ T6587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.028907][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 284.956067][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.582'. [ 285.187647][ T6622] loop3: detected capacity change from 0 to 764 [ 285.367733][ T6622] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 285.459542][ T27] audit: type=1326 audit(1734108460.613:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 285.567018][ T27] audit: type=1326 audit(1734108460.613:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 285.676873][ T27] audit: type=1326 audit(1734108460.613:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 285.764866][ T27] audit: type=1326 audit(1734108460.613:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 287.619510][ T6643] loop4: detected capacity change from 0 to 512 [ 287.699932][ T6643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.720127][ T27] audit: type=1326 audit(1734108460.653:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 287.811977][ T6643] EXT4-fs (loop4): 1 orphan inode deleted [ 287.840647][ T6643] EXT4-fs (loop4): 1 truncate cleaned up [ 287.861541][ T6643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 287.876518][ T27] audit: type=1326 audit(1734108460.653:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 287.945346][ T27] audit: type=1326 audit(1734108460.653:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 288.155552][ T27] audit: type=1326 audit(1734108460.653:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 288.178634][ T27] audit: type=1326 audit(1734108460.653:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 288.201084][ T27] audit: type=1326 audit(1734108460.653:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 288.223340][ T27] audit: type=1326 audit(1734108460.653:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 288.870937][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 289.122542][ T6672] loop6: detected capacity change from 0 to 1024 [ 289.217661][ T6672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 290.565984][ T6665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.578371][ T6012] EXT4-fs (loop6): unmounting filesystem. [ 290.618022][ T6665] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 290.624053][ T6665] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 290.899249][ T6665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.905316][ T6665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.542446][ T6665] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 291.560491][ T6665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.687502][ T6665] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 291.693541][ T6665] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 291.701282][ T6665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.707623][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.805487][ T6665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.870531][ T6665] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 292.868275][ T6665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.902037][ T6665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 292.926563][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.942311][ T6665] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 293.024948][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.035351][ T4261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.043352][ T4261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.056093][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.171775][ T4261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.181413][ T4261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.876674][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 293.883088][ T4259] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.910192][ T4261] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.915161][ T6696] loop6: detected capacity change from 0 to 2048 [ 294.115793][ T6696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 294.127223][ T6712] loop3: detected capacity change from 0 to 512 [ 294.237739][ T6712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.298112][ T6712] EXT4-fs (loop3): 1 orphan inode deleted [ 294.304417][ T6712] EXT4-fs (loop3): 1 truncate cleaned up [ 294.315935][ T6712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 295.487706][ T4261] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.497168][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 295.632988][ T6728] loop4: detected capacity change from 0 to 2048 [ 295.640147][ T6728] ext4: Unknown parameter 'smackfsdef' [ 295.647465][ T4259] Bluetooth: hci5: command 0x0409 tx timeout [ 295.879494][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 295.966472][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 295.966550][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 296.350167][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 296.468982][ T6735] loop4: detected capacity change from 0 to 764 [ 296.495424][ T6735] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 296.538822][ T27] audit: type=1326 audit(1734108471.693:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 296.647634][ T27] audit: type=1326 audit(1734108471.693:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 296.740420][ T27] audit: type=1326 audit(1734108471.693:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 296.764771][ T27] audit: type=1326 audit(1734108471.693:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 296.954351][ T27] audit: type=1326 audit(1734108471.783:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.201684][ T27] audit: type=1326 audit(1734108471.783:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.244251][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.246525][ T27] audit: type=1326 audit(1734108471.833:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.296721][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.335893][ T6695] device bridge_slave_0 entered promiscuous mode [ 297.349033][ T27] audit: type=1326 audit(1734108471.833:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.388147][ T27] audit: type=1326 audit(1734108471.833:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.424341][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.429191][ T27] audit: type=1326 audit(1734108471.833:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 297.456201][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.527064][ T6695] device bridge_slave_1 entered promiscuous mode [ 297.613431][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 297.733902][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 298.374921][ T6756] loop5: detected capacity change from 0 to 128 [ 298.417855][ T6756] FAT-fs (loop5): bogus number of reserved sectors [ 298.456797][ T6756] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 298.493805][ T6756] FAT-fs (loop5): Can't find a valid FAT filesystem [ 298.780592][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.813536][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.974858][ T6695] team0: Port device team_slave_0 added [ 299.004947][ T6767] loop3: detected capacity change from 0 to 512 [ 299.036703][ T6767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.081357][ T6695] team0: Port device team_slave_1 added [ 299.109076][ T6767] EXT4-fs (loop3): 1 orphan inode deleted [ 299.125129][ T6767] EXT4-fs (loop3): 1 truncate cleaned up [ 299.131832][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 299.142577][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.149997][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.207100][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.282617][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.294089][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.360103][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.403729][ T6695] device hsr_slave_0 entered promiscuous mode [ 299.411645][ T6695] device hsr_slave_1 entered promiscuous mode [ 299.418587][ T6695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.426208][ T6695] Cannot create hsr debugfs directory [ 300.034762][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 300.381943][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 300.756288][ T6782] loop5: detected capacity change from 0 to 764 [ 300.807694][ T6782] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 300.866085][ T6785] loop3: detected capacity change from 0 to 764 [ 300.966866][ T6785] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 301.018910][ T6695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.133382][ T6695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.440032][ T6695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.012791][ T6695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.211112][ T4259] Bluetooth: hci5: command 0x0419 tx timeout [ 302.857155][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.874803][ T6816] loop5: detected capacity change from 0 to 512 [ 302.926470][ T6816] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.972051][ T6816] EXT4-fs (loop5): 1 orphan inode deleted [ 302.973285][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.981378][ T6816] EXT4-fs (loop5): 1 truncate cleaned up [ 302.993726][ T6816] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 303.099401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.118474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.161988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.194664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.220856][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.228127][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.244070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.535582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.954501][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.961714][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.018829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.067749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.168567][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 304.338666][ T6822] loop3: detected capacity change from 0 to 512 [ 304.506828][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.537329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.546135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.555827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.565655][ T6822] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.573406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.965668][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.163315][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 305.163354][ T27] audit: type=1800 audit(1734108480.313:491): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.633" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 305.320927][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.446210][ T27] audit: type=1800 audit(1734108480.463:492): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.633" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 305.625648][ T6695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.647255][ T6844] loop4: detected capacity change from 0 to 764 [ 305.664035][ T6695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.717225][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 305.717831][ T6844] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 305.724378][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.849173][ T27] audit: type=1326 audit(1734108481.003:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 305.872716][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.917913][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.966467][ T27] audit: type=1326 audit(1734108481.043:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 305.989979][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.042458][ T27] audit: type=1326 audit(1734108481.043:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.099682][ T4542] device hsr_slave_0 left promiscuous mode [ 306.115650][ T6012] EXT4-fs (loop6): unmounting filesystem. [ 306.121769][ T4542] device hsr_slave_1 left promiscuous mode [ 306.175770][ T27] audit: type=1326 audit(1734108481.043:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.209271][ T6849] loop3: detected capacity change from 0 to 764 [ 306.226178][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.294423][ T27] audit: type=1326 audit(1734108481.043:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.397309][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.415269][ T6849] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.452209][ T27] audit: type=1326 audit(1734108481.043:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.475803][ T27] audit: type=1326 audit(1734108481.043:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.485757][ T4542] device bridge_slave_1 left promiscuous mode [ 306.514537][ T27] audit: type=1326 audit(1734108481.043:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54c8585d19 code=0x7ffc0000 [ 306.546537][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.576034][ T4542] device bridge_slave_0 left promiscuous mode [ 306.607890][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.034971][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.046744][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.066707][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.074779][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.088310][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.097627][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.860122][ T4542] team0 (unregistering): Port device team_slave_1 removed [ 308.678085][ T4542] team0 (unregistering): Port device team_slave_0 removed [ 308.727315][ T6885] loop3: detected capacity change from 0 to 764 [ 308.766342][ T6885] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 308.797612][ T4542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.834599][ T6887] loop4: detected capacity change from 0 to 512 [ 308.909246][ T6887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.938373][ T6887] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.189168][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 309.200339][ T4542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.234176][ T6895] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 309.348762][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 309.941140][ T4542] bond0 (unregistering): (slave team0): Releasing backup interface [ 310.269548][ T4542] bond0 (unregistering): Released all slaves [ 310.373848][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.146127][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.156183][ T6929] loop5: detected capacity change from 0 to 128 [ 311.323208][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.346609][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 311.377302][ T6929] FAT-fs (loop5): bogus number of reserved sectors [ 311.397417][ T6929] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 311.848668][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.888898][ T6929] FAT-fs (loop5): Can't find a valid FAT filesystem [ 312.047954][ T6935] loop3: detected capacity change from 0 to 512 [ 312.144938][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 312.171834][ T6935] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.278003][ T6935] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.338544][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 312.338561][ T27] audit: type=1800 audit(1734108487.493:538): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.661" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 312.392552][ T27] audit: type=1800 audit(1734108487.523:539): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.661" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 312.476771][ T6948] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 312.509725][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 312.648816][ T4542] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.768493][ T4542] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.810895][ T27] audit: type=1326 audit(1734108487.963:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 312.835612][ T27] audit: type=1326 audit(1734108487.973:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 312.893115][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.936196][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.947832][ T27] audit: type=1326 audit(1734108487.973:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 313.071413][ T6862] device bridge_slave_0 entered promiscuous mode [ 313.281282][ T6967] loop5: detected capacity change from 0 to 2048 [ 313.419985][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 313.693636][ T27] audit: type=1326 audit(1734108487.973:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 313.929796][ T27] audit: type=1326 audit(1734108487.973:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 313.964214][ T4542] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.058209][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.075015][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.112840][ T6862] device bridge_slave_1 entered promiscuous mode [ 314.274321][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.324808][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.501276][ T6862] team0: Port device team_slave_0 added [ 314.538854][ T6862] team0: Port device team_slave_1 added [ 314.753257][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.776542][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.901311][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.956744][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.974397][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.073998][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.350053][ T4542] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.423264][ T6862] device hsr_slave_0 entered promiscuous mode [ 316.232280][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 316.887026][ T6862] device hsr_slave_1 entered promiscuous mode [ 316.907078][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.929156][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.935544][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.976915][ T6862] Cannot create hsr debugfs directory [ 317.256079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.269693][ T6998] loop3: detected capacity change from 0 to 512 [ 317.297794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.319231][ T6998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.371810][ T7003] loop5: detected capacity change from 0 to 512 [ 317.375006][ T6998] EXT4-fs (loop3): 1 orphan inode deleted [ 317.384551][ T6998] EXT4-fs (loop3): 1 truncate cleaned up [ 317.422186][ T6998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 317.458693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.466694][ T7003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.486152][ T7003] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.497701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.712950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.726836][ T27] audit: type=1800 audit(1734108492.883:545): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.673" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 317.864918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.185075][ T6695] device veth0_vlan entered promiscuous mode [ 318.261804][ T27] audit: type=1800 audit(1734108492.883:546): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.673" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 318.312406][ T6695] device veth1_vlan entered promiscuous mode [ 318.349453][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.519071][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 318.526041][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 318.533036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.548545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.930662][ T6695] device veth0_macvtap entered promiscuous mode [ 319.018949][ T6695] device veth1_macvtap entered promiscuous mode [ 319.693730][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.708330][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.869572][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.907317][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.946937][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.966498][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.009196][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.052452][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.089842][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.155992][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.168005][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.181081][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.197948][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.009241][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.031873][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.042086][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.052772][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.062679][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.073314][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.083251][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.093816][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.118236][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.212060][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.231512][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.259895][ T6695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.283025][ T6695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.308216][ T6695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.326484][ T6695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.352872][ T7060] loop3: detected capacity change from 0 to 512 [ 321.509299][ T7060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 321.542501][ T7060] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.577105][ T6862] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 321.596932][ T27] audit: type=1800 audit(1734108496.753:547): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.686" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 321.620545][ T27] audit: type=1800 audit(1734108496.773:548): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.686" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 321.776485][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 321.791734][ T6862] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 321.905988][ T6862] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.957480][ T6862] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.044521][ T7079] loop3: detected capacity change from 0 to 16 [ 322.131389][ T7079] erofs: (device loop3): mounted with root inode @ nid 36. [ 322.197951][ T4259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 322.210162][ T7077] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 322.221695][ T27] audit: type=1800 audit(1734108497.383:549): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 322.322877][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.370086][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.541260][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.615235][ T7077] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 322.626415][ T7077] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 322.984096][ T7094] loop5: detected capacity change from 0 to 256 [ 323.100846][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.120207][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.165081][ T7094] FAT-fs (loop5): Directory bread(block 64) failed [ 323.196706][ T7094] FAT-fs (loop5): Directory bread(block 65) failed [ 323.203831][ T7094] FAT-fs (loop5): Directory bread(block 66) failed [ 323.216546][ T7094] FAT-fs (loop5): Directory bread(block 67) failed [ 323.223641][ T7094] FAT-fs (loop5): Directory bread(block 68) failed [ 323.236652][ T7094] FAT-fs (loop5): Directory bread(block 69) failed [ 323.243324][ T7094] FAT-fs (loop5): Directory bread(block 70) failed [ 323.261689][ T7094] FAT-fs (loop5): Directory bread(block 71) failed [ 323.273155][ T7094] FAT-fs (loop5): Directory bread(block 72) failed [ 323.288472][ T7094] FAT-fs (loop5): Directory bread(block 73) failed [ 323.335031][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.432412][ T4542] device hsr_slave_0 left promiscuous mode [ 323.454149][ T4542] device hsr_slave_1 left promiscuous mode [ 323.470599][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.487412][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.504056][ T4542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.521959][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.532853][ T4542] device bridge_slave_1 left promiscuous mode [ 323.582858][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.624490][ T4542] device bridge_slave_0 left promiscuous mode [ 323.648125][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.707522][ T4542] device veth1_macvtap left promiscuous mode [ 323.716071][ T4542] device veth0_macvtap left promiscuous mode [ 323.736858][ T4542] device veth1_vlan left promiscuous mode [ 323.744133][ T4542] device veth0_vlan left promiscuous mode [ 324.716139][ T7120] loop3: detected capacity change from 0 to 512 [ 324.801353][ T7120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 324.818314][ T7120] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.909430][ T27] audit: type=1800 audit(1734108500.053:550): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.696" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 324.946463][ T27] audit: type=1800 audit(1734108500.063:551): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.696" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 325.062975][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 325.220741][ T7130] loop3: detected capacity change from 0 to 764 [ 325.272666][ T7130] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 325.287448][ T27] audit: type=1326 audit(1734108500.443:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.331446][ T27] audit: type=1326 audit(1734108500.463:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.360236][ T27] audit: type=1326 audit(1734108500.463:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.386704][ T27] audit: type=1326 audit(1734108500.463:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.409750][ T27] audit: type=1326 audit(1734108500.463:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.433119][ T27] audit: type=1326 audit(1734108500.463:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.455593][ T27] audit: type=1326 audit(1734108500.463:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.540590][ T27] audit: type=1326 audit(1734108500.463:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 325.587665][ T4542] team0 (unregistering): Port device team_slave_1 removed [ 325.664471][ T4542] team0 (unregistering): Port device team_slave_0 removed [ 325.742463][ T4542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.789924][ T4542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.241877][ T4542] bond0 (unregistering): Released all slaves [ 326.382651][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.443059][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.462386][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.530274][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.556622][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.573062][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.630971][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.638189][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.704948][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.735512][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.765684][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.816033][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.823247][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.845418][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.873617][ T5283] kworker/u4:21: attempt to access beyond end of device [ 326.873617][ T5283] loop5: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 326.957514][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.997662][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.066295][ T5283] kworker/u4:21: attempt to access beyond end of device [ 327.066295][ T5283] loop5: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 327.091327][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.150252][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 327.889664][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.947348][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 327.996814][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.064689][ T6862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.137191][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.341161][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.380678][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.401377][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.475824][ T7166] : renamed from ipvlan1 [ 329.551405][ T7182] loop7: detected capacity change from 0 to 2048 [ 330.501210][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.530355][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.578273][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.361887][ T7193] loop4: detected capacity change from 0 to 256 [ 331.544362][ T7193] FAT-fs (loop4): Directory bread(block 64) failed [ 331.576532][ T7193] FAT-fs (loop4): Directory bread(block 65) failed [ 331.583213][ T7193] FAT-fs (loop4): Directory bread(block 66) failed [ 331.616490][ T7193] FAT-fs (loop4): Directory bread(block 67) failed [ 331.623240][ T7193] FAT-fs (loop4): Directory bread(block 68) failed [ 331.658906][ T7193] FAT-fs (loop4): Directory bread(block 69) failed [ 331.703932][ T7197] loop3: detected capacity change from 0 to 512 [ 331.707535][ T7193] FAT-fs (loop4): Directory bread(block 70) failed [ 331.766522][ T7193] FAT-fs (loop4): Directory bread(block 71) failed [ 331.781794][ T7197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.787255][ T7193] FAT-fs (loop4): Directory bread(block 72) failed [ 331.821863][ T7193] FAT-fs (loop4): Directory bread(block 73) failed [ 331.845860][ T7197] EXT4-fs (loop3): 1 truncate cleaned up [ 331.890150][ T7197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.155594][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 333.085006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.095331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.113285][ T6862] device veth0_vlan entered promiscuous mode [ 333.130825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.174909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.227707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.247317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.296987][ T6862] device veth1_vlan entered promiscuous mode [ 333.395497][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.408368][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.423981][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.433109][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.444948][ T6862] device veth0_macvtap entered promiscuous mode [ 333.474799][ T6862] device veth1_macvtap entered promiscuous mode [ 333.593788][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.619760][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.640228][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.663614][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.690847][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.720854][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.741282][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.763797][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.790008][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.809128][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.842419][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.860232][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.887084][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.969933][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.006416][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.016285][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.047973][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.065390][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.085603][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.096095][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.112683][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.125523][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.281411][ T7247] loop3: detected capacity change from 0 to 2048 [ 335.905010][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.916018][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.934957][ T6862] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.591367][ T6862] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.620764][ T6862] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.662110][ T6862] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.929021][ T11] kworker/u4:1: attempt to access beyond end of device [ 336.929021][ T11] loop4: rw=1048577, sector=1224, nr_sectors = 608 limit=256 [ 336.961489][ T11] kworker/u4:1: attempt to access beyond end of device [ 336.961489][ T11] loop4: rw=1048577, sector=1864, nr_sectors = 1444 limit=256 [ 337.562136][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.595351][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.645799][ T5239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.654145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.695191][ T5239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.743199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.109255][ T7270] loop3: detected capacity change from 0 to 764 [ 339.876137][ T7270] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 339.957439][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 339.957456][ T27] audit: type=1326 audit(1734108515.113:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.057576][ T27] audit: type=1326 audit(1734108515.163:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.126596][ T27] audit: type=1326 audit(1734108515.163:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.265241][ T27] audit: type=1326 audit(1734108515.163:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.406134][ T27] audit: type=1326 audit(1734108515.163:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.492553][ T27] audit: type=1326 audit(1734108515.163:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.514959][ T27] audit: type=1326 audit(1734108515.163:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.569423][ T27] audit: type=1326 audit(1734108515.233:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.623219][ T27] audit: type=1326 audit(1734108515.233:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.652998][ T27] audit: type=1326 audit(1734108515.233:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 340.973948][ T7300] loop3: detected capacity change from 0 to 2048 [ 344.132325][ T7327] loop8: detected capacity change from 0 to 256 [ 345.850260][ T7327] FAT-fs (loop8): Directory bread(block 64) failed [ 345.877027][ T7327] FAT-fs (loop8): Directory bread(block 65) failed [ 345.944438][ T7327] FAT-fs (loop8): Directory bread(block 66) failed [ 345.956687][ T7327] FAT-fs (loop8): Directory bread(block 67) failed [ 345.963608][ T7327] FAT-fs (loop8): Directory bread(block 68) failed [ 346.023198][ T7327] FAT-fs (loop8): Directory bread(block 69) failed [ 346.057150][ T7327] FAT-fs (loop8): Directory bread(block 70) failed [ 346.077306][ T7327] FAT-fs (loop8): Directory bread(block 71) failed [ 346.083959][ T7327] FAT-fs (loop8): Directory bread(block 72) failed [ 346.134613][ T7327] FAT-fs (loop8): Directory bread(block 73) failed [ 347.192814][ T7345] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 347.456280][ T4523] kworker/u4:16: attempt to access beyond end of device [ 347.456280][ T4523] loop8: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 347.569961][ T4523] kworker/u4:16: attempt to access beyond end of device [ 347.569961][ T4523] loop8: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 347.801289][ T7357] loop7: detected capacity change from 0 to 128 [ 347.852822][ T7357] FAT-fs (loop7): bogus number of reserved sectors [ 347.877115][ T7357] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 347.945954][ T7357] FAT-fs (loop7): Can't find a valid FAT filesystem [ 352.609607][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 352.623189][ T7393] loop5: detected capacity change from 0 to 256 [ 352.651529][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 352.726011][ T7393] FAT-fs (loop5): Directory bread(block 64) failed [ 352.742770][ T7393] FAT-fs (loop5): Directory bread(block 65) failed [ 352.765590][ T7393] FAT-fs (loop5): Directory bread(block 66) failed [ 352.790459][ T7393] FAT-fs (loop5): Directory bread(block 67) failed [ 352.813079][ T7393] FAT-fs (loop5): Directory bread(block 68) failed [ 352.834612][ T7393] FAT-fs (loop5): Directory bread(block 69) failed [ 352.873653][ T7393] FAT-fs (loop5): Directory bread(block 70) failed [ 352.926215][ T7393] FAT-fs (loop5): Directory bread(block 71) failed [ 352.956676][ T7393] FAT-fs (loop5): Directory bread(block 72) failed [ 353.001861][ T7393] FAT-fs (loop5): Directory bread(block 73) failed [ 354.466425][ T27] audit: type=1326 audit(1734108529.583:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 354.557433][ T27] audit: type=1326 audit(1734108529.583:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 354.614502][ T36] kworker/u4:2: attempt to access beyond end of device [ 354.614502][ T36] loop5: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 354.674087][ T36] kworker/u4:2: attempt to access beyond end of device [ 354.674087][ T36] loop5: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 354.676455][ T27] audit: type=1326 audit(1734108529.583:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 354.829723][ T27] audit: type=1326 audit(1734108529.583:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 354.853791][ T7418] loop3: detected capacity change from 0 to 764 [ 355.005459][ T7418] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 355.102698][ T27] audit: type=1326 audit(1734108529.583:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 355.346316][ T27] audit: type=1326 audit(1734108530.213:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 355.759372][ T27] audit: type=1326 audit(1734108530.213:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 355.843017][ T27] audit: type=1326 audit(1734108530.213:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 356.017782][ T27] audit: type=1326 audit(1734108530.213:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 356.124824][ T7432] loop7: detected capacity change from 0 to 512 [ 356.140668][ T27] audit: type=1326 audit(1734108530.213:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 356.255475][ T7432] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 356.331447][ T7432] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.085338][ T7455] loop5: detected capacity change from 0 to 512 [ 358.097382][ T6695] EXT4-fs (loop7): unmounting filesystem. [ 358.146505][ T7455] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 358.211659][ T7458] loop7: detected capacity change from 0 to 256 [ 358.366256][ T7455] EXT4-fs (loop5): 1 orphan inode deleted [ 358.387144][ T7458] FAT-fs (loop7): Directory bread(block 64) failed [ 358.409197][ T7455] EXT4-fs (loop5): 1 truncate cleaned up [ 358.430732][ T7455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 358.452634][ T7458] FAT-fs (loop7): Directory bread(block 65) failed [ 358.460168][ T7458] FAT-fs (loop7): Directory bread(block 66) failed [ 358.467483][ T7458] FAT-fs (loop7): Directory bread(block 67) failed [ 358.474243][ T7458] FAT-fs (loop7): Directory bread(block 68) failed [ 358.480878][ T7458] FAT-fs (loop7): Directory bread(block 69) failed [ 358.487674][ T7458] FAT-fs (loop7): Directory bread(block 70) failed [ 358.495069][ T7458] FAT-fs (loop7): Directory bread(block 71) failed [ 358.503052][ T7458] FAT-fs (loop7): Directory bread(block 72) failed [ 358.510362][ T7458] FAT-fs (loop7): Directory bread(block 73) failed [ 359.799959][ T4523] kworker/u4:16: attempt to access beyond end of device [ 359.799959][ T4523] loop7: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 359.855707][ T4523] kworker/u4:16: attempt to access beyond end of device [ 359.855707][ T4523] loop7: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 363.362893][ T7502] loop3: detected capacity change from 0 to 512 [ 363.620923][ T7502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.873687][ T7502] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.213689][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 364.213707][ T27] audit: type=1800 audit(1734108539.363:597): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.790" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 364.449200][ T7519] loop8: detected capacity change from 0 to 16 [ 364.483388][ T7519] erofs: (device loop8): mounted with root inode @ nid 36. [ 364.546591][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 364.754748][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 365.434570][ T27] audit: type=1326 audit(1734108540.573:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 365.526820][ T27] audit: type=1326 audit(1734108540.623:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 365.932826][ T27] audit: type=1326 audit(1734108540.623:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 366.080410][ T27] audit: type=1326 audit(1734108540.623:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 366.103047][ T27] audit: type=1326 audit(1734108540.623:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 366.151459][ T7531] loop5: detected capacity change from 0 to 256 [ 366.264441][ T7531] FAT-fs (loop5): Directory bread(block 64) failed [ 366.326570][ T7531] FAT-fs (loop5): Directory bread(block 65) failed [ 366.333252][ T7531] FAT-fs (loop5): Directory bread(block 66) failed [ 366.350528][ T7531] FAT-fs (loop5): Directory bread(block 67) failed [ 366.381033][ T7531] FAT-fs (loop5): Directory bread(block 68) failed [ 366.400481][ T7531] FAT-fs (loop5): Directory bread(block 69) failed [ 366.500681][ T7531] FAT-fs (loop5): Directory bread(block 70) failed [ 366.529045][ T7531] FAT-fs (loop5): Directory bread(block 71) failed [ 366.567155][ T7531] FAT-fs (loop5): Directory bread(block 72) failed [ 366.608679][ T7531] FAT-fs (loop5): Directory bread(block 73) failed [ 366.660871][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 372.332787][ T27] audit: type=1326 audit(1734108547.483:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 373.072520][ T27] audit: type=1326 audit(1734108547.633:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 373.193179][ T27] audit: type=1326 audit(1734108547.633:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 373.570595][ T7614] loop8: detected capacity change from 0 to 2048 [ 374.962010][ T27] audit: type=1326 audit(1734108550.113:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 375.109297][ T27] audit: type=1326 audit(1734108550.173:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 375.157972][ T4381] kworker/u4:9: attempt to access beyond end of device [ 375.157972][ T4381] loop5: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 375.224126][ T4381] kworker/u4:9: attempt to access beyond end of device [ 375.224126][ T4381] loop5: rw=1, sector=1864, nr_sectors = 680 limit=256 [ 375.247263][ T27] audit: type=1326 audit(1734108550.173:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 375.270300][ T27] audit: type=1326 audit(1734108550.173:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 375.306120][ T27] audit: type=1326 audit(1734108550.173:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 375.539643][ T27] audit: type=1326 audit(1734108550.173:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.8.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6bdb85d19 code=0x7ffc0000 [ 378.406949][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.413318][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.803623][ T7680] loop3: detected capacity change from 0 to 2048 [ 380.400307][ T7690] loop8: detected capacity change from 0 to 256 [ 380.498612][ T7690] FAT-fs (loop8): Directory bread(block 64) failed [ 380.546845][ T7690] FAT-fs (loop8): Directory bread(block 65) failed [ 380.553542][ T7690] FAT-fs (loop8): Directory bread(block 66) failed [ 380.601706][ T7690] FAT-fs (loop8): Directory bread(block 67) failed [ 380.628658][ T7690] FAT-fs (loop8): Directory bread(block 68) failed [ 380.666014][ T7690] FAT-fs (loop8): Directory bread(block 69) failed [ 380.688308][ T7690] FAT-fs (loop8): Directory bread(block 70) failed [ 380.736520][ T7690] FAT-fs (loop8): Directory bread(block 71) failed [ 380.745565][ T7690] FAT-fs (loop8): Directory bread(block 72) failed [ 380.787162][ T7690] FAT-fs (loop8): Directory bread(block 73) failed [ 380.971104][ T7708] loop7: detected capacity change from 0 to 128 [ 381.056741][ T7708] FAT-fs (loop7): bogus number of reserved sectors [ 381.068249][ T7708] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 381.096866][ T7708] FAT-fs (loop7): Can't find a valid FAT filesystem [ 387.500060][ T7767] loop4: detected capacity change from 0 to 128 [ 387.507411][ T27] audit: type=1326 audit(1734108562.663:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 387.554504][ T7767] FAT-fs (loop4): bogus number of reserved sectors [ 387.590080][ T7767] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 387.696521][ T7767] FAT-fs (loop4): Can't find a valid FAT filesystem [ 387.724556][ T27] audit: type=1326 audit(1734108562.673:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 387.921567][ T27] audit: type=1326 audit(1734108562.823:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 388.289825][ T27] audit: type=1326 audit(1734108562.823:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 388.973945][ T27] audit: type=1326 audit(1734108562.823:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 389.083469][ T27] audit: type=1326 audit(1734108562.853:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 389.149445][ T27] audit: type=1326 audit(1734108562.853:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 390.456556][ T27] audit: type=1326 audit(1734108562.853:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 390.683736][ T27] audit: type=1326 audit(1734108562.853:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 390.717551][ T27] audit: type=1326 audit(1734108562.853:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea8b85d19 code=0x7ffc0000 [ 391.182896][ T7813] loop5: detected capacity change from 0 to 764 [ 391.222285][ T7813] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 391.505361][ T7818] : renamed from ipvlan1 [ 392.433912][ T7824] loop7: detected capacity change from 0 to 128 [ 392.502074][ T7824] FAT-fs (loop7): bogus number of reserved sectors [ 392.543420][ T7824] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 392.635840][ T7824] FAT-fs (loop7): Can't find a valid FAT filesystem [ 394.249986][ T7845] loop4: detected capacity change from 0 to 256 [ 394.386137][ T7848] loop5: detected capacity change from 0 to 512 [ 394.410055][ T7845] FAT-fs (loop4): Directory bread(block 64) failed [ 395.138857][ T7845] FAT-fs (loop4): Directory bread(block 65) failed [ 395.167416][ T7845] FAT-fs (loop4): Directory bread(block 66) failed [ 395.204977][ T7845] FAT-fs (loop4): Directory bread(block 67) failed [ 395.222581][ T7845] FAT-fs (loop4): Directory bread(block 68) failed [ 395.240556][ T7845] FAT-fs (loop4): Directory bread(block 69) failed [ 395.247413][ T7845] FAT-fs (loop4): Directory bread(block 70) failed [ 395.254162][ T7845] FAT-fs (loop4): Directory bread(block 71) failed [ 395.265430][ T7845] FAT-fs (loop4): Directory bread(block 72) failed [ 395.282487][ T7845] FAT-fs (loop4): Directory bread(block 73) failed [ 395.345099][ T7848] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 395.363431][ T7848] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.383877][ T7863] loop3: detected capacity change from 0 to 764 [ 395.438922][ T7863] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 395.450858][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 395.450873][ T27] audit: type=1800 audit(1734108570.603:647): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.873" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 395.604545][ T27] audit: type=1800 audit(1734108570.633:648): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.873" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 395.633939][ T27] audit: type=1326 audit(1734108570.743:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 395.656499][ T27] audit: type=1326 audit(1734108570.743:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 395.703173][ T27] audit: type=1326 audit(1734108570.743:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 395.820218][ T27] audit: type=1326 audit(1734108570.743:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 395.851489][ T4745] EXT4-fs (loop5): unmounting filesystem. [ 395.965276][ T27] audit: type=1326 audit(1734108570.743:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 395.999038][ T7874] loop8: detected capacity change from 0 to 764 [ 396.044709][ T7874] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 396.086081][ T27] audit: type=1326 audit(1734108570.743:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 396.361037][ T27] audit: type=1326 audit(1734108570.743:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 397.129044][ T27] audit: type=1326 audit(1734108570.743:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7860 comm="syz.3.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f8ffa985d19 code=0x7ffc0000 [ 398.918900][ T7910] loop7: detected capacity change from 0 to 128 [ 398.972654][ T7910] FAT-fs (loop7): bogus number of reserved sectors [ 398.987865][ T7910] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 399.023750][ T7910] FAT-fs (loop7): Can't find a valid FAT filesystem [ 399.407254][ T7920] loop7: detected capacity change from 0 to 512 [ 399.481737][ T7920] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 399.498871][ T7920] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.611521][ T7927] ------------[ cut here ]------------ [ 399.617042][ T7927] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 399.630755][ T7927] WARNING: CPU: 1 PID: 7927 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 399.640694][ T7927] Modules linked in: [ 399.644649][ T7927] CPU: 1 PID: 7927 Comm: syz.7.889 Not tainted 6.1.119-syzkaller #0 [ 399.652668][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.662764][ T7927] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 399.668544][ T7927] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 399.688214][ T7927] RSP: 0018:ffffc900064e7410 EFLAGS: 00010046 [ 399.694308][ T7927] RAX: f3fab03a4b54cd00 RBX: ffffffff90c37720 RCX: 0000000000080000 [ 399.702291][ T7927] RDX: ffffc9000edba000 RSI: 0000000000004e9a RDI: 0000000000004e9b [ 399.710281][ T7927] RBP: ffffc900064e7510 R08: ffffffff8152b88e R09: ffffed10171e4f1c [ 399.718278][ T7927] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 399.726274][ T7927] R13: 1ffff92000c9ce90 R14: ffff8880714f48c0 R15: ffffffff974dff41 [ 399.734308][ T7927] FS: 00007f5a8f3de6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 399.743248][ T7927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.749835][ T7927] CR2: 00007f5a8f3ddf98 CR3: 0000000054e94000 CR4: 00000000003506e0 [ 399.757814][ T7927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.765788][ T7927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.773761][ T7927] Call Trace: [ 399.777039][ T7927] [ 399.779968][ T7927] ? __warn+0x15a/0x520 [ 399.784166][ T7927] ? look_up_lock_class+0xc2/0x140 [ 399.789286][ T7927] ? report_bug+0x2af/0x500 [ 399.793858][ T7927] ? look_up_lock_class+0xc2/0x140 [ 399.798974][ T7927] ? handle_bug+0x3d/0x70 [ 399.803311][ T7927] ? exc_invalid_op+0x16/0x40 [ 399.807999][ T7927] ? asm_exc_invalid_op+0x16/0x20 [ 399.813055][ T7927] ? __warn_printk+0x28e/0x350 [ 399.817826][ T7927] ? look_up_lock_class+0xc2/0x140 [ 399.822942][ T7927] register_lock_class+0x100/0x990 [ 399.828176][ T7927] ? is_dynamic_key+0x260/0x260 [ 399.833046][ T7927] ? mark_lock+0x9a/0x340 [ 399.837387][ T7927] __lock_acquire+0xd3/0x1f80 [ 399.842077][ T7927] lock_acquire+0x1f8/0x5a0 [ 399.846603][ T7927] ? ext4_move_extents+0x3a0/0xe10 [ 399.851741][ T7927] ? read_lock_is_recursive+0x10/0x10 [ 399.857136][ T7927] ? __might_sleep+0xb0/0xb0 [ 399.861738][ T7927] ? rwsem_write_trylock+0x166/0x210 [ 399.867044][ T7927] ? inode_owner_or_capable+0x210/0x210 [ 399.872804][ T7927] ? clear_nonspinnable+0x60/0x60 [ 399.877839][ T7927] down_write_nested+0x39/0x60 [ 399.882616][ T7927] ? ext4_move_extents+0x3a0/0xe10 [ 399.887730][ T7927] ext4_move_extents+0x3a0/0xe10 [ 399.892678][ T7927] ? rcu_read_lock_any_held+0xb3/0x160 [ 399.898154][ T7927] ? ext4_double_up_write_data_sem+0x30/0x30 [ 399.904142][ T7927] ext4_ioctl+0x3a8d/0x5f60 [ 399.908658][ T7927] ? kasan_set_track+0x4b/0x70 [ 399.913435][ T7927] ? security_file_ioctl+0x6d/0xa0 [ 399.918546][ T7927] ? __se_sys_ioctl+0x47/0x160 [ 399.923314][ T7927] ? do_syscall_64+0x3b/0xb0 [ 399.927915][ T7927] ? ext4_fileattr_set+0x1770/0x1770 [ 399.933232][ T7927] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 399.938094][ T7927] ? __x64_compat_sys_ioctl+0x80/0x80 [ 399.943462][ T7927] ? __lock_acquire+0x1f80/0x1f80 [ 399.948495][ T7927] ? lockdep_hardirqs_on+0x94/0x130 [ 399.953701][ T7927] ? __kmem_cache_free+0x25c/0x3c0 [ 399.958905][ T7927] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 399.964548][ T7927] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 399.970193][ T7927] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 399.975847][ T7927] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 399.981328][ T7927] ? __fget_files+0x28/0x4a0 [ 399.985952][ T7927] ? __fget_files+0x28/0x4a0 [ 399.990544][ T7927] ? __fget_files+0x435/0x4a0 [ 399.995225][ T7927] ? __fget_files+0x28/0x4a0 [ 399.999816][ T7927] ? bpf_lsm_file_ioctl+0x5/0x10 [ 400.004773][ T7927] ? security_file_ioctl+0x7d/0xa0 [ 400.009888][ T7927] ? ext4_fileattr_set+0x1770/0x1770 [ 400.015179][ T7927] __se_sys_ioctl+0xf1/0x160 [ 400.019795][ T7927] do_syscall_64+0x3b/0xb0 [ 400.024221][ T7927] ? clear_bhb_loop+0x45/0xa0 [ 400.028907][ T7927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.034811][ T7927] RIP: 0033:0x7f5a8f585d19 [ 400.039242][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.058848][ T7927] RSP: 002b:00007f5a8f3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.067266][ T7927] RAX: ffffffffffffffda RBX: 00007f5a8f776080 RCX: 00007f5a8f585d19 [ 400.075239][ T7927] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 000000000000000a [ 400.083213][ T7927] RBP: 00007f5a8f601a20 R08: 0000000000000000 R09: 0000000000000000 [ 400.091185][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.099156][ T7927] R13: 0000000000000000 R14: 00007f5a8f776080 R15: 00007fff83a6d258 [ 400.107134][ T7927] [ 400.110162][ T7927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.117446][ T7927] CPU: 1 PID: 7927 Comm: syz.7.889 Not tainted 6.1.119-syzkaller #0 [ 400.125425][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.135477][ T7927] Call Trace: [ 400.138869][ T7927] [ 400.141803][ T7927] dump_stack_lvl+0x1e3/0x2cb [ 400.146494][ T7927] ? nf_tcp_handle_invalid+0x642/0x642 [ 400.151961][ T7927] ? panic+0x764/0x764 [ 400.156038][ T7927] ? vscnprintf+0x59/0x80 [ 400.160374][ T7927] panic+0x318/0x764 [ 400.164269][ T7927] ? __warn+0x169/0x520 [ 400.168426][ T7927] ? memcpy_page_flushcache+0xfc/0xfc [ 400.173806][ T7927] __warn+0x348/0x520 [ 400.177791][ T7927] ? look_up_lock_class+0xc2/0x140 [ 400.182903][ T7927] report_bug+0x2af/0x500 [ 400.187249][ T7927] ? look_up_lock_class+0xc2/0x140 [ 400.192363][ T7927] handle_bug+0x3d/0x70 [ 400.196526][ T7927] exc_invalid_op+0x16/0x40 [ 400.201037][ T7927] asm_exc_invalid_op+0x16/0x20 [ 400.205893][ T7927] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 400.211612][ T7927] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 400.231233][ T7927] RSP: 0018:ffffc900064e7410 EFLAGS: 00010046 [ 400.237304][ T7927] RAX: f3fab03a4b54cd00 RBX: ffffffff90c37720 RCX: 0000000000080000 [ 400.245277][ T7927] RDX: ffffc9000edba000 RSI: 0000000000004e9a RDI: 0000000000004e9b [ 400.253254][ T7927] RBP: ffffc900064e7510 R08: ffffffff8152b88e R09: ffffed10171e4f1c [ 400.261247][ T7927] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 400.269229][ T7927] R13: 1ffff92000c9ce90 R14: ffff8880714f48c0 R15: ffffffff974dff41 [ 400.277214][ T7927] ? __warn_printk+0x28e/0x350 [ 400.282002][ T7927] register_lock_class+0x100/0x990 [ 400.287126][ T7927] ? is_dynamic_key+0x260/0x260 [ 400.291987][ T7927] ? mark_lock+0x9a/0x340 [ 400.296331][ T7927] __lock_acquire+0xd3/0x1f80 [ 400.301030][ T7927] lock_acquire+0x1f8/0x5a0 [ 400.305540][ T7927] ? ext4_move_extents+0x3a0/0xe10 [ 400.310700][ T7927] ? read_lock_is_recursive+0x10/0x10 [ 400.316098][ T7927] ? __might_sleep+0xb0/0xb0 [ 400.320689][ T7927] ? rwsem_write_trylock+0x166/0x210 [ 400.325979][ T7927] ? inode_owner_or_capable+0x210/0x210 [ 400.331543][ T7927] ? clear_nonspinnable+0x60/0x60 [ 400.336752][ T7927] down_write_nested+0x39/0x60 [ 400.341527][ T7927] ? ext4_move_extents+0x3a0/0xe10 [ 400.346641][ T7927] ext4_move_extents+0x3a0/0xe10 [ 400.351587][ T7927] ? rcu_read_lock_any_held+0xb3/0x160 [ 400.357053][ T7927] ? ext4_double_up_write_data_sem+0x30/0x30 [ 400.363041][ T7927] ext4_ioctl+0x3a8d/0x5f60 [ 400.367554][ T7927] ? kasan_set_track+0x4b/0x70 [ 400.372329][ T7927] ? security_file_ioctl+0x6d/0xa0 [ 400.377456][ T7927] ? __se_sys_ioctl+0x47/0x160 [ 400.382218][ T7927] ? do_syscall_64+0x3b/0xb0 [ 400.386819][ T7927] ? ext4_fileattr_set+0x1770/0x1770 [ 400.392124][ T7927] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 400.396974][ T7927] ? __x64_compat_sys_ioctl+0x80/0x80 [ 400.402347][ T7927] ? __lock_acquire+0x1f80/0x1f80 [ 400.407383][ T7927] ? lockdep_hardirqs_on+0x94/0x130 [ 400.412584][ T7927] ? __kmem_cache_free+0x25c/0x3c0 [ 400.417700][ T7927] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 400.423343][ T7927] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 400.428985][ T7927] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 400.434632][ T7927] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 400.440130][ T7927] ? __fget_files+0x28/0x4a0 [ 400.444734][ T7927] ? __fget_files+0x28/0x4a0 [ 400.449326][ T7927] ? __fget_files+0x435/0x4a0 [ 400.454013][ T7927] ? __fget_files+0x28/0x4a0 [ 400.458611][ T7927] ? bpf_lsm_file_ioctl+0x5/0x10 [ 400.463549][ T7927] ? security_file_ioctl+0x7d/0xa0 [ 400.468660][ T7927] ? ext4_fileattr_set+0x1770/0x1770 [ 400.473953][ T7927] __se_sys_ioctl+0xf1/0x160 [ 400.478541][ T7927] do_syscall_64+0x3b/0xb0 [ 400.482967][ T7927] ? clear_bhb_loop+0x45/0xa0 [ 400.487673][ T7927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.493575][ T7927] RIP: 0033:0x7f5a8f585d19 [ 400.498003][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.517635][ T7927] RSP: 002b:00007f5a8f3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.526049][ T7927] RAX: ffffffffffffffda RBX: 00007f5a8f776080 RCX: 00007f5a8f585d19 [ 400.534018][ T7927] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 000000000000000a [ 400.541991][ T7927] RBP: 00007f5a8f601a20 R08: 0000000000000000 R09: 0000000000000000 [ 400.549963][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.557928][ T7927] R13: 0000000000000000 R14: 00007f5a8f776080 R15: 00007fff83a6d258 [ 400.565903][ T7927] [ 400.569259][ T7927] Kernel Offset: disabled [ 400.573595][ T7927] Rebooting in 86400 seconds..