last executing test programs: 2m34.158670997s ago: executing program 32 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000340), 0x4) 2m16.128263195s ago: executing program 1 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 2m15.847783629s ago: executing program 1 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 2m15.616723433s ago: executing program 1 (id=1083): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x51201, 0x21400}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m15.290497789s ago: executing program 1 (id=1085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$eJzs3MtvG8UfAPDvruP0119bEkp59AEECiLikTRtgR44AAKJQ5GQ4ADHKEmrUrdBTZBoVUGLUDkhhMQdceRf4AQXhDghcYU7qlShXNpyMlp7ndiO7SaOXUP8+UjbzOyjM9/Mjj07YyeAoTWR/ZNE7I6I3yNiLCLS5hMmqj9urVyeu71yeS6Jcvntv5Lssri5cnmudmqS/9yVZybTiPSzJA62KHfp4qWzs6XSwoU8P7187oPppYuXnjtzbvb0wumF80dPnDh+bObFF44+35M4szrdPPDx4qH9b7z31Zsnv2iIvymOHpnodPDJcrnHxQ3Wnrp0MjLAirAphYjImqtY6f9jUYi1xhuL1z8daOWAviqXy+Vd7Q9fKQPbWBKNeV0ehkXtjT57/q1tzYOAl/s3/Bi4G69UH4CyuG/lW/XIyOo8SLHp+baXJiLi3St/f5Nt0Z95CACABj9k459nW43/0nig7rx78rWh8Yi4NyL2RsR9EbEvIu6PqJz7YEQ8tMnymxdJ1o9/0utdBbZB2fjvpXxtq3H8t7oKNl7Ic3sq8ReTU2dKC0fy38lkFHdk+ZkOZfz42m9ftjtWP/7Ltqz82lgwr8f1kR2N18zPLs9uJeZ6N65GHBhpFX+yuhKQRMT+iDjQZRlnnv7uULtjd46/gx6sM5W/jXiq2v5Xoin+mqTz+uT0/6K0cGS6dles98uv195qV/6W4u+BrP3/3/L+X41/PKlfr13afBnX/vi87TNNt/f/aPJOJT2a7/todnn5wkzEaHKyWun6/UfXrq3la+dn8U8ebt3/98bab+JgRGQ38cMR8UhEPJrX/bGIeDwiDneI/+dXn3i/+/j7K4t/flPtv5YYjeY9rROFsz9931Do+Lr4b3du/+OV1GS+ZyOvfxupV3d3MwAAAPz3pBGxO5J0ajWdplNT1c/L74tIS4tLy8+cWvzw/Hz1OwLjUUxrM11jdfOhM/ljfTV/NSKqHy2oHT+Wzxt/XdhZyU/NLZbmBx08DLldbfp/5s/CoGsH9J3va8Hw0v9heOn/MLz0fxheLfr/zkHUA7j7Wr3/fzKAegB3X1P/t+wHQ2TEcB+GVtv5v+38l3+ACvP/MJSWdsadvyTfMVH7n7q8fNsmovivqMbWE+WkZeNGOuiKSfQzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF75JwAA//+QOeBZ") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) 2m14.434630252s ago: executing program 1 (id=1088): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m14.411166042s ago: executing program 0 (id=1089): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x81, &(0x7f0000001440)=0x0) r3 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0xe7bd, 0x13090}, &(0x7f0000000340), 0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_uring_enter(r3, 0x14e2, 0x27b7, 0x69, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='xen_mmu_pmd_clear\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540), 0xc) 2m14.397747573s ago: executing program 2 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c00"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 2m14.170631886s ago: executing program 1 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m13.999112919s ago: executing program 2 (id=1094): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 2m13.547696496s ago: executing program 33 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m13.413668618s ago: executing program 2 (id=1096): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m12.561903562s ago: executing program 2 (id=1098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) 2m11.854205803s ago: executing program 0 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 2m11.807946714s ago: executing program 2 (id=1101): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2m11.551623328s ago: executing program 0 (id=1103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0x40000000, 0x7ffd}}}, 0x118) close_range(r1, 0xffffffffffffffff, 0x0) 2m11.551314608s ago: executing program 2 (id=1104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210c1e, &(0x7f00000002c0)={[{@minixdf}, {@auto_da_alloc}, {@nodiscard}]}, 0x11, 0x514, &(0x7f0000001780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x3) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x4, 0xb82, 0x40004, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x2, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x108c0, 0x4) 2m10.975907577s ago: executing program 34 (id=1104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210c1e, &(0x7f00000002c0)={[{@minixdf}, {@auto_da_alloc}, {@nodiscard}]}, 0x11, 0x514, &(0x7f0000001780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x3) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x4, 0xb82, 0x40004, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x2, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x108c0, 0x4) 2m10.80992022s ago: executing program 0 (id=1107): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 2m10.256951799s ago: executing program 0 (id=1109): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x8040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x1, 0x4, 0x5, 0x0, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x2, 0x1, 0x2, 0x4, 0x10}], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0xe3c, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x2, 0x4, 0x6}, {0x2, 0x4, 0x3, 0x5}, {0x1, 0x1, 0x1, 0x6}, {0x2, 0x2, 0x8, 0x4}, {0x5, 0x4, 0x3, 0xb}, {0x0, 0x4, 0xe, 0x3}, {0x3, 0x1, 0x7, 0x2}, {0x5, 0x3, 0xc, 0xb}, {0x1, 0x2, 0xc, 0x9}], 0x10, 0x0, @void, @value}, 0x94) 2m9.961622184s ago: executing program 0 (id=1112): unshare(0x40020000) 1m53.991897769s ago: executing program 35 (id=1112): unshare(0x40020000) 1m36.529516468s ago: executing program 6 (id=1095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1m36.078806425s ago: executing program 6 (id=1159): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='mounts\x00') preadv(r8, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {0x0}, {&(0x7f0000000880)=""/214, 0xd6}], 0x3, 0x6c, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000380), 0x6e, &(0x7f0000000780)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000640)=""/96, 0x60}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10001}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0x7ff, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7, 0x8, 0x1, 0x9, 0x80000, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x3, 0x1, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x9, 0x50, 0x1, 0x5, 0x1, 0x1, 0xfff}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x33, 0x7]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x3, 0xe7ff, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x0, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x160}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b0404000000000018001280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 1m34.898304314s ago: executing program 6 (id=1163): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x99) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x4, 0x0, 0x0, 0x3}) 1m33.386132898s ago: executing program 6 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000040000000951010402000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8000, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unshare(0x6a040000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0101000001010000140012800e00010069703665727370616e000000100002803e001200080001007232e4aa5d", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 1m18.004298373s ago: executing program 36 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000040000000951010402000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8000, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unshare(0x6a040000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0101000001010000140012800e00010069703665727370616e000000100002803e001200080001007232e4aa5d", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 1m10.007078922s ago: executing program 8 (id=1264): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000090, &(0x7f0000000540), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x28011, r2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x80, 0x7ff, 0x540e0, r2, 0x1ff, '\x00', 0x0, r2, 0x3, 0x5, 0x0, 0x4, @void, @value, @value=r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000020fe753dfd0de8531789a79ba200000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 1m7.361290804s ago: executing program 8 (id=1277): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m6.934723081s ago: executing program 8 (id=1281): mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r5, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x128, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmmsg$inet6(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404000c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) 1m5.871507348s ago: executing program 8 (id=1286): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=') 1m5.647611381s ago: executing program 8 (id=1289): socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m5.205173478s ago: executing program 8 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000e8ffd00000000080000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0xb) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x5bb981, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x65, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x2, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0xfd, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="3774b3c0c83f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @multicast2, @multicast, @local}}}}, 0x0) mmap(&(0x7f000066f000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0xc4ffb000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc}) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$cgroup_ro(r5, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) mknod(0x0, 0x1000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000180)=0x7fff, 0x4) 1m4.357849452s ago: executing program 37 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000e8ffd00000000080000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0xb) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x5bb981, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x65, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x2, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0xfd, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="3774b3c0c83f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @multicast2, @multicast, @local}}}}, 0x0) mmap(&(0x7f000066f000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0xc4ffb000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc}) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$cgroup_ro(r5, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) mknod(0x0, 0x1000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000180)=0x7fff, 0x4) 14.791611444s ago: executing program 9 (id=1695): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 7.655769018s ago: executing program 9 (id=1759): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x61c215ba17dc31e3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendfile(r0, r0, 0x0, 0xb) 6.723877053s ago: executing program 9 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 2.694852997s ago: executing program 7 (id=1801): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 2.53855289s ago: executing program 4 (id=1802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 2.444133081s ago: executing program 4 (id=1804): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 1.689896633s ago: executing program 3 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x4) 1.689458353s ago: executing program 5 (id=1807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) close(r1) 1.476865386s ago: executing program 7 (id=1808): socketpair$unix(0x1, 0x61c215ba17dc31e3, 0x0, 0x0) 1.420815587s ago: executing program 3 (id=1809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.377994018s ago: executing program 3 (id=1810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0}) sendmsg$rds(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}}], 0x2, 0x40012120, 0x0) 1.24169947s ago: executing program 5 (id=1811): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000025680)=[{{&(0x7f00000205c0)={0xa, 0x4e24, 0xe8, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000020700)=[@dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @hoplimit={{0x14, 0x29, 0x34, 0x5c}}], 0x48}}], 0x1, 0x4000800) 906.878446ms ago: executing program 9 (id=1812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 827.426597ms ago: executing program 5 (id=1813): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000020000e60000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4e, 0x0, 0x7, 0x7, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) clock_getres(0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 741.764088ms ago: executing program 7 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='M', 0x1}], 0x1, 0x0, 0x0, 0xc) 696.257329ms ago: executing program 4 (id=1815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x8, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 626.82077ms ago: executing program 7 (id=1816): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0xe, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x57}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x8}, @ldst={0x2, 0x2, 0x4, 0x9, 0x0, 0x6, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x87, &(0x7f0000000280)=""/135, 0x41000, 0x40, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0xcfdb, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x5, 0x1, 0x4, 0x6}, {0x5, 0x5, 0x5, 0x7}, {0x1, 0x1, 0x9, 0x6}], 0x10, 0x6d, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) 470.782223ms ago: executing program 4 (id=1817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 470.010763ms ago: executing program 9 (id=1818): r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 463.388013ms ago: executing program 7 (id=1819): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r8], 0x20}}, 0x0) 460.014483ms ago: executing program 5 (id=1820): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000"/45], 0x58}}, 0x0) 377.723194ms ago: executing program 3 (id=1821): r0 = socket$inet(0x2b, 0x801, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000002800, 0x2000000033c4, 0x2000000034e2], 0x0, 0x0, &(0x7f0000002800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x108) 281.939635ms ago: executing program 4 (id=1822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "300600", 0x58, 0x6, 0xff, @remote, @local, {[], {{0x100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x200, 0x0, 0x9, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x87f, 0x0, 0x8}, @exp_fastopen={0xfe, 0x14, 0xf989, "d4710afe6f44273a884d85ee8d706600"}, @exp_fastopen={0xfe, 0xa, 0xf989, "62dd2e8a14d0"}, @fastopen={0x22, 0xb, "6b43a76981c226c2be"}, @mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0xcb, 0x8}]}}}}}}}}, 0x0) 256.039726ms ago: executing program 9 (id=1823): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000090, &(0x7f0000000540), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x28011, r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x80, 0x7ff, 0x540e0, r3, 0x1ff, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x4, @void, @value, @value=r3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000020fe753dfd0de8531789a79ba200000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 233.342926ms ago: executing program 3 (id=1824): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) 230.684447ms ago: executing program 5 (id=1825): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x4) 181.841097ms ago: executing program 7 (id=1826): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 68.085609ms ago: executing program 4 (id=1827): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x9c}}, 0x0) 64.448889ms ago: executing program 5 (id=1828): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c907128e05c2010200010902120001000000000904000000cb"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 0s ago: executing program 3 (id=1829): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x2}, {0x7, 0x7fff, 0x8, 0x7}}}]}]}]}}]}, 0x60}}, 0x400c084) kernel console output (not intermixed with test programs): romiscuous mode [ 278.663500][ T7805] device bond_slave_1 entered promiscuous mode [ 278.774526][ T7805] device batadv0 entered promiscuous mode [ 278.869803][ T7805] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 278.892628][ T7805] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 278.949591][ T7809] loop8: detected capacity change from 0 to 512 [ 278.959998][ T7805] device bond0 left promiscuous mode [ 278.970132][ T7805] device bond_slave_0 left promiscuous mode [ 278.976376][ T7805] device bond_slave_1 left promiscuous mode [ 278.993974][ T7809] EXT4-fs: Ignoring removed nobh option [ 279.042137][ T7805] device batadv0 left promiscuous mode [ 279.135409][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.163698][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.183574][ T7809] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1199: invalid indirect mapped block 256 (level 2) [ 279.206186][ T7809] EXT4-fs (loop8): 2 truncates cleaned up [ 279.212050][ T7809] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 279.222329][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.229851][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.230315][ T7813] loop5: detected capacity change from 0 to 512 [ 279.249282][ T4304] device veth0_to_bridge left promiscuous mode [ 279.256054][ T27] audit: type=1800 audit(1744378598.969:929): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1199" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 279.256583][ T4304] bridge0: port 3(veth0_to_bridge) entered disabled state [ 279.305130][ T4304] device bridge_slave_1 left promiscuous mode [ 279.311400][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.324919][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1201'. [ 279.335906][ T27] audit: type=1800 audit(1744378599.049:930): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1199" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 279.377642][ T4304] device bridge_slave_0 left promiscuous mode [ 279.383934][ T7813] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1200: casefold flag without casefold feature [ 279.404288][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.423556][ T7813] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1200: couldn't read orphan inode 15 (err -117) [ 279.448460][ T7813] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 279.475398][ T4304] device hsr_slave_0 left promiscuous mode [ 279.511245][ T4304] device hsr_slave_1 left promiscuous mode [ 279.567021][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.589334][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.620925][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.656533][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.690482][ T4304] device bridge_slave_1 left promiscuous mode [ 279.719573][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.754249][ T4304] device bridge_slave_0 left promiscuous mode [ 279.773535][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.818784][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 279.966788][ T4304] device veth1_macvtap left promiscuous mode [ 279.972916][ T4304] device veth0_macvtap left promiscuous mode [ 279.987783][ T7581] EXT4-fs (loop8): unmounting filesystem. [ 279.989343][ T4304] device veth1_vlan left promiscuous mode [ 280.019447][ T4304] device veth0_vlan left promiscuous mode [ 280.076673][ T4304] device veth1_macvtap left promiscuous mode [ 280.082780][ T4304] device veth0_macvtap left promiscuous mode [ 280.103647][ T4304] device veth1_vlan left promiscuous mode [ 280.109544][ T4304] device veth0_vlan left promiscuous mode [ 280.111633][ T7823] loop5: detected capacity change from 0 to 1024 [ 280.136745][ T7823] EXT4-fs: Ignoring removed bh option [ 280.197915][ T7823] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 280.266150][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 280.366191][ T7832] loop8: detected capacity change from 0 to 512 [ 280.396042][ T4304] infiniband syz!: set down [ 280.409135][ T7832] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 280.439038][ T7832] EXT4-fs (loop8): 1 truncate cleaned up [ 280.461195][ T7832] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 280.544780][ T27] audit: type=1326 audit(1744378600.249:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.609572][ T7842] loop3: detected capacity change from 0 to 128 [ 280.617570][ T7842] EXT4-fs (loop3): Test dummy encryption mode enabled [ 280.637520][ T7842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 280.642633][ T27] audit: type=1326 audit(1744378600.259:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.653570][ T7842] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.786839][ T27] audit: type=1326 audit(1744378600.259:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.865921][ T27] audit: type=1326 audit(1744378600.259:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.888957][ T27] audit: type=1326 audit(1744378600.259:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.911369][ T27] audit: type=1326 audit(1744378600.259:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.934588][ T27] audit: type=1326 audit(1744378600.259:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 280.956992][ T27] audit: type=1326 audit(1744378600.259:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 281.031305][ T4304] infiniband syz1: set down [ 281.181558][ T4304] bond1 (unregistering): Released all slaves [ 281.540383][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 281.717809][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 281.780317][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 281.789466][ T6538] smc: removing ib device syz! [ 281.851349][ T4300] hid-generic 0705:0000:0000.000E: unknown main item tag 0x0 [ 281.881298][ T4300] hid-generic 0705:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.902600][ T7854] loop3: detected capacity change from 0 to 1024 [ 281.912989][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.921676][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.952481][ T7854] EXT4-fs: Mount option(s) incompatible with ext2 [ 282.013955][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.829034][ T4304] bond0 (unregistering): Released all slaves [ 283.100818][ T4304] team0 (unregistering): Port device geneve0 removed [ 283.621858][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 283.667077][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 283.709990][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.763918][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.210516][ T4304] bond0 (unregistering): Released all slaves [ 284.227883][ T6513] smc: removing ib device syz1 [ 284.362379][ T7816] IPVS: Error joining to the multicast group [ 284.401431][ T4972] vcan0 speed is unknown, defaulting to 1000 [ 284.569883][ T7581] EXT4-fs (loop8): unmounting filesystem. [ 284.700631][ T7858] netlink: 'syz.5.1212': attribute type 13 has an invalid length. [ 285.102821][ T7864] loop8: detected capacity change from 0 to 1024 [ 285.144366][ T7864] EXT4-fs: Ignoring removed bh option [ 285.356641][ T7864] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 285.392516][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.402560][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.415245][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.424019][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.431689][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.440492][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.525573][ T7581] EXT4-fs (loop8): unmounting filesystem. [ 285.644803][ T7877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1218'. [ 285.780881][ T7879] loop7: detected capacity change from 0 to 128 [ 285.805404][ T7879] EXT4-fs (loop7): Test dummy encryption mode enabled [ 285.904374][ T7879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 285.961379][ T7879] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.173234][ T7888] loop3: detected capacity change from 0 to 512 [ 286.216659][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 286.281054][ T7890] IPVS: Error joining to the multicast group [ 286.287426][ T7888] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1214: casefold flag without casefold feature [ 286.342940][ T7888] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1214: couldn't read orphan inode 15 (err -117) [ 286.399139][ T7888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.457418][ T125] hid-generic 0705:0000:0000.000F: unknown main item tag 0x0 [ 286.518014][ T125] hid-generic 0705:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.653652][ T7894] loop8: detected capacity change from 0 to 1024 [ 286.705851][ T7894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.746575][ T7894] EXT4-fs: Mount option(s) incompatible with ext2 [ 286.934761][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 287.034548][ T7873] chnl_net:caif_netlink_parms(): no params data found [ 287.133384][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 287.256685][ T7910] loop5: detected capacity change from 0 to 128 [ 287.266074][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.273195][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.281796][ T7873] device bridge_slave_0 entered promiscuous mode [ 287.292888][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.300125][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.308567][ T7873] device bridge_slave_1 entered promiscuous mode [ 287.367396][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.403442][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1230'. [ 287.414908][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.476236][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 287.563782][ T7873] team0: Port device team_slave_0 added [ 287.572464][ T7873] team0: Port device team_slave_1 added [ 287.617792][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.641901][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.693167][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.704909][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1234'. [ 287.743744][ T7924] IPVS: Error joining to the multicast group [ 287.786064][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.830506][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.871949][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.028802][ T7930] loop5: detected capacity change from 0 to 8192 [ 288.072570][ T125] hid-generic 0705:0000:0000.0010: unknown main item tag 0x0 [ 288.096970][ T7873] device hsr_slave_0 entered promiscuous mode [ 288.104646][ T125] hid-generic 0705:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.149416][ T7873] device hsr_slave_1 entered promiscuous mode [ 288.155715][ T7932] loop7: detected capacity change from 0 to 1024 [ 288.156364][ T7932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.181373][ T7873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.201672][ T7873] Cannot create hsr debugfs directory [ 288.263445][ T7932] EXT4-fs: Mount option(s) incompatible with ext2 [ 288.387312][ T7941] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1243'. [ 288.816579][ T7951] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1244'. [ 289.527581][ T7873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 289.553453][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 289.620588][ T7873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 289.651858][ T7873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 289.680767][ T7873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 289.791517][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 289.834240][ T7961] IPVS: Unknown mcast interface: vcan0 [ 289.887438][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1250'. [ 289.994413][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.022007][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1251'. [ 290.140367][ T7969] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1254'. [ 291.155701][ T4972] hid-generic 0705:0000:0000.0011: unknown main item tag 0x0 [ 291.170034][ T7982] loop5: detected capacity change from 0 to 1024 [ 291.193713][ T4972] hid-generic 0705:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.195702][ T7982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.235889][ T7982] EXT4-fs: Mount option(s) incompatible with ext2 [ 291.319664][ T7873] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.346947][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.358055][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.467106][ T4304] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.505440][ T7974] netlink: 'syz.8.1253': attribute type 4 has an invalid length. [ 291.570249][ T7983] tipc: Started in network mode [ 291.584158][ T7983] tipc: Node identity 2, cluster identity 4711 [ 291.590357][ T7983] tipc: Node number set to 2 [ 291.621975][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.648805][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 291.683735][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.751657][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.758845][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.805958][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.841102][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.882709][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.889892][ T6513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.934766][ T7993] loop7: detected capacity change from 0 to 512 [ 291.959331][ T4304] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.971941][ T7993] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1260: casefold flag without casefold feature [ 291.994789][ T7993] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1260: couldn't read orphan inode 15 (err -117) [ 292.011303][ T7993] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 292.021932][ T7989] netlink: 'syz.8.1261': attribute type 4 has an invalid length. [ 292.061549][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.082927][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.139979][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.162838][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.176170][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.259657][ T4304] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.302160][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 292.302300][ T8000] loop5: detected capacity change from 0 to 1024 [ 292.328350][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.336892][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.360164][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.381395][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.400092][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.412531][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 292.437246][ T8003] loop8: detected capacity change from 0 to 2048 [ 292.464341][ T8001] IPVS: Unknown mcast interface: vcan0 [ 292.505679][ T8003] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 292.534326][ T4304] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.579466][ T7873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.643392][ T8006] netlink: 'syz.5.1263': attribute type 4 has an invalid length. [ 292.653126][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.679455][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.700959][ T8011] random: crng reseeded on system resumption [ 292.743685][ T8007] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 292.793939][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 292.793957][ T27] audit: type=1326 audit(1744378612.509:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x0 [ 292.979854][ T27] audit: type=1326 audit(1744378612.689:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 293.027925][ T4304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.048354][ T27] audit: type=1326 audit(1744378612.719:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 293.077995][ T27] audit: type=1326 audit(1744378612.729:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 293.190110][ T4304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.244613][ T27] audit: type=1326 audit(1744378612.729:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 293.420152][ T8028] hub 2-0:1.0: USB hub found [ 293.427216][ T8028] hub 2-0:1.0: 1 port detected [ 293.668575][ T27] audit: type=1326 audit(1744378612.729:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 293.714119][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 294.038978][ T8029] loop5: detected capacity change from 0 to 1024 [ 294.056311][ T27] audit: type=1326 audit(1744378612.749:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 294.117872][ T8021] device vlan2 entered promiscuous mode [ 294.124426][ T8029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.146612][ T8003] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1644 with error 28 [ 294.188547][ T8029] EXT4-fs: Mount option(s) incompatible with ext2 [ 294.191302][ T27] audit: type=1326 audit(1744378612.749:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 294.229117][ T4304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.239124][ T8003] EXT4-fs (loop8): This should not happen!! Data will be lost [ 294.239124][ T8003] [ 294.280141][ T27] audit: type=1326 audit(1744378612.749:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf4f8d169 code=0x7ffc0000 [ 294.329658][ T8003] EXT4-fs (loop8): Total free blocks count 0 [ 294.380289][ T4304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.391215][ T8003] EXT4-fs (loop8): Free/Dirty block details [ 294.436585][ T8003] EXT4-fs (loop8): free_blocks=2415919104 [ 294.468920][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.488695][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.502652][ T8003] EXT4-fs (loop8): dirty_blocks=1648 [ 294.508824][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.525303][ T8003] EXT4-fs (loop8): Block reservation details [ 294.592686][ T8003] EXT4-fs (loop8): i_reserved_data_blocks=103 [ 294.826095][ T8043] device bond_slave_1 entered promiscuous mode [ 294.894075][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 294.922757][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 295.026414][ T8043] bond0: (slave bond_slave_1): Releasing backup interface [ 295.053740][ T8043] device bond_slave_1 left promiscuous mode [ 295.062065][ T7581] EXT4-fs (loop8): unmounting filesystem. [ 295.295818][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'. [ 296.371509][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1285'. [ 296.404779][ T8057] IPVS: Error joining to the multicast group [ 296.477073][ T8075] loop8: detected capacity change from 0 to 512 [ 296.500338][ T8075] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 296.545069][ T8075] EXT4-fs (loop8): 1 truncate cleaned up [ 296.550872][ T8075] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 296.559452][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.578906][ T8075] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 296.591688][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.620173][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 296.682760][ T7581] EXT4-fs (loop8): unmounting filesystem. [ 296.760380][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.782391][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.979486][ T8091] loop5: detected capacity change from 0 to 512 [ 296.988205][ T8091] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 297.017636][ T7873] device veth0_vlan entered promiscuous mode [ 297.026890][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.035993][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.066003][ T7873] device veth1_vlan entered promiscuous mode [ 297.088055][ T8091] EXT4-fs (loop5): 1 truncate cleaned up [ 297.153452][ T8091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.282849][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.302800][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.345335][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.384232][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.527621][ T7873] device veth0_macvtap entered promiscuous mode [ 297.737584][ T7873] device veth1_macvtap entered promiscuous mode [ 297.908646][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.973351][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.024040][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.079578][ T8099] loop3: detected capacity change from 0 to 512 [ 298.087832][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.117216][ T8099] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 298.118987][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.135613][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.146347][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.156894][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.168769][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.201647][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 298.210013][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 298.287962][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1297'. [ 298.313751][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.331979][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.357955][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.375090][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.392682][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.410994][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.433873][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.464710][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.481061][ T8108] loop5: detected capacity change from 0 to 512 [ 298.495019][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.517029][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.532188][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.547818][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.565967][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.566734][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.581454][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.587554][ T8108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 298.592695][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.601557][ T8101] IPVS: Error joining to the multicast group [ 298.606206][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.622259][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.629681][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.641526][ T8108] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.723972][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.736436][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1299'. [ 298.745906][ T6449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.816946][ T7873] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.838938][ T7873] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.847815][ T7873] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.857985][ T7873] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.869800][ T8108] rdma_op ffff88807c5821f0 conn xmit_rdma 0000000000000000 [ 299.045326][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 299.065478][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1301'. [ 299.336871][ T8128] loop3: detected capacity change from 0 to 512 [ 299.402218][ T8133] loop7: detected capacity change from 0 to 512 [ 299.405428][ T8128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.470028][ T8133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 299.475596][ T8128] EXT4-fs (loop3): 1 truncate cleaned up [ 299.490018][ T8133] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.512414][ T8128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.537785][ T6538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.571007][ T6538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.613553][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.656873][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.756494][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 299.831820][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.028299][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.282971][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 300.494796][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 300.644241][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1311'. [ 300.683622][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 300.694688][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 300.704846][ T4304] device hsr_slave_0 left promiscuous mode [ 300.733698][ T4304] device hsr_slave_1 left promiscuous mode [ 300.753802][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.761397][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.817124][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.859544][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.890602][ T4304] device bridge_slave_1 left promiscuous mode [ 300.923904][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.934527][ T4304] device bridge_slave_0 left promiscuous mode [ 300.940803][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.981817][ T4304] device hsr_slave_0 left promiscuous mode [ 300.998840][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 301.023811][ T4304] device hsr_slave_1 left promiscuous mode [ 301.092028][ T8171] loop9: detected capacity change from 0 to 512 [ 301.104439][ T8173] program syz.7.1319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.118343][ T8171] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 301.150974][ T4304] device veth1_macvtap left promiscuous mode [ 301.160285][ T8171] EXT4-fs (loop9): 1 truncate cleaned up [ 301.166163][ T8171] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 301.175333][ T4304] device veth0_macvtap left promiscuous mode [ 301.191219][ T4304] device veth1_vlan left promiscuous mode [ 301.364354][ T4304] device veth0_vlan left promiscuous mode [ 301.374245][ T8177] loop7: detected capacity change from 0 to 512 [ 301.392070][ T4304] device veth1_macvtap left promiscuous mode [ 301.398909][ T4304] device veth0_macvtap left promiscuous mode [ 301.406698][ T8177] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 301.441078][ T8177] EXT4-fs (loop7): 1 truncate cleaned up [ 301.565218][ T8177] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 302.143793][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 302.209389][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 302.755831][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 303.036934][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 303.091839][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 303.153846][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.200437][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.701383][ T4304] bond0 (unregistering): Released all slaves [ 304.681627][ T4304] bond0 (unregistering): Released all slaves [ 304.794709][ T8169] IPVS: Error joining to the multicast group [ 304.833819][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 304.872823][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'. [ 304.968707][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.981994][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.991941][ T8111] device bridge_slave_0 entered promiscuous mode [ 305.024948][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.032188][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.063595][ T8111] device bridge_slave_1 entered promiscuous mode [ 305.102976][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1327'. [ 305.139352][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.181976][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.279479][ T8111] team0: Port device team_slave_0 added [ 305.315460][ T8111] team0: Port device team_slave_1 added [ 305.350129][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.367148][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.372572][ T8205] loop7: detected capacity change from 0 to 512 [ 305.393450][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.431697][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.450537][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.525565][ T8205] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 305.561036][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.575739][ T8209] loop3: detected capacity change from 0 to 2048 [ 305.618108][ T8205] EXT4-fs (loop7): 1 truncate cleaned up [ 305.628330][ T8205] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 305.772786][ T8209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 305.878174][ T8111] device hsr_slave_0 entered promiscuous mode [ 305.885788][ T8111] device hsr_slave_1 entered promiscuous mode [ 305.892869][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.901649][ T8111] Cannot create hsr debugfs directory [ 306.531996][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 306.573917][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1335'. [ 306.617719][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 306.725690][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1339'. [ 306.913952][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 307.007720][ T8240] loop7: detected capacity change from 0 to 1024 [ 307.035804][ T8240] EXT4-fs: Ignoring removed nobh option [ 307.041432][ T8240] EXT4-fs: Ignoring removed bh option [ 307.049106][ T8243] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1341'. [ 307.075411][ T8240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.146170][ T8240] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 307.172134][ T8240] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm +}[@: Allocating blocks 385-513 which overlap fs metadata [ 307.212622][ T8240] EXT4-fs (loop7): pa ffff8880752ee0e0: logic 16, phys. 129, len 24 [ 307.221360][ T8240] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 307.348467][ T27] audit: type=1800 audit(1744378627.059:950): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 307.349027][ T22] hid-generic 0705:0000:0000.0012: unknown main item tag 0x0 [ 307.378746][ T8240] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 307.397763][ T4304] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.402139][ T8250] loop3: detected capacity change from 0 to 1024 [ 307.431386][ T22] hid-generic 0705:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.441930][ T8250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.446438][ T8240] netlink: '+}[@': attribute type 13 has an invalid length. [ 307.470193][ T8250] EXT4-fs: Mount option(s) incompatible with ext2 [ 307.552636][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.577518][ T8240] net_ratelimit: 2732 callbacks suppressed [ 307.577529][ T8240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.687407][ T4304] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.775164][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 307.862379][ T8261] loop7: detected capacity change from 0 to 512 [ 307.918986][ T4304] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.987803][ T8266] dccp_close: ABORT with 36 bytes unread [ 308.063670][ T8261] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 308.088685][ T8261] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.128738][ T27] audit: type=1800 audit(1744378627.839:951): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1348" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 308.132716][ T4304] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.199224][ T27] audit: type=1800 audit(1744378627.879:952): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1348" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 308.266133][ T8275] loop5: detected capacity change from 0 to 1024 [ 308.280499][ T8111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.280961][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 308.295606][ T8275] EXT4-fs: Ignoring removed bh option [ 308.314892][ T8111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.346982][ T8111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.372530][ T8275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 308.394195][ T8111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.575292][ T8290] loop9: detected capacity change from 0 to 256 [ 309.589147][ T27] audit: type=1800 audit(1744378629.299:953): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1354" name="file1" dev="loop9" ino=1048618 res=0 errno=0 [ 309.613698][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.620646][ T8290] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 309.648384][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 309.665064][ T8290] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 309.691730][ T8290] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 309.741243][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.748671][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1357'. [ 309.766726][ T27] audit: type=1326 audit(1744378629.479:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 309.807558][ T27] audit: type=1326 audit(1744378629.479:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 309.842763][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.854223][ T8298] blktrace: Concurrent blktraces are not allowed on loop11 [ 309.866160][ T27] audit: type=1326 audit(1744378629.479:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 309.872411][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.902862][ T27] audit: type=1326 audit(1744378629.479:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 309.934101][ T27] audit: type=1326 audit(1744378629.479:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 309.961698][ T27] audit: type=1326 audit(1744378629.479:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 310.020855][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.055321][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.075711][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.082859][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.103939][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.119124][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.128960][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.136128][ T6513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.147361][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.161450][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.229560][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.241252][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.277016][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.307380][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.326795][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.335894][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.346842][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'. [ 310.478913][ T8309] bond0: (slave bond_slave_1): Releasing backup interface [ 310.648908][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.659009][ T8321] dccp_close: ABORT with 36 bytes unread [ 310.676051][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.690751][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.730519][ T8111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.792641][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.805020][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.871076][ T8321] loop9: detected capacity change from 0 to 1024 [ 310.901191][ T8321] EXT4-fs: Ignoring removed bh option [ 310.970789][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1369'. [ 310.993064][ T8321] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 311.038280][ T8331] blktrace: Concurrent blktraces are not allowed on loop11 [ 311.130193][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 311.148350][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.166021][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.380077][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.458558][ T8345] loop9: detected capacity change from 0 to 512 [ 311.542248][ T8345] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1373: casefold flag without casefold feature [ 311.565282][ T8345] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1373: couldn't read orphan inode 15 (err -117) [ 311.581926][ T8345] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 311.642510][ T8350] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1375'. [ 311.786882][ T4304] device hsr_slave_0 left promiscuous mode [ 311.809980][ T4304] device hsr_slave_1 left promiscuous mode [ 311.819396][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.838775][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.871929][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.893474][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.903975][ T4304] device bridge_slave_1 left promiscuous mode [ 311.910320][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.931798][ T4304] device bridge_slave_0 left promiscuous mode [ 311.938311][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.949438][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 312.012440][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1379'. [ 312.044121][ T4304] device veth1_macvtap left promiscuous mode [ 312.050236][ T4304] device veth0_macvtap left promiscuous mode [ 312.062301][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1381'. [ 312.072412][ T4304] device veth1_vlan left promiscuous mode [ 312.078499][ T4304] device veth0_vlan left promiscuous mode [ 312.120056][ T8370] blktrace: Concurrent blktraces are not allowed on loop19 [ 312.302001][ T8374] loop3: detected capacity change from 0 to 512 [ 312.322951][ T8374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.345826][ T8374] EXT4-fs (loop3): orphan cleanup on readonly fs [ 312.375147][ T8374] __quota_error: 84 callbacks suppressed [ 312.375168][ T8374] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 312.391674][ T8374] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 312.401275][ T8374] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1382: Failed to acquire dquot type 1 [ 312.420436][ T8374] EXT4-fs (loop3): 1 truncate cleaned up [ 312.447297][ T8374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.780565][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 312.827008][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 312.871292][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.919799][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.106710][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 313.534810][ T4304] bond0 (unregistering): Released all slaves [ 314.082295][ T8389] loop9: detected capacity change from 0 to 512 [ 314.109765][ T8389] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 314.140137][ T8389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 314.178344][ T8395] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1388'. [ 314.232087][ T27] audit: type=1326 audit(1744378633.939:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.241583][ T8389] System zones: [ 314.308831][ T27] audit: type=1326 audit(1744378633.939:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.318591][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.357153][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.366251][ T8389] 1-12 [ 314.382005][ T8389] EXT4-fs (loop9): 1 truncate cleaned up [ 314.397576][ T8389] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 314.451235][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.453706][ T27] audit: type=1326 audit(1744378633.969:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.474496][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.543066][ T8111] device veth0_vlan entered promiscuous mode [ 314.561130][ T27] audit: type=1326 audit(1744378633.969:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.581344][ T8111] device veth1_vlan entered promiscuous mode [ 314.614295][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.633699][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.656891][ T27] audit: type=1326 audit(1744378633.969:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.658915][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 314.696700][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.760138][ T4352] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 314.773524][ T27] audit: type=1326 audit(1744378633.969:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.787639][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.797568][ T4352] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.809305][ T8404] loop7: detected capacity change from 0 to 1024 [ 314.865024][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.870395][ T8408] loop5: detected capacity change from 0 to 512 [ 314.874967][ T8404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.879476][ T27] audit: type=1326 audit(1744378633.969:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.891898][ T8407] loop9: detected capacity change from 0 to 1024 [ 314.917820][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.931954][ T8111] device veth0_macvtap entered promiscuous mode [ 314.943776][ T8111] device veth1_macvtap entered promiscuous mode [ 314.952707][ T8404] EXT4-fs: Mount option(s) incompatible with ext2 [ 314.962064][ T27] audit: type=1326 audit(1744378633.969:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.5.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 314.987678][ T8408] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1393: Failed to acquire dquot type 0 [ 314.998215][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.013516][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.014140][ T8407] EXT4-fs: Ignoring removed orlov option [ 315.023958][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.036685][ T8408] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1393: Failed to acquire dquot type 0 [ 315.050942][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.050964][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.071883][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.084026][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.091691][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.107733][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.113806][ T8407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.123080][ T8408] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1393: Failed to acquire dquot type 0 [ 315.156350][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.158183][ T8408] EXT4-fs (loop5): 1 orphan inode deleted [ 315.183729][ T8408] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 315.186321][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.199763][ T8408] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.224395][ T8407] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 315.232924][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.245201][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.255580][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.266258][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.276208][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.286997][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.298595][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.306760][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.318729][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.331882][ T8111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.362926][ T8111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.371882][ T8111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.380823][ T8111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.581108][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.599918][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.636957][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.681356][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 315.726761][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.744275][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.756417][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 315.784394][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.977964][ T8428] netlink: 'syz.4.1294': attribute type 10 has an invalid length. [ 316.031022][ T8428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.136326][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.188906][ T8428] bond0: (slave dummy0): Releasing backup interface [ 316.231220][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.245343][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.265219][ T8428] device bridge_slave_0 left promiscuous mode [ 316.280206][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.299991][ T8428] device bridge_slave_1 left promiscuous mode [ 316.312875][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.333802][ T8428] bond0: (slave bond_slave_0): Releasing backup interface [ 316.362248][ T8428] bond0: (slave bond_slave_1): Releasing backup interface [ 316.465212][ T8428] team0: Port device team_slave_0 removed [ 316.524523][ T8428] team0: Port device team_slave_1 removed [ 316.546837][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.590338][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.624851][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.638039][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.677033][ T8437] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1400'. [ 316.995195][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177178][ T8453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.262165][ T8458] tipc: Started in network mode [ 317.268907][ T8458] tipc: Node identity 2, cluster identity 4711 [ 317.285404][ T8458] tipc: Node number set to 2 [ 317.412521][ T8461] device wg2 entered promiscuous mode [ 317.620106][ T8453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.647674][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 317.676848][ T8467] IPVS: Unknown mcast interface: vcan0 [ 317.778963][ T8453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.787762][ T8471] loop5: detected capacity change from 0 to 128 [ 317.830866][ T8471] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.854070][ T8471] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.872779][ T8477] loop3: detected capacity change from 0 to 512 [ 317.902456][ T8471] 9pnet_fd: Insufficient options for proto=fd [ 317.956851][ T8453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.012798][ T8477] __quota_error: 48 callbacks suppressed [ 318.012819][ T8477] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.056558][ T8484] loop7: detected capacity change from 0 to 512 [ 318.064974][ T8477] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 318.074761][ T8477] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1417: Failed to acquire dquot type 0 [ 318.091968][ T8477] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.138802][ T8477] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 318.166072][ T8490] loop5: detected capacity change from 0 to 512 [ 318.170809][ T8477] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1417: Failed to acquire dquot type 0 [ 318.181930][ T8453] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.191290][ T8477] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.192471][ T8490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.202900][ T8477] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 318.222041][ T8453] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.231985][ T8477] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1417: Failed to acquire dquot type 0 [ 318.242403][ T8490] EXT4-fs (loop5): 1 truncate cleaned up [ 318.253881][ T8490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 318.256728][ T8453] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.264295][ T8484] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.280871][ T8453] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.300267][ T8477] EXT4-fs (loop3): 1 orphan inode deleted [ 318.317207][ T8484] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 318.326981][ T8484] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1421: Failed to acquire dquot type 0 [ 318.338716][ T8477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.347804][ T8477] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.396835][ T8484] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 318.506492][ T8484] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 318.516756][ T8484] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1421: Failed to acquire dquot type 0 [ 318.546326][ T8484] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1421: Failed to acquire dquot type 0 [ 318.618349][ T4331] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 318.795957][ T8484] EXT4-fs (loop7): 1 orphan inode deleted [ 318.869050][ T8484] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 318.940991][ T4331] usb 10-1: New USB device found, idVendor=07c9, idProduct=8e12, bcdDevice=c2.05 [ 319.083573][ T4331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 319.092044][ T8484] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.125576][ T4331] usb 10-1: Product: syz [ 319.142666][ T8501] loop4: detected capacity change from 0 to 1024 [ 319.163493][ T4331] usb 10-1: Manufacturer: syz [ 319.182040][ T4331] usb 10-1: config 0 descriptor?? [ 319.290203][ T8501] EXT4-fs: Ignoring removed bh option [ 319.329332][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 319.349191][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 319.430881][ T8501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 319.534481][ T8507] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1424'. [ 319.553121][ T14] usb 10-1: USB disconnect, device number 2 [ 319.620171][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 319.681006][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 320.049161][ T8530] loop3: detected capacity change from 0 to 512 [ 320.066871][ T8525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.089936][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 320.101600][ T8530] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1435: Failed to acquire dquot type 0 [ 320.121482][ T8534] loop7: detected capacity change from 0 to 512 [ 320.168786][ T8530] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1435: Failed to acquire dquot type 0 [ 320.184890][ T8525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.217987][ T8538] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1437'. [ 320.218222][ T8530] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1435: Failed to acquire dquot type 0 [ 320.243563][ T8534] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1436: Failed to acquire dquot type 0 [ 320.255345][ T8530] EXT4-fs (loop3): 1 orphan inode deleted [ 320.261131][ T8530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 320.287026][ T8534] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1436: Failed to acquire dquot type 0 [ 320.304839][ T8530] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.308447][ T8534] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1436: Failed to acquire dquot type 0 [ 320.332785][ T8525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.548884][ T8534] EXT4-fs (loop7): 1 orphan inode deleted [ 320.555678][ T8534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 320.565407][ T8534] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.694879][ T8543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.739984][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 321.615084][ T8525] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.720915][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 321.746963][ T8551] loop9: detected capacity change from 0 to 2048 [ 321.811771][ T8551] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 321.925847][ T8525] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.948146][ T8525] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.995728][ T8525] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.013927][ T8563] random: crng reseeded on system resumption [ 322.044313][ T8525] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.281277][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1446'. [ 322.307577][ T8569] device macvtap0 entered promiscuous mode [ 322.315162][ T8569] device macvtap0 left promiscuous mode [ 322.430254][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1447'. [ 322.446310][ T8572] IPVS: Unknown mcast interface: vcan0 [ 322.628914][ T8576] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1449'. [ 322.666643][ T8579] loop5: detected capacity change from 0 to 512 [ 322.687208][ T8551] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 322.719635][ T8579] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1450: Failed to acquire dquot type 0 [ 322.740705][ T8584] loop3: detected capacity change from 0 to 512 [ 322.773147][ T8551] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1874 with error 28 [ 322.786445][ T8579] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1450: Failed to acquire dquot type 0 [ 322.821748][ T8584] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1452: Failed to acquire dquot type 0 [ 322.843643][ T8551] EXT4-fs (loop9): This should not happen!! Data will be lost [ 322.843643][ T8551] [ 322.850052][ T8584] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1452: Failed to acquire dquot type 0 [ 322.878834][ T8579] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1450: Failed to acquire dquot type 0 [ 322.891063][ T8584] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1452: Failed to acquire dquot type 0 [ 322.904446][ T8551] EXT4-fs (loop9): Total free blocks count 0 [ 322.910480][ T8551] EXT4-fs (loop9): Free/Dirty block details [ 322.916657][ T8551] EXT4-fs (loop9): free_blocks=2415919104 [ 322.922897][ T8551] EXT4-fs (loop9): dirty_blocks=1888 [ 322.926609][ T8588] loop7: detected capacity change from 0 to 256 [ 322.928520][ T8551] EXT4-fs (loop9): Block reservation details [ 322.940711][ T8551] EXT4-fs (loop9): i_reserved_data_blocks=118 [ 322.948211][ T8584] EXT4-fs (loop3): 1 orphan inode deleted [ 322.960754][ T8579] EXT4-fs (loop5): 1 orphan inode deleted [ 322.982694][ T8584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 322.992250][ T8579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 322.992713][ T8584] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.016387][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 323.016401][ T27] audit: type=1800 audit(1744378642.729:1101): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1453" name="file1" dev="loop7" ino=1048623 res=0 errno=0 [ 323.028358][ T8579] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.237624][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 323.296240][ T8596] loop7: detected capacity change from 0 to 512 [ 323.432581][ T8596] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1456: casefold flag without casefold feature [ 323.480820][ T8596] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1456: couldn't read orphan inode 15 (err -117) [ 323.522957][ T8596] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 323.689934][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 323.825794][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 323.910905][ T8604] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.504706][ T8623] netlink: 1036 bytes leftover after parsing attributes in process `syz.9.1466'. [ 324.540791][ T8623] trusted_key: encrypted_key: insufficient parameters specified [ 324.592162][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 325.069738][ T8644] netlink: 'syz.4.1476': attribute type 21 has an invalid length. [ 325.163475][ T3638] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 325.260702][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 325.404610][ T3638] usb 10-1: New USB device found, idVendor=07c9, idProduct=8e12, bcdDevice=c2.05 [ 325.425827][ T3638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 325.450634][ T3638] usb 10-1: Product: syz [ 325.464398][ T3638] usb 10-1: Manufacturer: syz [ 325.479943][ T3638] usb 10-1: config 0 descriptor?? [ 325.702293][ T3638] usb 10-1: USB disconnect, device number 3 [ 326.633633][ T27] audit: type=1326 audit(1744378646.209:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 326.656067][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.173281][ T27] audit: type=1326 audit(1744378646.219:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.270095][ T27] audit: type=1326 audit(1744378646.219:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.397682][ T27] audit: type=1326 audit(1744378646.219:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.408163][ T8678] loop9: detected capacity change from 0 to 1024 [ 327.437967][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 327.440228][ T8682] loop3: detected capacity change from 0 to 512 [ 327.493933][ T27] audit: type=1326 audit(1744378646.219:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.509820][ T8678] EXT4-fs: Ignoring removed bh option [ 327.544628][ T8682] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 327.567595][ T27] audit: type=1326 audit(1744378646.229:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.577552][ T8682] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 327.614011][ T8678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.643436][ T27] audit: type=1326 audit(1744378646.229:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 327.653559][ T8682] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1490: Failed to acquire dquot type 0 [ 327.710047][ T8678] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 327.784930][ T8682] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1490: Failed to acquire dquot type 0 [ 327.856919][ T8682] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1490: Failed to acquire dquot type 0 [ 327.916948][ T8682] EXT4-fs (loop3): 1 orphan inode deleted [ 327.933120][ T8682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 327.960483][ T8682] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.981890][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 328.411599][ T8704] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1497'. [ 328.983793][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 329.534244][ T8708] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 330.386124][ T8736] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1510'. [ 330.722099][ T8744] loop9: detected capacity change from 0 to 1024 [ 330.736718][ T8744] EXT4-fs: Ignoring removed bh option [ 330.741251][ T8752] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1514'. [ 330.814607][ T8744] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 331.017195][ T8767] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1520'. [ 331.112350][ T8771] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1522'. [ 331.271984][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 331.405168][ T8781] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.1527'. [ 331.441669][ T8783] loop7: detected capacity change from 0 to 256 [ 331.460209][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 331.460225][ T27] audit: type=1800 audit(1744378651.169:1131): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1528" name="file1" dev="loop7" ino=1048624 res=0 errno=0 [ 331.472192][ T8785] rdma_op ffff888063a0a9f0 conn xmit_rdma 0000000000000000 [ 331.614024][ T8792] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1532'. [ 331.634063][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1531'. [ 331.737712][ T8797] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1534'. [ 332.094724][ T8814] loop9: detected capacity change from 0 to 1024 [ 332.125465][ T8814] EXT4-fs: Ignoring removed bh option [ 332.182421][ T8823] loop4: detected capacity change from 0 to 256 [ 332.203109][ T8814] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 332.271777][ T27] audit: type=1800 audit(1744378651.979:1132): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1541" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 332.292789][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.307688][ T8829] loop7: detected capacity change from 0 to 512 [ 332.316311][ T8829] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.344550][ T8829] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 332.370599][ T8829] EXT4-fs (loop7): unmounting filesystem. [ 332.464704][ T8837] __nla_validate_parse: 2 callbacks suppressed [ 332.464720][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 332.609033][ T8844] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1548'. [ 332.685952][ T14] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 332.759182][ T27] audit: type=1326 audit(1744378652.469:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 332.802596][ T27] audit: type=1326 audit(1744378652.499:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 332.810230][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 332.863401][ T27] audit: type=1326 audit(1744378652.499:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 332.904617][ T14] usb 5-1: New USB device found, idVendor=07c9, idProduct=8e12, bcdDevice=c2.05 [ 332.928152][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 332.936806][ T27] audit: type=1326 audit(1744378652.499:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 332.961388][ T14] usb 5-1: Product: syz [ 332.980498][ T14] usb 5-1: Manufacturer: syz [ 333.010534][ T27] audit: type=1326 audit(1744378652.499:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 333.011172][ T14] usb 5-1: config 0 descriptor?? [ 333.111831][ T8861] device bond0 entered promiscuous mode [ 333.119577][ T8861] device bond_slave_0 entered promiscuous mode [ 333.132800][ T8861] device bond_slave_1 entered promiscuous mode [ 333.140779][ T8861] device batadv0 entered promiscuous mode [ 333.148632][ T8861] device bond0 left promiscuous mode [ 333.154478][ T8861] device bond_slave_0 left promiscuous mode [ 333.161526][ T8861] device bond_slave_1 left promiscuous mode [ 333.169861][ T8861] device batadv0 left promiscuous mode [ 333.200422][ T8863] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1557'. [ 333.210985][ T8860] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 333.296362][ T4331] usb 5-1: USB disconnect, device number 6 [ 333.342465][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 333.361673][ T3638] hid-generic 0705:0000:0000.0014: unknown main item tag 0x0 [ 333.385769][ T8869] IPVS: Unknown mcast interface: vcan0 [ 333.397366][ T3638] hid-generic 0705:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.413958][ T8865] loop3: detected capacity change from 0 to 1024 [ 333.420857][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1560'. [ 333.430759][ T8865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.444492][ T8865] EXT4-fs: Mount option(s) incompatible with ext2 [ 333.573211][ T8881] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1563'. [ 333.662384][ T8886] loop5: detected capacity change from 0 to 512 [ 333.672941][ T8886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 333.706664][ T8886] EXT4-fs (loop5): 1 truncate cleaned up [ 333.712555][ T8886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 333.756877][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 333.811516][ T8890] loop7: detected capacity change from 0 to 512 [ 333.819683][ T8890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 333.857926][ T8890] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 333.906357][ T8890] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.055616][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 334.147216][ T8903] netlink: 'syz.3.1565': attribute type 4 has an invalid length. [ 334.192959][ T8902] loop4: detected capacity change from 0 to 2048 [ 334.222874][ T8905] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1570'. [ 334.254987][ T8902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 334.294136][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'. [ 334.303072][ T8909] IPVS: Unknown mcast interface: vcan0 [ 334.325115][ T8911] loop9: detected capacity change from 0 to 512 [ 334.395153][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1574'. [ 334.423573][ T8911] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 334.432679][ T8911] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.443525][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 334.468819][ T8917] random: crng reseeded on system resumption [ 334.547402][ T27] audit: type=1326 audit(1744378654.259:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x0 [ 334.651722][ T7873] EXT4-fs (loop9): unmounting filesystem. [ 334.714355][ T27] audit: type=1326 audit(1744378654.429:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 334.764923][ T8926] loop7: detected capacity change from 0 to 1024 [ 334.779206][ T27] audit: type=1326 audit(1744378654.449:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 334.804462][ T8927] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1576'. [ 334.814427][ T8926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.830420][ T8926] EXT4-fs: Mount option(s) incompatible with ext2 [ 335.041440][ T8902] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 335.082588][ T8902] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 335.111250][ T8902] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.111250][ T8902] [ 335.114600][ T8932] device bond_slave_1 entered promiscuous mode [ 335.149786][ T8902] EXT4-fs (loop4): Total free blocks count 0 [ 335.157771][ T8931] device bond_slave_1 left promiscuous mode [ 335.172581][ T8902] EXT4-fs (loop4): Free/Dirty block details [ 335.200141][ T8902] EXT4-fs (loop4): free_blocks=2415919104 [ 335.226985][ T8902] EXT4-fs (loop4): dirty_blocks=2208 [ 335.245691][ T8902] EXT4-fs (loop4): Block reservation details [ 335.266184][ T8902] EXT4-fs (loop4): i_reserved_data_blocks=138 [ 335.467790][ T6515] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 152 with error 28 [ 335.553630][ T125] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 335.746714][ T125] usb 6-1: New USB device found, idVendor=07c9, idProduct=8e12, bcdDevice=c2.05 [ 335.766487][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 335.797072][ T125] usb 6-1: Product: syz [ 335.801406][ T125] usb 6-1: Manufacturer: syz [ 335.818092][ T125] usb 6-1: config 0 descriptor?? [ 336.040851][ T128] usb 6-1: USB disconnect, device number 2 [ 336.067443][ T8288] hid-generic 0705:0000:0000.0015: unknown main item tag 0x0 [ 336.090171][ T8288] hid-generic 0705:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.169455][ T8961] loop4: detected capacity change from 0 to 1024 [ 336.204056][ T8961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.231653][ T8961] EXT4-fs: Mount option(s) incompatible with ext2 [ 336.740701][ T8982] loop5: detected capacity change from 0 to 512 [ 336.774275][ T8982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 336.779399][ T8982] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1599: bg 0: block 248: padding at end of block bitmap is not set [ 336.788695][ T8982] __quota_error: 5 callbacks suppressed [ 336.788712][ T8982] Quota error (device loop5): write_blk: dquota write failed [ 336.788775][ T8982] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 336.788807][ T8982] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1599: Failed to acquire dquot type 1 [ 336.792230][ T8982] EXT4-fs (loop5): 1 truncate cleaned up [ 336.799083][ T8982] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 336.948764][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 337.098486][ T8989] loop5: detected capacity change from 0 to 1024 [ 337.164645][ T8989] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 337.414160][ T128] hid-generic 0705:0000:0000.0016: unknown main item tag 0x0 [ 337.443955][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 337.456325][ T128] hid-generic 0705:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.485264][ T9004] loop3: detected capacity change from 0 to 1024 [ 337.500708][ T9007] __nla_validate_parse: 6 callbacks suppressed [ 337.500727][ T9007] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1608'. [ 337.526812][ T9004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.550109][ T9004] EXT4-fs: Mount option(s) incompatible with ext2 [ 338.647821][ T9022] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.776249][ T9029] loop7: detected capacity change from 0 to 256 [ 338.831473][ T9033] loop5: detected capacity change from 0 to 512 [ 338.843150][ T9027] loop3: detected capacity change from 0 to 512 [ 338.891089][ T9033] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1616: inode #1: comm syz.5.1616: iget: illegal inode # [ 338.913568][ T9027] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 338.922620][ T9027] System zones: 0-2, 18-18, 34-35 [ 338.940667][ T9027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 338.943774][ T9033] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1616: error while reading EA inode 1 err=-117 [ 338.953653][ T9027] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.982095][ T9033] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1616: inode #1: comm syz.5.1616: iget: illegal inode # [ 338.997542][ T9033] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1616: error while reading EA inode 1 err=-117 [ 339.010609][ T9033] EXT4-fs (loop5): 1 orphan inode deleted [ 339.016527][ T9033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 339.129007][ T9022] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.154124][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 339.264837][ T9022] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.398272][ T9022] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.444019][ T128] hid-generic 0705:0000:0000.0017: unknown main item tag 0x0 [ 339.458543][ T128] hid-generic 0705:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.488932][ T9051] loop5: detected capacity change from 0 to 1024 [ 339.535679][ T9051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.547866][ T9022] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.592922][ T9022] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.601518][ T9051] EXT4-fs: Mount option(s) incompatible with ext2 [ 339.627694][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 339.643157][ T9022] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.676015][ T9022] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.073622][ T9070] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1628'. [ 340.958728][ T27] audit: type=1326 audit(1744378660.669:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 340.981101][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.063768][ T27] audit: type=1326 audit(1744378660.699:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.115579][ T9075] blktrace: Concurrent blktraces are not allowed on loop19 [ 341.122956][ T27] audit: type=1326 audit(1744378660.699:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.193423][ T27] audit: type=1326 audit(1744378660.729:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.254026][ T27] audit: type=1326 audit(1744378660.759:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.334797][ T27] audit: type=1326 audit(1744378660.769:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.382926][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1630'. [ 341.403378][ T27] audit: type=1326 audit(1744378660.769:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.447804][ T27] audit: type=1326 audit(1744378660.769:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.5.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5af8d169 code=0x7ffc0000 [ 341.580525][ T9073] infiniband syz0: set active [ 341.586661][ T9073] infiniband syz0: added bond0 [ 341.603990][ T9094] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.644508][ T9073] RDS/IB: syz0: added [ 341.650163][ T9073] smc: adding ib device syz0 with port count 1 [ 341.661205][ T9073] smc: ib device syz0 port 1 has pnetid [ 341.683601][ T9094] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.752771][ T125] hid-generic 0705:0000:0000.0018: unknown main item tag 0x0 [ 341.765242][ T3638] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 341.773068][ T125] hid-generic 0705:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.803457][ T9101] loop4: detected capacity change from 0 to 1024 [ 341.818587][ T9094] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.833546][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 341.833561][ T27] audit: type=1326 audit(1744378661.549:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.7.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f20ddb29359 code=0x7ffc0000 [ 341.863744][ T9101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.884046][ T9101] EXT4-fs: Mount option(s) incompatible with ext2 [ 341.895784][ T27] audit: type=1326 audit(1744378661.579:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.7.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddb8d169 code=0x7ffc0000 [ 341.922452][ T9094] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.943346][ T27] audit: type=1326 audit(1744378661.579:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.7.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddb8d169 code=0x7ffc0000 [ 341.943544][ T3638] usb 4-1: device descriptor read/64, error -71 [ 342.372732][ T3638] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.511920][ T9114] hub 2-0:1.0: USB hub found [ 342.517947][ T9114] hub 2-0:1.0: 1 port detected [ 342.536035][ T3638] usb 4-1: device descriptor read/64, error -71 [ 342.666033][ T3638] usb usb4-port1: attempt power cycle [ 343.167674][ T3638] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 343.217915][ T3638] usb 4-1: device descriptor read/8, error -71 [ 343.315779][ T9119] blktrace: Concurrent blktraces are not allowed on loop9 [ 343.523625][ T3638] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 343.552902][ T9130] loop5: detected capacity change from 0 to 512 [ 343.572677][ T3638] usb 4-1: device descriptor read/8, error -71 [ 343.589300][ T9130] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 343.599991][ T9130] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 343.610900][ T9130] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1650: Failed to acquire dquot type 0 [ 343.622976][ T9130] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 343.634324][ T9130] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 343.643972][ T9130] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1650: Failed to acquire dquot type 0 [ 343.659433][ T9130] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 343.670362][ T9130] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 343.693371][ T9130] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1650: Failed to acquire dquot type 0 [ 343.695802][ T3638] usb usb4-port1: unable to enumerate USB device [ 343.728011][ T9130] EXT4-fs (loop5): 1 orphan inode deleted [ 343.736385][ T9130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 343.767088][ T9130] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.788259][ T125] hid-generic 0705:0000:0000.0019: unknown main item tag 0x0 [ 343.816656][ T9141] loop7: detected capacity change from 0 to 1024 [ 343.833863][ T9141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.855244][ T125] hid-generic 0705:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.866369][ T9141] EXT4-fs: Mount option(s) incompatible with ext2 [ 344.720720][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 344.748873][ T9156] blktrace: Concurrent blktraces are not allowed on loop9 [ 344.959113][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1661'. [ 345.211140][ T9183] loop5: detected capacity change from 0 to 512 [ 345.232712][ T9183] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 345.251614][ T9183] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1669: Failed to acquire dquot type 0 [ 345.268765][ T9183] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1669: Failed to acquire dquot type 0 [ 345.281608][ T9183] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1669: Failed to acquire dquot type 0 [ 345.303831][ T9183] EXT4-fs (loop5): 1 orphan inode deleted [ 345.309939][ T9183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 345.319303][ T9183] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.482206][ T4352] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 345.643867][ T4352] usb 8-1: device descriptor read/64, error -71 [ 345.943847][ T4352] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 346.203468][ T4352] usb 8-1: device descriptor read/64, error -71 [ 346.331249][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 346.337773][ T4352] usb usb8-port1: attempt power cycle [ 346.345298][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 346.359639][ T9197] bridge0: port 1(batadv1) entered blocking state [ 346.366489][ T9197] bridge0: port 1(batadv1) entered disabled state [ 346.380831][ T9197] device batadv1 entered promiscuous mode [ 346.519082][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 346.651771][ T9210] loop4: detected capacity change from 0 to 512 [ 346.689789][ T9094] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.709278][ T9210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.714720][ T9094] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.718471][ T9210] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.753682][ T9094] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.762295][ T9216] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1681'. [ 346.773340][ T4352] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 346.786102][ T9216] 0ªX¹¦À: renamed from caif0 [ 346.805821][ T9216] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 346.824113][ T4352] usb 8-1: device descriptor read/8, error -71 [ 346.842298][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 346.855284][ T9094] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.863867][ T9218] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 346.867585][ T6532] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 346.881784][ T6532] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 347.024457][ T9222] xt_hashlimit: size too large, truncated to 1048576 [ 347.036541][ T9222] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 347.113817][ T4352] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 347.164437][ T4352] usb 8-1: device descriptor read/8, error -71 [ 347.361321][ T9238] loop3: detected capacity change from 0 to 2048 [ 347.423044][ T9238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.457708][ T4352] usb usb8-port1: unable to enumerate USB device [ 347.519125][ T9245] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.531174][ T9243] hub 2-0:1.0: USB hub found [ 347.540930][ T9243] hub 2-0:1.0: 1 port detected [ 347.591666][ T9250] random: crng reseeded on system resumption [ 347.611044][ T9245] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.671192][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 347.671207][ T27] audit: type=1326 audit(1744378667.379:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x0 [ 347.705458][ T9245] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.788984][ T9245] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.827005][ T27] audit: type=1326 audit(1744378667.539:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 347.867332][ T27] audit: type=1326 audit(1744378667.559:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 347.910443][ T27] audit: type=1326 audit(1744378667.559:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 347.964543][ T27] audit: type=1326 audit(1744378667.559:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 348.014458][ T27] audit: type=1326 audit(1744378667.559:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 348.064395][ T27] audit: type=1326 audit(1744378667.559:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7303b8d169 code=0x7ffc0000 [ 348.259013][ T9238] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 348.352165][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1700'. [ 348.352188][ T9238] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 348.390617][ T9238] EXT4-fs (loop3): This should not happen!! Data will be lost [ 348.390617][ T9238] [ 348.412883][ T9238] EXT4-fs (loop3): Total free blocks count 0 [ 348.429402][ T9238] EXT4-fs (loop3): Free/Dirty block details [ 348.443343][ T9238] EXT4-fs (loop3): free_blocks=2415919104 [ 348.449166][ T9238] EXT4-fs (loop3): dirty_blocks=3024 [ 348.463113][ T9238] EXT4-fs (loop3): Block reservation details [ 348.475173][ T9238] EXT4-fs (loop3): i_reserved_data_blocks=189 [ 348.500359][ T27] audit: type=1326 audit(1744378668.209:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 348.566182][ T27] audit: type=1326 audit(1744378668.209:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 348.591799][ T9267] loop4: detected capacity change from 0 to 1024 [ 348.615618][ T27] audit: type=1326 audit(1744378668.249:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.4.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 348.690872][ T9267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 348.727043][ T4365] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 966 with error 28 [ 348.828772][ T9267] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.4.1702: corrupted in-inode xattr [ 348.974438][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 349.089615][ T9278] loop4: detected capacity change from 0 to 512 [ 349.158939][ T9278] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1706: Failed to acquire dquot type 0 [ 349.180709][ T9278] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1706: Failed to acquire dquot type 0 [ 349.204908][ T9278] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1706: Failed to acquire dquot type 0 [ 349.219340][ T9278] EXT4-fs (loop4): 1 orphan inode deleted [ 349.225239][ T9278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.243528][ T9278] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.342941][ T9288] loop5: detected capacity change from 0 to 1024 [ 349.431368][ T4331] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 349.462778][ T9288] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 349.491520][ T4331] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.515603][ T9290] loop7: detected capacity change from 0 to 1024 [ 349.522594][ T9290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.667318][ T9290] EXT4-fs: Mount option(s) incompatible with ext2 [ 349.988705][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 350.229638][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 350.238273][ T9304] loop5: detected capacity change from 0 to 512 [ 350.245193][ T9304] EXT4-fs: Ignoring removed oldalloc option [ 350.286268][ T9304] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.1714: Parent and EA inode have the same ino 15 [ 350.329852][ T9311] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1716'. [ 350.354056][ T9304] EXT4-fs (loop5): Remounting filesystem read-only [ 350.363620][ T9304] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.1714: Parent and EA inode have the same ino 15 [ 350.443304][ T9304] EXT4-fs (loop5): Remounting filesystem read-only [ 350.484707][ T9304] EXT4-fs (loop5): 1 orphan inode deleted [ 350.508856][ T9304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 350.538785][ T9304] EXT4-fs (loop5): unmounting filesystem. [ 350.555464][ T9320] device wg2 entered promiscuous mode [ 350.708626][ T9326] loop7: detected capacity change from 0 to 512 [ 350.762993][ T9326] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 350.773690][ T9326] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.845704][ T9333] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1725'. [ 350.858820][ T4259] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 350.867575][ T4259] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.902784][ T9335] loop3: detected capacity change from 0 to 1024 [ 350.940851][ T9335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.964283][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 350.976572][ T9335] EXT4-fs: Mount option(s) incompatible with ext2 [ 351.064323][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1730'. [ 351.195358][ T9352] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1733'. [ 351.287222][ T9358] loop3: detected capacity change from 0 to 128 [ 351.305722][ T9357] loop7: detected capacity change from 0 to 512 [ 351.373386][ T9357] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1736: Failed to acquire dquot type 0 [ 351.386790][ T9357] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1736: Failed to acquire dquot type 0 [ 351.415800][ T9357] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1736: Failed to acquire dquot type 0 [ 351.444690][ T9357] EXT4-fs (loop7): 1 orphan inode deleted [ 351.451316][ T9357] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 351.481048][ T9357] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.598512][ T9366] loop5: detected capacity change from 0 to 1024 [ 351.633630][ T9366] EXT4-fs: Ignoring removed bh option [ 351.721772][ T9366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.234951][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 352.311074][ T9379] loop4: detected capacity change from 0 to 512 [ 352.467895][ T9379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.490702][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 352.530559][ T9379] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.669977][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 352.678569][ T4352] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 352.695740][ T4352] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.725589][ T9390] loop5: detected capacity change from 0 to 1024 [ 352.748110][ T9390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.807046][ T9390] EXT4-fs: Mount option(s) incompatible with ext2 [ 352.841249][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 352.841267][ T27] audit: type=1326 audit(1744378672.549:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 352.910793][ T27] audit: type=1326 audit(1744378672.549:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 353.021101][ T27] audit: type=1326 audit(1744378672.589:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 353.093335][ T27] audit: type=1326 audit(1744378672.589:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 353.127419][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1748'. [ 353.139852][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 353.152876][ T9401] blktrace: Concurrent blktraces are not allowed on loop9 [ 353.162846][ T27] audit: type=1326 audit(1744378672.589:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 353.164839][ T9402] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.198549][ T9402] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 353.434255][ T9412] loop4: detected capacity change from 0 to 512 [ 353.458980][ T9412] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 353.469908][ T9412] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 353.479649][ T9412] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1753: Failed to acquire dquot type 0 [ 353.491801][ T9412] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 353.502488][ T9412] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 353.512164][ T9412] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1753: Failed to acquire dquot type 0 [ 353.526031][ T9412] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 353.537440][ T9412] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1753: Failed to acquire dquot type 0 [ 353.549594][ T9412] EXT4-fs (loop4): 1 orphan inode deleted [ 353.555861][ T9412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 353.565221][ T9412] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.404808][ T9245] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.484653][ T9245] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.545231][ T9245] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.579506][ T9245] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.625693][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 354.731956][ T9423] loop3: detected capacity change from 0 to 512 [ 354.754377][ T9419] hub 2-0:1.0: USB hub found [ 354.769441][ T9419] hub 2-0:1.0: 1 port detected [ 354.806773][ T9423] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.814210][ T9423] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1758: bad orphan inode 13 [ 354.829420][ T9423] ext4_test_bit(bit=12, block=18) = 1 [ 354.843544][ T9423] is_bad_inode(inode)=0 [ 354.847767][ T9423] NEXT_ORPHAN(inode)=2130706432 [ 354.852617][ T9423] max_ino=32 [ 354.914456][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 354.920697][ T9423] i_nlink=1 [ 354.929400][ T9423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 354.994192][ T9423] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 355.137444][ T9423] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1758: bg 0: block 248: padding at end of block bitmap is not set [ 355.178965][ T4352] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 355.196556][ T9423] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1758: Failed to acquire dquot type 1 [ 355.204801][ T4352] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.239325][ T9423] EXT4-fs warning (device loop3): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 355.269997][ T9439] loop7: detected capacity change from 0 to 1024 [ 355.297593][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.333043][ T9439] EXT4-fs: Mount option(s) incompatible with ext2 [ 355.468932][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 355.648708][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1767'. [ 355.662753][ T9459] loop4: detected capacity change from 0 to 512 [ 355.694873][ T9459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 355.841071][ T9459] EXT4-fs (loop4): 1 truncate cleaned up [ 355.853781][ T9459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 355.968171][ T9459] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 355.981285][ T9465] loop5: detected capacity change from 0 to 512 [ 356.036478][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 356.064202][ T9465] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1769: Failed to acquire dquot type 0 [ 356.099913][ T9465] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1769: Failed to acquire dquot type 0 [ 356.141451][ T9465] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.1769: Failed to acquire dquot type 0 [ 356.188680][ T9465] EXT4-fs (loop5): 1 orphan inode deleted [ 356.204848][ T9465] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 356.226299][ T9465] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.233084][ T9473] loop3: detected capacity change from 0 to 1024 [ 356.354173][ T9473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 356.601060][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 357.199445][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 357.298925][ T9491] loop3: detected capacity change from 0 to 1024 [ 357.334349][ T9491] EXT4-fs: Ignoring removed bh option [ 357.399962][ T9491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 357.404527][ T4259] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 357.442046][ T4259] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.485996][ T9494] loop5: detected capacity change from 0 to 1024 [ 357.493017][ T9494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.550681][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 357.585527][ T9505] loop4: detected capacity change from 0 to 1024 [ 357.602083][ T9494] EXT4-fs: Mount option(s) incompatible with ext2 [ 357.608930][ T9505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.634814][ T9505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce028, mo2=0000] [ 357.674479][ T9505] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 2: comm syz.4.1779: lblock 2 mapped to illegal pblock 2 (length 1) [ 357.703464][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 357.714280][ T9505] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.1779: lblock 0 mapped to illegal pblock 48 (length 1) [ 357.753527][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 357.760127][ T9505] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1779: Failed to acquire dquot type 0 [ 357.827283][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 357.863594][ T9505] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 357.902768][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 357.924223][ T9505] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.1779: mark_inode_dirty error [ 357.926911][ T9516] loop5: detected capacity change from 0 to 1024 [ 357.946298][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 357.952865][ T9505] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 357.973125][ T9520] loop3: detected capacity change from 0 to 512 [ 357.973812][ T9505] EXT4-fs (loop4): 1 orphan inode deleted [ 357.986293][ T9505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 357.996458][ T6497] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 358.023051][ T9516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 358.023610][ T6497] EXT4-fs (loop4): Remounting filesystem read-only [ 358.038923][ T6497] __quota_error: 14 callbacks suppressed [ 358.038939][ T6497] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 358.069531][ T9520] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 358.087649][ T6497] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:55: Failed to release dquot type 0 [ 358.101689][ T6497] EXT4-fs (loop4): Remounting filesystem read-only [ 358.108484][ T9520] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 358.114534][ T9505] EXT4-fs (loop4): unmounting filesystem. [ 358.125024][ T9520] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1787: Failed to acquire dquot type 0 [ 358.125908][ T7130] EXT4-fs (loop5): unmounting filesystem. [ 358.142250][ T9520] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 358.154155][ T9520] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 358.158338][ T9525] loop7: detected capacity change from 0 to 512 [ 358.164242][ T9520] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1787: Failed to acquire dquot type 0 [ 358.182085][ T9505] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.1779: Invalid inode table block 1 in block_group 0 [ 358.182965][ T9520] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 358.206114][ T9520] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 358.214788][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 358.215963][ T9520] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1787: Failed to acquire dquot type 0 [ 358.236471][ T9520] EXT4-fs (loop3): 1 orphan inode deleted [ 358.242267][ T9520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 358.254378][ T9525] EXT4-fs (loop7): orphan cleanup on readonly fs [ 358.261774][ T9525] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.1788: bad orphan inode 13 [ 358.266916][ T9505] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 358.272648][ T9525] ext4_test_bit(bit=12, block=18) = 1 [ 358.293718][ T9525] is_bad_inode(inode)=0 [ 358.297923][ T9525] NEXT_ORPHAN(inode)=2130706432 [ 358.302991][ T9520] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.313879][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 358.317887][ T9525] max_ino=32 [ 358.320416][ T9505] EXT4-fs error (device loop4): ext4_quota_off:7091: inode #3: comm syz.4.1779: mark_inode_dirty error [ 358.335145][ T9525] i_nlink=1 [ 358.338474][ T9525] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 358.353438][ T9505] EXT4-fs (loop4): Remounting filesystem read-only [ 358.379876][ T9525] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 358.542410][ T9525] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1788: bg 0: block 248: padding at end of block bitmap is not set [ 358.571759][ T9525] Quota error (device loop7): write_blk: dquota write failed [ 358.599196][ T9525] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 358.609846][ T9525] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1788: Failed to acquire dquot type 1 [ 359.241923][ T9525] EXT4-fs warning (device loop7): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.266895][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 359.380838][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 359.502833][ T9556] loop3: detected capacity change from 0 to 1024 [ 359.541099][ T4352] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 359.569674][ T9556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 359.597951][ T9550] loop5: detected capacity change from 0 to 1024 [ 359.605415][ T9550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.610118][ T4352] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.626905][ T27] audit: type=1326 audit(1744378679.339:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b998d169 code=0x7ffc0000 [ 359.627701][ T9550] EXT4-fs: Mount option(s) incompatible with ext2 [ 359.698010][ T9566] loop7: detected capacity change from 0 to 512 [ 359.752729][ T9566] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1801: Failed to acquire dquot type 0 [ 359.771466][ T9566] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1801: Failed to acquire dquot type 0 [ 359.792340][ T9566] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1801: Failed to acquire dquot type 0 [ 359.804838][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 359.823832][ T9566] EXT4-fs (loop7): 1 orphan inode deleted [ 359.830433][ T9566] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 359.839791][ T9566] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.997346][ T9572] loop4: detected capacity change from 0 to 512 [ 360.053178][ T9574] blktrace: Concurrent blktraces are not allowed on loop7 [ 360.078701][ T9572] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1804: Failed to acquire dquot type 0 [ 360.293971][ T9572] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1804: Failed to acquire dquot type 0 [ 360.602583][ T9572] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.1804: Failed to acquire dquot type 0 [ 360.639628][ T9572] EXT4-fs (loop4): 1 orphan inode deleted [ 360.661175][ T9572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 360.670382][ T9572] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.915041][ T7497] EXT4-fs (loop7): unmounting filesystem. [ 361.581130][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 361.913605][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1820'. [ 362.168172][ T9621] loop9: detected capacity change from 0 to 2048 [ 362.194798][ T9628] loop7: detected capacity change from 0 to 512 [ 362.251047][ T9621] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 362.262119][ T9628] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1826: Failed to acquire dquot type 0 [ 362.279748][ T9637] ------------[ cut here ]------------ [ 362.286015][ T9637] WARNING: CPU: 0 PID: 9637 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190 [ 362.296339][ T9637] Modules linked in: [ 362.300282][ T9637] CPU: 0 PID: 9637 Comm: syz.4.1827 Not tainted 6.1.134-syzkaller #0 [ 362.308430][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.318558][ T9637] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 362.324702][ T9637] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 b8 8c 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 2a b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 362.344404][ T9637] RSP: 0018:ffffc90012786dc0 EFLAGS: 00010283 [ 362.347657][ T9628] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1826: Failed to acquire dquot type 0 [ 362.350494][ T9637] RAX: ffffffff88da8012 RBX: 0000000000000002 RCX: 0000000000080000 [ 362.369812][ T9637] RDX: ffffc9000deb9000 RSI: 00000000000020ee RDI: 00000000000020ef [ 362.377906][ T9637] RBP: ffff888057f2d2d4 R08: ffffffff88da7fbf R09: fffffbfff225787f [ 362.385956][ T9637] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 362.394001][ T9637] R13: 1835472b4e5251ec R14: dffffc0000000000 R15: 0000000000000000 [ 362.402014][ T9637] FS: 00007f15ba7986c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 362.405332][ T9628] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.1826: Failed to acquire dquot type 0 [ 362.411002][ T9637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.428908][ T9637] CR2: 000000110c2873e6 CR3: 000000003f8c1000 CR4: 00000000003506f0 [ 362.436959][ T9637] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.444889][ T9641] random: crng reseeded on system resumption [ 362.444983][ T9637] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.458981][ T9637] Call Trace: [ 362.462287][ T9637] [ 362.465282][ T9637] taprio_change+0x4319/0x5600 [ 362.469883][ T9628] EXT4-fs (loop7): 1 orphan inode deleted [ 362.470156][ T9637] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 362.481867][ T9637] ? taprio_destroy+0x4a0/0x4a0 [ 362.486800][ T9637] ? lockdep_init_map_type+0x9d/0x900 [ 362.492225][ T9637] ? rtnetlink_rcv_msg+0x822/0x1000 [ 362.497490][ T9637] ? netlink_rcv_skb+0x1cd/0x410 [ 362.502462][ T9637] ? netlink_unicast+0x7e2/0x970 [ 362.507461][ T9637] ? netlink_sendmsg+0xa26/0xd60 [ 362.507849][ T9628] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 362.512411][ T9637] ? ____sys_sendmsg+0x5d3/0x9a0 [ 362.512451][ T9637] ? __sys_sendmsg+0x2a9/0x390 [ 362.531110][ T9637] ? memset+0x1f/0x40 [ 362.535170][ T9637] ? fifo_init+0x41e/0x760 [ 362.539639][ T9637] ? qdisc_peek_head+0x40/0x40 [ 362.544568][ T9637] ? taprio_peek+0x590/0x590 [ 362.549225][ T9637] qdisc_create+0x8a1/0x1220 [ 362.553070][ T9628] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.553917][ T9637] ? qdisc_notify+0x390/0x390 [ 362.553960][ T9637] tc_modify_qdisc+0xb6d/0x1e60 [ 362.554003][ T9637] ? qdisc_offload_query_caps+0x170/0x170 [ 362.554054][ T9637] ? qdisc_offload_query_caps+0x170/0x170 [ 362.579788][ T9637] rtnetlink_rcv_msg+0x822/0x1000 [ 362.579835][ T9637] ? rtnetlink_bind+0x80/0x80 [ 362.595374][ T9637] ? __local_bh_enable_ip+0x164/0x1f0 [ 362.600893][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.606102][ T9637] ? _local_bh_enable+0xa0/0xa0 [ 362.606209][ T4259] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 362.610987][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.623661][ T9637] ? __dev_queue_xmit+0x173c/0x3d50 [ 362.628917][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.634112][ T9637] ? netdev_core_pick_tx+0x320/0x320 [ 362.639452][ T9637] ? ref_tracker_free+0x638/0x7d0 [ 362.644563][ T9637] ? memcpy+0x3c/0x60 [ 362.648586][ T9637] ? refcount_inc+0x80/0x80 [ 362.653135][ T9637] ? __copy_skb_header+0x47b/0x600 [ 362.658339][ T9637] netlink_rcv_skb+0x1cd/0x410 [ 362.663293][ T9637] ? rtnetlink_bind+0x80/0x80 [ 362.668008][ T9637] ? netlink_ack+0x12a0/0x12a0 [ 362.668040][ T9637] ? __netlink_deliver_tap+0x748/0x780 [ 362.678350][ T9637] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.683618][ T9637] netlink_unicast+0x7e2/0x970 [ 362.688420][ T9637] ? netlink_detachskb+0x90/0x90 [ 362.693424][ T9637] ? __virt_addr_valid+0x45b/0x530 [ 362.698593][ T9637] ? __phys_addr_symbol+0x2b/0x70 [ 362.703695][ T9637] ? __check_object_size+0x4dd/0xa30 [ 362.703732][ T9637] ? bpf_lsm_netlink_send+0x5/0x10 [ 362.703767][ T9637] netlink_sendmsg+0xa26/0xd60 [ 362.703807][ T9637] ? netlink_getsockopt+0x580/0x580 [ 362.703841][ T9637] ? aa_sock_msg_perm+0x91/0x150 [ 362.703869][ T9637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.703899][ T9637] ? security_socket_sendmsg+0x7d/0xa0 [ 362.703934][ T9637] ? netlink_getsockopt+0x580/0x580 [ 362.703961][ T9637] ____sys_sendmsg+0x5d3/0x9a0 [ 362.750173][ T9637] ? __sys_sendmsg_sock+0x30/0x30 [ 362.755294][ T9637] __sys_sendmsg+0x2a9/0x390 [ 362.759958][ T9637] ? ____sys_sendmsg+0x9a0/0x9a0 [ 362.764995][ T9637] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 362.771033][ T9637] ? syscall_enter_from_user_mode+0x2e/0x230 [ 362.777087][ T9637] ? lockdep_hardirqs_on+0x94/0x130 [ 362.782330][ T9637] ? syscall_enter_from_user_mode+0x2e/0x230 [ 362.788406][ T9637] do_syscall_64+0x3b/0xb0 [ 362.792860][ T9637] ? clear_bhb_loop+0x45/0xa0 [ 362.797628][ T9637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.803598][ T9637] RIP: 0033:0x7f15b998d169 [ 362.808053][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.827746][ T9637] RSP: 002b:00007f15ba798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.830706][ T4259] usb 6-1: New USB device found, idVendor=07c9, idProduct=8e12, bcdDevice=c2.05 [ 362.836221][ T9637] RAX: ffffffffffffffda RBX: 00007f15b9ba5fa0 RCX: 00007f15b998d169 [ 362.836244][ T9637] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 362.836259][ T9637] RBP: 00007f15b9a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 362.836272][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.836285][ T9637] R13: 0000000000000000 R14: 00007f15b9ba5fa0 R15: 00007fffde5f0058 [ 362.836317][ T9637] [ 362.836328][ T9637] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 362.836340][ T9637] CPU: 0 PID: 9637 Comm: syz.4.1827 Not tainted 6.1.134-syzkaller #0 [ 362.836359][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.836371][ T9637] Call Trace: [ 362.836377][ T9637] [ 362.836383][ T9637] dump_stack_lvl+0x1e3/0x2cb [ 362.836413][ T9637] ? nf_tcp_handle_invalid+0x647/0x647 [ 362.836440][ T9637] ? panic+0x764/0x764 [ 362.836477][ T9637] ? vscnprintf+0x59/0x80 [ 362.836509][ T9637] panic+0x318/0x764 [ 362.836538][ T9637] ? __warn+0x169/0x520 [ 362.836565][ T9637] ? memcpy_page_flushcache+0xfc/0xfc [ 362.836611][ T9637] __warn+0x348/0x520 [ 362.836635][ T9637] ? taprio_get_start_time+0x162/0x190 [ 362.836663][ T9637] report_bug+0x2af/0x500 [ 362.836686][ T9637] ? taprio_get_start_time+0x162/0x190 [ 362.836714][ T9637] handle_bug+0x3d/0x70 [ 362.836736][ T9637] exc_invalid_op+0x16/0x40 [ 362.836759][ T9637] asm_exc_invalid_op+0x16/0x20 [ 362.836787][ T9637] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 362.836810][ T9637] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 b8 8c 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 2a b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 362.836838][ T9637] RSP: 0018:ffffc90012786dc0 EFLAGS: 00010283 [ 362.836860][ T9637] RAX: ffffffff88da8012 RBX: 0000000000000002 RCX: 0000000000080000 [ 362.836876][ T9637] RDX: ffffc9000deb9000 RSI: 00000000000020ee RDI: 00000000000020ef [ 362.836891][ T9637] RBP: ffff888057f2d2d4 R08: ffffffff88da7fbf R09: fffffbfff225787f [ 362.836909][ T9637] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 362.836924][ T9637] R13: 1835472b4e5251ec R14: dffffc0000000000 R15: 0000000000000000 [ 362.836947][ T9637] ? taprio_get_start_time+0x10f/0x190 [ 362.836968][ T9637] ? taprio_get_start_time+0x162/0x190 [ 362.837002][ T9637] taprio_change+0x4319/0x5600 [ 362.837036][ T9637] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 362.837087][ T9637] ? taprio_destroy+0x4a0/0x4a0 [ 362.837119][ T9637] ? lockdep_init_map_type+0x9d/0x900 [ 362.837156][ T9637] ? rtnetlink_rcv_msg+0x822/0x1000 [ 362.837180][ T9637] ? netlink_rcv_skb+0x1cd/0x410 [ 362.837204][ T9637] ? netlink_unicast+0x7e2/0x970 [ 362.837226][ T9637] ? netlink_sendmsg+0xa26/0xd60 [ 362.837250][ T9637] ? ____sys_sendmsg+0x5d3/0x9a0 [ 362.837272][ T9637] ? __sys_sendmsg+0x2a9/0x390 [ 362.837298][ T9637] ? memset+0x1f/0x40 [ 362.837327][ T9637] ? fifo_init+0x41e/0x760 [ 362.837363][ T9637] ? qdisc_peek_head+0x40/0x40 [ 362.837429][ T9637] ? taprio_peek+0x590/0x590 [ 362.837463][ T9637] qdisc_create+0x8a1/0x1220 [ 362.837497][ T9637] ? qdisc_notify+0x390/0x390 [ 362.837532][ T9637] tc_modify_qdisc+0xb6d/0x1e60 [ 362.837573][ T9637] ? qdisc_offload_query_caps+0x170/0x170 [ 362.837628][ T9637] ? qdisc_offload_query_caps+0x170/0x170 [ 362.837653][ T9637] rtnetlink_rcv_msg+0x822/0x1000 [ 362.837688][ T9637] ? rtnetlink_bind+0x80/0x80 [ 362.837715][ T9637] ? __local_bh_enable_ip+0x164/0x1f0 [ 362.837751][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.837782][ T9637] ? _local_bh_enable+0xa0/0xa0 [ 362.837831][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.837865][ T9637] ? __dev_queue_xmit+0x173c/0x3d50 [ 362.837911][ T9637] ? __dev_queue_xmit+0x2d6/0x3d50 [ 362.837946][ T9637] ? netdev_core_pick_tx+0x320/0x320 [ 362.837981][ T9637] ? ref_tracker_free+0x638/0x7d0 [ 362.838016][ T9637] ? memcpy+0x3c/0x60 [ 362.838043][ T9637] ? refcount_inc+0x80/0x80 [ 362.838074][ T9637] ? __copy_skb_header+0x47b/0x600 [ 362.838112][ T9637] netlink_rcv_skb+0x1cd/0x410 [ 362.838139][ T9637] ? rtnetlink_bind+0x80/0x80 [ 362.838166][ T9637] ? netlink_ack+0x12a0/0x12a0 [ 362.838189][ T9637] ? __netlink_deliver_tap+0x748/0x780 [ 362.838226][ T9637] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.838255][ T9637] netlink_unicast+0x7e2/0x970 [ 362.838289][ T9637] ? netlink_detachskb+0x90/0x90 [ 362.838311][ T9637] ? __virt_addr_valid+0x45b/0x530 [ 362.838343][ T9637] ? __phys_addr_symbol+0x2b/0x70 [ 362.838374][ T9637] ? __check_object_size+0x4dd/0xa30 [ 362.838404][ T9637] ? bpf_lsm_netlink_send+0x5/0x10 [ 362.838440][ T9637] netlink_sendmsg+0xa26/0xd60 [ 362.838479][ T9637] ? netlink_getsockopt+0x580/0x580 [ 362.838508][ T9637] ? aa_sock_msg_perm+0x91/0x150 [ 362.838535][ T9637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.838566][ T9637] ? security_socket_sendmsg+0x7d/0xa0 [ 362.838614][ T9637] ? netlink_getsockopt+0x580/0x580 [ 362.838639][ T9637] ____sys_sendmsg+0x5d3/0x9a0 [ 362.838672][ T9637] ? __sys_sendmsg_sock+0x30/0x30 [ 362.838711][ T9637] __sys_sendmsg+0x2a9/0x390 [ 362.838736][ T9637] ? ____sys_sendmsg+0x9a0/0x9a0 [ 362.838790][ T9637] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 362.838840][ T9637] ? syscall_enter_from_user_mode+0x2e/0x230 [ 362.838868][ T9637] ? lockdep_hardirqs_on+0x94/0x130 [ 362.838897][ T9637] ? syscall_enter_from_user_mode+0x2e/0x230 [ 362.838927][ T9637] do_syscall_64+0x3b/0xb0 [ 362.838946][ T9637] ? clear_bhb_loop+0x45/0xa0 [ 362.838974][ T9637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.839000][ T9637] RIP: 0033:0x7f15b998d169 [ 362.839018][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.839036][ T9637] RSP: 002b:00007f15ba798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.839057][ T9637] RAX: ffffffffffffffda RBX: 00007f15b9ba5fa0 RCX: 00007f15b998d169 [ 362.839073][ T9637] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 362.839087][ T9637] RBP: 00007f15b9a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 362.839100][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.839113][ T9637] R13: 0000000000000000 R14: 00007f15b9ba5fa0 R15: 00007fffde5f0058 [ 362.839143][ T9637] [ 362.845695][ T9637] Kernel Offset: disabled [ 363.447120][ T9637] Rebooting in 86400 seconds..