last executing test programs: 2m37.942895454s ago: executing program 2 (id=319): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 2m36.202965859s ago: executing program 2 (id=330): socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m33.917210459s ago: executing program 2 (id=347): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRES16=0x0], 0x1, 0x1ec, &(0x7f0000000780)="$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") symlink(&(0x7f0000000140)='./file0/file1\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x5609, &(0x7f0000000000)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)=ANY=[]) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3}}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x45, {0x45, 0x22, "61639c545d2ce9daa7602630c686377369efa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7b274"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m32.040326278s ago: executing program 2 (id=359): socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m28.029777426s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 2m27.920177778s ago: executing program 2 (id=378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2m26.850051606s ago: executing program 4 (id=389): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) 2m26.602770099s ago: executing program 4 (id=390): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba200"/59], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m26.431601376s ago: executing program 4 (id=391): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m26.323881756s ago: executing program 4 (id=392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x0, 0x25dfdbff, {0x2, 0x1f}}, 0x18}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000040007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m26.293285621s ago: executing program 4 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 2m26.199397859s ago: executing program 4 (id=394): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25fdc5fe13ba1875, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 2m12.437181763s ago: executing program 32 (id=378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2m10.225573265s ago: executing program 33 (id=394): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25fdc5fe13ba1875, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 9.460185774s ago: executing program 3 (id=951): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc8443, 0x0) r0 = socket(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) listen(r0, 0x0) 6.157972587s ago: executing program 1 (id=973): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r4, 0x0) open_tree(r4, 0x0, 0x89981) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000100)={[{@bsdgroups}, {@noauto_da_alloc}, {@nolazytime}, {@orlov}, {@data_err_abort}, {@errors_remount}, {@nobarrier}, {@quota}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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") rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.038194235s ago: executing program 3 (id=974): socket(0x80000000000000a, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f000000010001304000000000000000864010100000000000000000000000000e0000001000000000000000000000000000000004e2308000000000073000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb0000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffffffffffff0700000000000000080000000000000000000000000000000000000000000000c800000000000000cc000000000000000000000000000000f600000000000001000011ff0000000000000000020000010c00"], 0xf0}}, 0x404c8e5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 3.765136832s ago: executing program 5 (id=981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x1, 0x931766f6119eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4) 3.700912986s ago: executing program 1 (id=983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) 3.609724169s ago: executing program 0 (id=984): openat$tun(0xffffffffffffff9c, 0x0, 0xc8443, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) listen(r0, 0x0) 3.584331534s ago: executing program 3 (id=985): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc8443, 0x0) r0 = socket(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) listen(r0, 0x0) 3.314967845s ago: executing program 5 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040), 0x0) syz_open_dev$MSR(0x0, 0x9, 0x0) mkdir(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdec, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 3.227683479s ago: executing program 6 (id=987): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.951114137s ago: executing program 1 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000133700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000003800000008000300", @ANYRES32=r3, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 2.950341031s ago: executing program 6 (id=989): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 2.559641285s ago: executing program 0 (id=990): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000009c40), 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_open_dev$MSR(0x0, 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.473833631s ago: executing program 1 (id=991): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) 2.414883881s ago: executing program 0 (id=992): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) 2.321199161s ago: executing program 6 (id=993): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r0, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) 2.185717725s ago: executing program 5 (id=994): socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xb00, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.986383175s ago: executing program 6 (id=995): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1.919538051s ago: executing program 5 (id=996): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r6, 0x0) open_tree(r6, 0x0, 0x89981) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x80, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x80}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x410, r9, 0x1, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x3f1, 0x33, @action={{{}, {}, @broadcast, @broadcast, @initial, {0x0, 0x400}}, @measure_req={0x0, 0x0, {0x9, [{0x26, 0xcb, {0xc, 0x0, 0x3b, "b10f765311c86967d5d615a375365301d12adf2ed396df6d2cf625b2f2685f6d4233966a294e796e3c94d00efd85637a6cb5d5da6f32fc5dcdbfb4939222f86bb34458042919281727a2ca01559fb30ce9e1f663fd370150557dbe7fc5b21a4bb43ef57986e85c99d27ad705301d0f84bb8d3f719f20e7d890abe2d7910908435621eb5bc1a30fbd6e9e338cdbe20a26ab7697d30c4898e665228a9c08afc988599098c39b95c21dbec645df520112091cde61168fb904754de23a5f00ddb9a4d6fcfb037bb9cc0b"}}, {0x26, 0x61, {0x2, 0x5, 0x1, "660f35283a041eb7ddf431e194560015571df4fc10da79b35a9361cbf9489e0ef9a5630c4a6fb4a3f88317194df9d47309ad280c047c7fa94f2ab57c1c78f733dc07c5977f837855c3c8f3e2507a251805296924f75ca7fe7fd4dc345c57"}}, {0x26, 0xd8, {0x9, 0x1, 0x72, "b0e159a58c20f76106dbdae9d55b27bfd5fff586c4ed9acf00bfdf92e7f4f995d08e24959979af5c3382a375bbdbb0b614f4d1f01f2b6664c18192fdc143b56977505600e0871db401da48744e179d5a31eefd38f65d8a02e46e6192d084cbb9c88f0e53d7883287d17ececcb6cd77b1378cf99ca18bffeb50fedbd1e6ae37929967197afea2d6a288a20dcde89799b6818f156b465f3b4abe0bba6ba5ff62b2e0a22b883368a0a81ed28574a0474bbd5628f6eca96b8e88a674cbbf8001473a0a81be89a4fea9201863956c5b33c3a9ed79058f24"}}, {0x26, 0x3f, {0xff, 0x6, 0x3, "64e85c82330e16c2abe312f441a63604a8165fac2fa8783c035e89e32b1565297a26d1ae1a9293b1a9e766e6794ac07b63369ad63c2fdbbbff3a5693"}}, {0x26, 0xc2, {0x7f, 0x8, 0x3, "1f0792d22d49bd5ab8e61ee171b18a2547f02fbddfe0f9f6e47afeb0069bba9391796e2782511e09a18e555e300d015869f04e8e741b09c79689ac470e7a4440b1eca726515f38b8ef8e5388430de9515873d22c4d6ed67d5a061e27089a92533d77d7e89cd5637d6aad33785f2e6cc2c927fbd069ead7536ed543c43698254d75644946faae80fb20e48e917fa9624d0f2d6b3a8ba6ee88842d70957dfd4bb5c44dc99eb5d1acaf3067b4f6d1e7aedd3ec3cd75a3944596ea850caf0c1b7e"}}, {0x26, 0x41, {0x93, 0x2, 0x9, "b6107d5c71f20efba2c0db11572f46375fd4dd1d1e55c533e08d851df1130e854f3dfb0c85c48bb94b54b233175d58035ee62a10d615b44c70c7fa32918d"}}, {0x26, 0x7e, {0x3, 0xbe, 0x10, "a3b4e3146fc3db4b9bec36068f1ee457fae48b63b086f0e3004defb43b28431cc8a62970a141a34ad264478521d5ad93bb5c65492f38f921de234893fe92b12f580f57c861dd7211e3aa3e585e0551d73ec6dffb4a16b9605bc0021e595b6bcf45b400a5c88fef61b55bc93cd2798180ffcaed9a5b0930e0ee47ac"}}]}}}}]}, 0x410}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x9c, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x6e, 0xc5, "268ff739b41b01b66ba9c70a40453d8abc846b89b27b3c05f86ccc0aa9f4f18cc571fac610004903d45bc666b40c53e4a8847e92c433231b309768c059a23dfbd3bf5a014e572bed9d4ff1ffde66f53c62bbc0d4014a748d8a29a7cea4c8c704f654c907ee58d04d1e28"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000100)={[{@bsdgroups}, {@noauto_da_alloc}, {@nolazytime}, {@orlov}, {@data_err_abort}, {@errors_remount}, {@nobarrier}, {@quota}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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") rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.60207771s ago: executing program 5 (id=997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x0) 1.597047631s ago: executing program 6 (id=998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) 1.107499871s ago: executing program 6 (id=999): socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.062637717s ago: executing program 1 (id=1000): openat$tun(0xffffffffffffff9c, 0x0, 0xc8443, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) listen(r0, 0x0) 991.918451ms ago: executing program 3 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000133700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000003800000008000300", @ANYRES32=r3, @ANYBLOB="0c00580001"], 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 989.831245ms ago: executing program 0 (id=1002): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 839.668231ms ago: executing program 0 (id=1003): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001640), 0x0, 0x4004000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21001088}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r4, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240000000002c0004800800074000000000080001400000000008035310d04460fa2b8c1d72000740000000000800024000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40c4}, 0x20000000) r7 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100), 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmmsg$unix(r8, &(0x7f0000001d00), 0x0, 0x4c055) r10 = socket$inet6(0xa, 0x803, 0x6) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x4084) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r10, r6}) sendmmsg$inet(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bind$bt_sco(r5, &(0x7f00000001c0), 0x37) 791.437218ms ago: executing program 3 (id=1004): socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xb00, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5], 0x90}}, 0x0) 713.011754ms ago: executing program 0 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040), 0x0) syz_open_dev$MSR(0x0, 0x9, 0x0) mkdir(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdec, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 470.337351ms ago: executing program 5 (id=1006): mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) r1 = epoll_create(0x6) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x2000000) close(r3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x1, 0x4000, 0x1000000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) keyctl$chown(0x4, 0x0, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0x0) read$FUSE(r4, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3a000c0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030372c747970653dc59f86bc2c756d61736b3d30303030303030303030303030303030303030303030312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c71756965742c636f6465706167653d6b6f69382d722c756d61736b3d30303030303030303030303030303030303030303230312c747970653d731472bb2c696f636861727365743d69736f383835392d31342c756d61736b3d30303030303030303030303030303030303030303030362c66696c655f756d61736b3d3030303030303030303030303030303030303030303037fb636f6465706167653d6d616363656e746575726f2c6469725f756d61736b3d3031373737283737373737373737d25af6be9a373737373737373732", @ANYRESHEX=0x0, @ANYRES64], 0x3, 0x331, &(0x7f0000000880)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000240)={0x523, 0x1, 'client0\x00', 0x6, "f4f54c84332ff069", "ddcb2494c68800217176451802e499fb9e96a722b555700b81af54324f79e77f", 0x8, 0x3f1b}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 459.817302ms ago: executing program 3 (id=1007): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x2040400) pipe(&(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 0s ago: executing program 1 (id=1008): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r6, 0x0) open_tree(r6, 0x0, 0x89981) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)={0x80, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x80}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x410, r9, 0x1, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x3f1, 0x33, @action={{{}, {}, @broadcast, @broadcast, @initial, {0x0, 0x400}}, @measure_req={0x0, 0x0, {0x9, [{0x26, 0xcb, {0xc, 0x0, 0x3b, "b10f765311c86967d5d615a375365301d12adf2ed396df6d2cf625b2f2685f6d4233966a294e796e3c94d00efd85637a6cb5d5da6f32fc5dcdbfb4939222f86bb34458042919281727a2ca01559fb30ce9e1f663fd370150557dbe7fc5b21a4bb43ef57986e85c99d27ad705301d0f84bb8d3f719f20e7d890abe2d7910908435621eb5bc1a30fbd6e9e338cdbe20a26ab7697d30c4898e665228a9c08afc988599098c39b95c21dbec645df520112091cde61168fb904754de23a5f00ddb9a4d6fcfb037bb9cc0b"}}, {0x26, 0x61, {0x2, 0x5, 0x1, "660f35283a041eb7ddf431e194560015571df4fc10da79b35a9361cbf9489e0ef9a5630c4a6fb4a3f88317194df9d47309ad280c047c7fa94f2ab57c1c78f733dc07c5977f837855c3c8f3e2507a251805296924f75ca7fe7fd4dc345c57"}}, {0x26, 0xd8, {0x9, 0x1, 0x72, "b0e159a58c20f76106dbdae9d55b27bfd5fff586c4ed9acf00bfdf92e7f4f995d08e24959979af5c3382a375bbdbb0b614f4d1f01f2b6664c18192fdc143b56977505600e0871db401da48744e179d5a31eefd38f65d8a02e46e6192d084cbb9c88f0e53d7883287d17ececcb6cd77b1378cf99ca18bffeb50fedbd1e6ae37929967197afea2d6a288a20dcde89799b6818f156b465f3b4abe0bba6ba5ff62b2e0a22b883368a0a81ed28574a0474bbd5628f6eca96b8e88a674cbbf8001473a0a81be89a4fea9201863956c5b33c3a9ed79058f24"}}, {0x26, 0x3f, {0xff, 0x6, 0x3, "64e85c82330e16c2abe312f441a63604a8165fac2fa8783c035e89e32b1565297a26d1ae1a9293b1a9e766e6794ac07b63369ad63c2fdbbbff3a5693"}}, {0x26, 0xc2, {0x7f, 0x8, 0x3, "1f0792d22d49bd5ab8e61ee171b18a2547f02fbddfe0f9f6e47afeb0069bba9391796e2782511e09a18e555e300d015869f04e8e741b09c79689ac470e7a4440b1eca726515f38b8ef8e5388430de9515873d22c4d6ed67d5a061e27089a92533d77d7e89cd5637d6aad33785f2e6cc2c927fbd069ead7536ed543c43698254d75644946faae80fb20e48e917fa9624d0f2d6b3a8ba6ee88842d70957dfd4bb5c44dc99eb5d1acaf3067b4f6d1e7aedd3ec3cd75a3944596ea850caf0c1b7e"}}, {0x26, 0x41, {0x93, 0x2, 0x9, "b6107d5c71f20efba2c0db11572f46375fd4dd1d1e55c533e08d851df1130e854f3dfb0c85c48bb94b54b233175d58035ee62a10d615b44c70c7fa32918d"}}, {0x26, 0x7e, {0x3, 0xbe, 0x10, "a3b4e3146fc3db4b9bec36068f1ee457fae48b63b086f0e3004defb43b28431cc8a62970a141a34ad264478521d5ad93bb5c65492f38f921de234893fe92b12f580f57c861dd7211e3aa3e585e0551d73ec6dffb4a16b9605bc0021e595b6bcf45b400a5c88fef61b55bc93cd2798180ffcaed9a5b0930e0ee47ac"}}]}}}}]}, 0x410}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x9c, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x6e, 0xc5, "268ff739b41b01b66ba9c70a40453d8abc846b89b27b3c05f86ccc0aa9f4f18cc571fac610004903d45bc666b40c53e4a8847e92c433231b309768c059a23dfbd3bf5a014e572bed9d4ff1ffde66f53c62bbc0d4014a748d8a29a7cea4c8c704f654c907ee58d04d1e28"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000100)={[{@bsdgroups}, {@noauto_da_alloc}, {@nolazytime}, {@orlov}, {@data_err_abort}, {@errors_remount}, {@nobarrier}, {@quota}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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") rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 73.604702][ T5821] cgroup: Unknown subsys name 'net' [ 73.770565][ T5821] cgroup: Unknown subsys name 'cpuset' [ 73.779614][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.401287][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.298651][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.316387][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.323742][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.331979][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.340409][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.350498][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.358129][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.365351][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.387125][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.388250][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.408062][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.417335][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.426468][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.427080][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.443042][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.457081][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.466723][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.480092][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.482380][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.498021][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.501273][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.517537][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.518827][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.532180][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.532670][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.550001][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.557947][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.577848][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.585720][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.596498][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.127332][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.354659][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.518797][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 79.535696][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.578038][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.586065][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.595140][ T5831] bridge_slave_0: entered allmulticast mode [ 79.602743][ T5831] bridge_slave_0: entered promiscuous mode [ 79.656746][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.663947][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.672094][ T5831] bridge_slave_1: entered allmulticast mode [ 79.679211][ T5831] bridge_slave_1: entered promiscuous mode [ 79.754699][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 79.835433][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.842733][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.850094][ T5843] bridge_slave_0: entered allmulticast mode [ 79.858463][ T5843] bridge_slave_0: entered promiscuous mode [ 79.869000][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.917001][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.924515][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.932127][ T5843] bridge_slave_1: entered allmulticast mode [ 79.940517][ T5843] bridge_slave_1: entered promiscuous mode [ 79.970450][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.064113][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.071382][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.079321][ T5846] bridge_slave_0: entered allmulticast mode [ 80.086553][ T5846] bridge_slave_0: entered promiscuous mode [ 80.099389][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.139569][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.146857][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.153996][ T5832] bridge_slave_0: entered allmulticast mode [ 80.162960][ T5832] bridge_slave_0: entered promiscuous mode [ 80.175606][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.182908][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.190190][ T5846] bridge_slave_1: entered allmulticast mode [ 80.198711][ T5846] bridge_slave_1: entered promiscuous mode [ 80.207947][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.221079][ T5831] team0: Port device team_slave_0 added [ 80.231299][ T5831] team0: Port device team_slave_1 added [ 80.238501][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.245665][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.253802][ T5832] bridge_slave_1: entered allmulticast mode [ 80.260951][ T5832] bridge_slave_1: entered promiscuous mode [ 80.367482][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.374681][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.382427][ T5839] bridge_slave_0: entered allmulticast mode [ 80.389546][ T5839] bridge_slave_0: entered promiscuous mode [ 80.399249][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.406460][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.413627][ T5839] bridge_slave_1: entered allmulticast mode [ 80.421358][ T5839] bridge_slave_1: entered promiscuous mode [ 80.465648][ T5843] team0: Port device team_slave_0 added [ 80.473282][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.481674][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.508081][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.519314][ T5837] Bluetooth: hci1: command tx timeout [ 80.558308][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.570269][ T5843] team0: Port device team_slave_1 added [ 80.577180][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.584258][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.613037][ T5837] Bluetooth: hci2: command tx timeout [ 80.616296][ T5844] Bluetooth: hci3: command tx timeout [ 80.619032][ T5837] Bluetooth: hci0: command tx timeout [ 80.625845][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.644471][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.674160][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.680817][ T5837] Bluetooth: hci4: command tx timeout [ 80.727966][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.756915][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.793287][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.800320][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.826866][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.859639][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.887743][ T5846] team0: Port device team_slave_0 added [ 80.908455][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.915421][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.942493][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.963559][ T5832] team0: Port device team_slave_0 added [ 81.005367][ T5846] team0: Port device team_slave_1 added [ 81.047658][ T5832] team0: Port device team_slave_1 added [ 81.073914][ T5843] hsr_slave_0: entered promiscuous mode [ 81.081151][ T5843] hsr_slave_1: entered promiscuous mode [ 81.092670][ T5839] team0: Port device team_slave_0 added [ 81.103360][ T5839] team0: Port device team_slave_1 added [ 81.133353][ T5831] hsr_slave_0: entered promiscuous mode [ 81.140617][ T5831] hsr_slave_1: entered promiscuous mode [ 81.147202][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.154926][ T5831] Cannot create hsr debugfs directory [ 81.208170][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.215158][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.241754][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.308790][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.315736][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.342269][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.354471][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.362342][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.388315][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.408445][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.415419][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.441638][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.478022][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.485001][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.510970][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.553523][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.561214][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.588197][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.765206][ T5839] hsr_slave_0: entered promiscuous mode [ 81.773347][ T5839] hsr_slave_1: entered promiscuous mode [ 81.779746][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.787406][ T5839] Cannot create hsr debugfs directory [ 81.806528][ T5846] hsr_slave_0: entered promiscuous mode [ 81.812884][ T5846] hsr_slave_1: entered promiscuous mode [ 81.819326][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.826968][ T5846] Cannot create hsr debugfs directory [ 82.101822][ T5832] hsr_slave_0: entered promiscuous mode [ 82.109982][ T5832] hsr_slave_1: entered promiscuous mode [ 82.123793][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.137148][ T5832] Cannot create hsr debugfs directory [ 82.501859][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.569923][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.596496][ T5837] Bluetooth: hci1: command tx timeout [ 82.642134][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.665162][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.676513][ T5837] Bluetooth: hci3: command tx timeout [ 82.677180][ T5844] Bluetooth: hci0: command tx timeout [ 82.681922][ T5837] Bluetooth: hci2: command tx timeout [ 82.756521][ T5837] Bluetooth: hci4: command tx timeout [ 82.825397][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.839063][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.862947][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.890831][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.967306][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.989286][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.009811][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.056952][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.155150][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.169563][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.181472][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.221501][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.309114][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.332719][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.344303][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.372819][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.383973][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.469744][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.523069][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.530454][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.595158][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.602370][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.700695][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.749803][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.775274][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.809112][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.849924][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.865945][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.873147][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.902396][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.909642][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.919977][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.927186][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.968696][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.975860][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.050496][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.075615][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.121555][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.128706][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.140682][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.147893][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.290564][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.344639][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.351874][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.431088][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.438333][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.481779][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.678210][ T5837] Bluetooth: hci1: command tx timeout [ 84.756850][ T5837] Bluetooth: hci2: command tx timeout [ 84.762314][ T5837] Bluetooth: hci0: command tx timeout [ 84.766376][ T5844] Bluetooth: hci3: command tx timeout [ 84.838295][ T5836] Bluetooth: hci4: command tx timeout [ 84.873431][ T5843] veth0_vlan: entered promiscuous mode [ 84.911964][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.961036][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.973282][ T5843] veth1_vlan: entered promiscuous mode [ 85.100422][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.180413][ T5843] veth0_macvtap: entered promiscuous mode [ 85.214948][ T5831] veth0_vlan: entered promiscuous mode [ 85.240845][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.253898][ T5843] veth1_macvtap: entered promiscuous mode [ 85.272739][ T5831] veth1_vlan: entered promiscuous mode [ 85.293746][ T5846] veth0_vlan: entered promiscuous mode [ 85.341203][ T5846] veth1_vlan: entered promiscuous mode [ 85.391663][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.442274][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.458525][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469260][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.486705][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.495431][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588810][ T5831] veth0_macvtap: entered promiscuous mode [ 85.595996][ T5839] veth0_vlan: entered promiscuous mode [ 85.619520][ T5846] veth0_macvtap: entered promiscuous mode [ 85.635557][ T5846] veth1_macvtap: entered promiscuous mode [ 85.665885][ T5831] veth1_macvtap: entered promiscuous mode [ 85.677452][ T5839] veth1_vlan: entered promiscuous mode [ 85.694485][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.705149][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.718008][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.759763][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.770441][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.782172][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.797152][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.809023][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.840065][ T5832] veth0_vlan: entered promiscuous mode [ 85.855103][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.868762][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.882134][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.897412][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.906117][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.915103][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924122][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949260][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.962628][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.973449][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.985771][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.998080][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.035977][ T5832] veth1_vlan: entered promiscuous mode [ 86.058938][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.068267][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.078887][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.088192][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.134160][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.145279][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.238314][ T5839] veth0_macvtap: entered promiscuous mode [ 86.339046][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.347135][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.353283][ T5839] veth1_macvtap: entered promiscuous mode [ 86.375147][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.401026][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.409052][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.410362][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448080][ T5832] veth0_macvtap: entered promiscuous mode [ 86.468885][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.479983][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.494336][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.505136][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.515502][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.527624][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.540440][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.573386][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.582485][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.586679][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.613493][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.624668][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.634970][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.646011][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.657901][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.674740][ T5832] veth1_macvtap: entered promiscuous mode [ 86.716287][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.724139][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.735557][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.753252][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.762557][ T5836] Bluetooth: hci1: command tx timeout [ 86.762778][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.786291][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837713][ T5836] Bluetooth: hci0: command tx timeout [ 86.843187][ T5844] Bluetooth: hci3: command tx timeout [ 86.843199][ T5837] Bluetooth: hci2: command tx timeout [ 86.918427][ T5836] Bluetooth: hci4: command tx timeout [ 86.943824][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.957764][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.968606][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.979917][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.990135][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.004749][ T25] cfg80211: failed to load regulatory.db [ 87.010482][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.015289][ T5922] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.023907][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.037528][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.051785][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.129768][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.158179][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.168597][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.179452][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.189620][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.202342][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.231830][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.245871][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.262702][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.274821][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.287445][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.351361][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370227][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.390343][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.418286][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.538758][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.548100][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.715353][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.751341][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.893675][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.941822][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.100162][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.141922][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.502983][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.557216][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.575590][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.671780][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.716322][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.859529][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 89.400909][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.415536][ T5969] xt_TCPMSS: Only works on TCP SYN packets [ 90.293500][ T5995] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 90.308044][ T5993] dvmrp5: entered allmulticast mode [ 91.471033][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 91.503741][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 91.514115][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.45'. [ 92.091736][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 92.373074][ T6047] netlink: 'syz.3.57': attribute type 2 has an invalid length. [ 92.384371][ T6047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.57'. [ 92.401331][ T6047] Zero length message leads to an empty skb [ 92.419919][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 92.719230][ T6056] netlink: 76 bytes leftover after parsing attributes in process `syz.3.61'. [ 94.435727][ T6100] syz.4.82 uses obsolete (PF_INET,SOCK_PACKET) [ 95.191634][ T6131] batadv_slave_1: entered promiscuous mode [ 95.213621][ T6129] batadv_slave_1: left promiscuous mode [ 95.312962][ T6141] netlink: 76 bytes leftover after parsing attributes in process `syz.0.102'. [ 96.057752][ T6170] syzkaller0: entered promiscuous mode [ 96.091993][ T6170] syzkaller0: entered allmulticast mode [ 96.596092][ T6193] netlink: 76 bytes leftover after parsing attributes in process `syz.2.125'. [ 97.316866][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 98.305147][ T6204] ip6erspan0: entered promiscuous mode [ 98.967267][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 99.071339][ T6246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.148'. [ 99.356791][ T6253] ip6erspan0: entered promiscuous mode [ 99.673637][ T6255] syzkaller0: entered promiscuous mode [ 99.716278][ T6255] syzkaller0: entered allmulticast mode [ 99.982067][ T6279] netlink: 76 bytes leftover after parsing attributes in process `syz.1.163'. [ 100.136902][ T6288] netlink: 'syz.0.165': attribute type 39 has an invalid length. [ 102.007535][ T6317] syzkaller0: entered promiscuous mode [ 102.013121][ T6317] syzkaller0: entered allmulticast mode [ 102.062084][ T6328] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 103.621933][ T6344] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 104.157974][ T6375] netlink: 'syz.3.205': attribute type 39 has an invalid length. [ 104.323507][ T6363] syzkaller0: entered promiscuous mode [ 104.334714][ T6363] syzkaller0: entered allmulticast mode [ 105.397157][ T6408] netlink: 'syz.2.218': attribute type 39 has an invalid length. [ 107.543765][ T6456] syzkaller0: entered promiscuous mode [ 107.569038][ T6456] syzkaller0: entered allmulticast mode [ 107.619617][ T6463] netlink: 'syz.0.242': attribute type 39 has an invalid length. [ 107.737092][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. [ 107.746015][ T6466] netlink: 'syz.1.243': attribute type 7 has an invalid length. [ 107.769673][ T6466] netlink: 'syz.1.243': attribute type 8 has an invalid length. [ 107.785350][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 109.488572][ T6466] syz_tun: entered promiscuous mode [ 109.496609][ T6466] erspan0: entered promiscuous mode [ 109.503582][ T6466] gretap0: entered promiscuous mode [ 109.695695][ T6500] netlink: 'syz.4.256': attribute type 2 has an invalid length. [ 109.716904][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 110.075797][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 110.087652][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 110.100585][ T6512] netlink: 140 bytes leftover after parsing attributes in process `syz.4.261'. [ 110.289212][ T6518] netlink: 'syz.4.264': attribute type 39 has an invalid length. [ 110.441063][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 110.461853][ T6521] netlink: 'syz.2.265': attribute type 7 has an invalid length. [ 110.507046][ T6521] netlink: 'syz.2.265': attribute type 8 has an invalid length. [ 110.527052][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 110.617959][ T6523] syzkaller0: entered promiscuous mode [ 110.624591][ T6523] syzkaller0: entered allmulticast mode [ 111.782008][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'. [ 112.751626][ T6565] geneve2: entered promiscuous mode [ 112.765053][ T6565] geneve2: entered allmulticast mode [ 113.379245][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 113.473374][ T6589] syzkaller0: entered promiscuous mode [ 113.483577][ T6589] syzkaller0: entered allmulticast mode [ 113.703824][ T6601] netlink: 260 bytes leftover after parsing attributes in process `syz.1.294'. [ 113.725045][ T6600] netlink: 248 bytes leftover after parsing attributes in process `syz.3.295'. [ 113.935825][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 115.593829][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 115.595807][ T6635] netlink: 260 bytes leftover after parsing attributes in process `syz.4.307'. [ 115.944936][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.954394][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.374486][ T6660] syzkaller0: entered promiscuous mode [ 116.389761][ T6660] syzkaller0: entered allmulticast mode [ 116.515549][ T6666] netlink: 260 bytes leftover after parsing attributes in process `syz.4.318'. [ 116.738336][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.322'. [ 118.034371][ T6670] ip6erspan0: entered promiscuous mode [ 118.057615][ T6680] tipc: Started in network mode [ 118.062706][ T6680] tipc: Node identity , cluster identity 4711 [ 118.070617][ T6680] tipc: Failed to set node id, please configure manually [ 118.083076][ T6680] tipc: Enabling of bearer rejected, failed to enable media [ 118.651862][ T6710] syzkaller0: entered promiscuous mode [ 118.666435][ T6710] syzkaller0: entered allmulticast mode [ 118.791512][ T6715] syzkaller0: entered promiscuous mode [ 118.797457][ T6715] syzkaller0: entered allmulticast mode [ 118.895272][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 120.245758][ T6728] ip6erspan0: entered promiscuous mode [ 120.561102][ T6741] loop2: detected capacity change from 0 to 64 [ 121.001988][ T6739] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.751335][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'. [ 122.069254][ T6760] syzkaller0: entered promiscuous mode [ 122.075066][ T6760] syzkaller0: entered allmulticast mode [ 122.091385][ T6767] loop3: detected capacity change from 0 to 128 [ 122.145837][ T6767] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.160332][ T6767] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.192211][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.392744][ T5843] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.640248][ T6804] loop1: detected capacity change from 0 to 64 [ 125.784779][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 126.005085][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 126.789977][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 126.800387][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.809218][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.819222][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.827045][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.882989][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.970242][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.040142][ T6837] syzkaller0: entered promiscuous mode [ 127.045651][ T6837] syzkaller0: entered allmulticast mode [ 128.744084][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.782960][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 128.897917][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.135957][ T1156] bridge_slave_1: left allmulticast mode [ 129.153542][ T1156] bridge_slave_1: left promiscuous mode [ 129.165487][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.207553][ T1156] bridge_slave_0: left allmulticast mode [ 129.213246][ T1156] bridge_slave_0: left promiscuous mode [ 129.238268][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.666672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.723585][ T6886] ======================================================= [ 129.723585][ T6886] WARNING: The mand mount option has been deprecated and [ 129.723585][ T6886] and is ignored by this kernel. Remove the mand [ 129.723585][ T6886] option from the mount to silence this warning. [ 129.723585][ T6886] ======================================================= [ 129.758462][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.885640][ T6889] loop0: detected capacity change from 0 to 4096 [ 129.907123][ T6889] EXT4-fs: Ignoring removed orlov option [ 129.986056][ T6889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.034564][ T6889] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.404: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 130.071452][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.087699][ T6889] EXT4-fs (loop0): Remounting filesystem read-only [ 130.088314][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.095240][ T6889] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.404: directory missing '..' [ 130.122005][ T1156] bond0 (unregistering): Released all slaves [ 130.173416][ T6888] syzkaller0: entered promiscuous mode [ 130.179018][ T6888] syzkaller0: entered allmulticast mode [ 130.337643][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.504505][ T6902] netlink: 260 bytes leftover after parsing attributes in process `syz.0.408'. [ 130.598366][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.409'. [ 132.488027][ T6924] loop0: detected capacity change from 0 to 4096 [ 132.499598][ T6924] EXT4-fs: Ignoring removed orlov option [ 132.522461][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.556767][ T6923] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.417: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 132.556866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.586610][ T6923] EXT4-fs (loop0): Remounting filesystem read-only [ 132.593891][ T6923] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.417: directory missing '..' [ 132.692030][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.876738][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'. [ 133.083906][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.094012][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132188][ T1156] hsr_slave_0: left promiscuous mode [ 133.140867][ T1156] hsr_slave_1: left promiscuous mode [ 133.147595][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.155228][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.180647][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.191647][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.400391][ T1156] veth1_macvtap: left promiscuous mode [ 133.408567][ T1156] veth0_macvtap: left promiscuous mode [ 133.414513][ T1156] veth1_vlan: left promiscuous mode [ 133.423343][ T1156] veth0_vlan: left promiscuous mode [ 133.643520][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 133.656138][ T6950] netlink: 'syz.3.428': attribute type 7 has an invalid length. [ 133.671107][ T6950] netlink: 'syz.3.428': attribute type 8 has an invalid length. [ 133.685467][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 133.989226][ T29] audit: type=1326 audit(1739055507.545:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 134.030753][ T29] audit: type=1326 audit(1739055507.575:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 134.066082][ T29] audit: type=1326 audit(1739055507.575:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 134.094266][ T29] audit: type=1326 audit(1739055507.575:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2c58b750 code=0x7ffc0000 [ 134.129392][ T29] audit: type=1326 audit(1739055507.575:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 134.158982][ T29] audit: type=1326 audit(1739055507.575:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 134.195845][ T29] audit: type=1326 audit(1739055507.575:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 134.223285][ T29] audit: type=1326 audit(1739055507.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b2c58ba4a code=0x7ffc0000 [ 134.252634][ T29] audit: type=1326 audit(1739055507.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 134.275751][ T29] audit: type=1326 audit(1739055507.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b2c58ec7c code=0x7ffc0000 [ 134.804410][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 134.872014][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 135.994883][ T6950] syz_tun: entered promiscuous mode [ 136.007723][ T6950] erspan0: entered promiscuous mode [ 136.025752][ T6950] gretap0: entered promiscuous mode [ 136.045021][ T6950] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 136.072756][ T6950] Cannot create hsr debugfs directory [ 136.368562][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 136.719794][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.831225][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.932101][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.082058][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.270038][ T1156] bridge_slave_1: left allmulticast mode [ 137.280715][ T1156] bridge_slave_1: left promiscuous mode [ 137.287070][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.300167][ T1156] bridge_slave_0: left allmulticast mode [ 137.305841][ T1156] bridge_slave_0: left promiscuous mode [ 137.312083][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.830504][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.844798][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.863216][ T1156] bond0 (unregistering): Released all slaves [ 138.656015][ T7042] netlink: 512 bytes leftover after parsing attributes in process `syz.3.462'. [ 139.311714][ T1156] hsr_slave_0: left promiscuous mode [ 139.355915][ T1156] hsr_slave_1: left promiscuous mode [ 139.365685][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.373490][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.407825][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.651782][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.691677][ T1156] veth1_macvtap: left promiscuous mode [ 139.698440][ T1156] veth0_macvtap: left promiscuous mode [ 139.704148][ T1156] veth1_vlan: left promiscuous mode [ 139.712720][ T1156] veth0_vlan: left promiscuous mode [ 140.156724][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 140.191865][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 140.518840][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 141.509445][ T7068] tty tty3: ldisc open failed (-12), clearing slot 2 [ 142.108667][ T7077] new mount options do not match the existing superblock, will be ignored [ 142.150018][ T7077] loop0: detected capacity change from 0 to 4096 [ 142.156931][ T7077] EXT4-fs: Ignoring removed orlov option [ 142.179139][ T7077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.198103][ T7077] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.474: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 142.218802][ T7077] EXT4-fs (loop0): Remounting filesystem read-only [ 142.225317][ T7077] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.474: directory missing '..' [ 142.277636][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.388018][ T5885] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.572660][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 142.599935][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 142.631235][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.660419][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.687406][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.709224][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.718303][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.726302][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.240875][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.264959][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.277248][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.486352][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.550692][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.686374][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.733635][ T7091] loop1: detected capacity change from 0 to 4096 [ 143.753840][ T7091] EXT4-fs: Ignoring removed orlov option [ 143.781824][ T7091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.830274][ T7091] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.479: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 143.868250][ T7091] EXT4-fs (loop1): Remounting filesystem read-only [ 143.887140][ T7091] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.479: directory missing '..' [ 143.966399][ T5885] usb 4-1: usb_control_msg returned -32 [ 143.972303][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 144.019771][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.185131][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 144.934428][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.948813][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.969356][ T7088] bridge_slave_0: entered allmulticast mode [ 144.992960][ T7088] bridge_slave_0: entered promiscuous mode [ 145.012645][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.020142][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.027636][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.030195][ T7088] bridge_slave_1: entered allmulticast mode [ 145.037362][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.042709][ T7088] bridge_slave_1: entered promiscuous mode [ 145.050540][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.064378][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.072637][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.080212][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.142305][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.163769][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.263158][ T7088] team0: Port device team_slave_0 added [ 145.285421][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 145.302702][ T7088] team0: Port device team_slave_1 added [ 145.369615][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.376790][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.403451][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.426592][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.433637][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.491965][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.556538][ T5837] Bluetooth: hci0: command tx timeout [ 146.386535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 146.397240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.402346][ T7123] new mount options do not match the existing superblock, will be ignored [ 146.497887][ T5885] usb 4-1: USB disconnect, device number 2 [ 146.579757][ T7088] hsr_slave_0: entered promiscuous mode [ 146.611386][ T7119] loop0: detected capacity change from 0 to 4096 [ 146.618281][ T7119] EXT4-fs: Ignoring removed orlov option [ 146.661042][ T7119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.677722][ T7088] hsr_slave_1: entered promiscuous mode [ 146.684177][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.695187][ T7088] Cannot create hsr debugfs directory [ 146.701860][ T7119] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.485: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 146.722934][ T7119] EXT4-fs (loop0): Remounting filesystem read-only [ 146.729485][ T7119] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.485: directory missing '..' [ 146.807664][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.882291][ T7133] netlink: 'syz.3.488': attribute type 39 has an invalid length. [ 147.158650][ T5837] Bluetooth: hci1: command tx timeout [ 147.638019][ T5837] Bluetooth: hci0: command tx timeout [ 147.639224][ T7145] netlink: 260 bytes leftover after parsing attributes in process `syz.3.492'. [ 147.726673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 147.740548][ T7112] chnl_net:caif_netlink_parms(): no params data found [ 148.043259][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 148.043389][ T29] audit: type=1326 audit(1739055521.565:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.236485][ T29] audit: type=1326 audit(1739055521.565:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.283820][ T29] audit: type=1326 audit(1739055521.565:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.309458][ T29] audit: type=1326 audit(1739055521.565:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.336123][ T29] audit: type=1326 audit(1739055521.565:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.361302][ T29] audit: type=1326 audit(1739055521.565:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddd0b8b750 code=0x7ffc0000 [ 148.386055][ T29] audit: type=1326 audit(1739055521.575:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fddd0b8e617 code=0x7ffc0000 [ 148.410597][ T29] audit: type=1326 audit(1739055521.575:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 148.439294][ T29] audit: type=1326 audit(1739055521.575:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fddd0b8e617 code=0x7ffc0000 [ 148.498134][ T29] audit: type=1326 audit(1739055521.575:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fddd0b8ba4a code=0x7ffc0000 [ 148.675408][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.691777][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.701289][ T7112] bridge_slave_0: entered allmulticast mode [ 148.720757][ T7112] bridge_slave_0: entered promiscuous mode [ 148.738441][ T7088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.756372][ T977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.771457][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.778867][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.791620][ T7112] bridge_slave_1: entered allmulticast mode [ 148.803451][ T7112] bridge_slave_1: entered promiscuous mode [ 148.846572][ T7088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.894877][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.904974][ T7088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.914945][ T7088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.927399][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.946503][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 148.974789][ T977] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 149.005392][ T977] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.016453][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.026836][ T977] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.037400][ T977] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.051905][ T977] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.064512][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.065902][ T7112] team0: Port device team_slave_0 added [ 149.098217][ T7112] team0: Port device team_slave_1 added [ 149.219567][ T7161] netlink: 'syz.0.498': attribute type 39 has an invalid length. [ 149.227576][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.234687][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.263452][ T5837] Bluetooth: hci1: command tx timeout [ 149.266639][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.304722][ T977] usb 4-1: usb_control_msg returned -32 [ 149.320598][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.327933][ T977] usbtmc 4-1:16.0: can't read capabilities [ 149.336529][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.368634][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.441381][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.499'. [ 149.452523][ T7165] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.500'. [ 149.522419][ T7112] hsr_slave_0: entered promiscuous mode [ 149.529797][ T7112] hsr_slave_1: entered promiscuous mode [ 149.536695][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.546802][ T7112] Cannot create hsr debugfs directory [ 149.719260][ T5837] Bluetooth: hci0: command tx timeout [ 149.754799][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.884602][ T7175] new mount options do not match the existing superblock, will be ignored [ 149.937989][ T7175] loop1: detected capacity change from 0 to 4096 [ 149.944842][ T7175] EXT4-fs: Ignoring removed orlov option [ 149.963097][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.989891][ T7175] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.504: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 150.009784][ T7175] EXT4-fs (loop1): Remounting filesystem read-only [ 150.016430][ T7175] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.504: directory missing '..' [ 150.049460][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.061793][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.118431][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.125657][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.204347][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.211604][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.327762][ T7112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.408620][ T7112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.438285][ T7112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.468132][ T7112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.495879][ T7193] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.509'. [ 150.515885][ T7194] netlink: 'syz.0.508': attribute type 39 has an invalid length. [ 150.776915][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.812725][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 150.949124][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.973945][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.981169][ T7070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.253572][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.260844][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.317600][ T5837] Bluetooth: hci1: command tx timeout [ 151.353755][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.546344][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.695890][ T977] usb 4-1: USB disconnect, device number 3 [ 151.723425][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 151.761114][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 151.796757][ T5837] Bluetooth: hci0: command tx timeout [ 151.802270][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.840592][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.857811][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.864765][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.882894][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.927977][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.944862][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.039951][ T7088] veth0_vlan: entered promiscuous mode [ 152.064075][ T7088] veth1_vlan: entered promiscuous mode [ 152.125087][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 152.144571][ T7227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.156408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 152.176343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 152.226499][ T7227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.238937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.246504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 152.327164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 152.664895][ T7227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.666691][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.686845][ T5920] usb 1-1: usb_control_msg returned -32 [ 152.692409][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 152.704184][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.716538][ T7227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.794580][ T7088] veth0_macvtap: entered promiscuous mode [ 152.832882][ T7088] veth1_macvtap: entered promiscuous mode [ 152.955864][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.998116][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.060607][ T7088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.075697][ T7088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.100374][ T7239] netlink: 'syz.1.519': attribute type 39 has an invalid length. [ 153.100653][ T7088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.119795][ T7088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.194468][ T7112] veth0_vlan: entered promiscuous mode [ 153.265202][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 153.281695][ T7112] veth1_vlan: entered promiscuous mode [ 153.396384][ T5837] Bluetooth: hci1: command tx timeout [ 153.444437][ T7112] veth0_macvtap: entered promiscuous mode [ 153.459445][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.470665][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.498213][ T7112] veth1_macvtap: entered promiscuous mode [ 153.578246][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.604821][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.620276][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.630737][ T7251] loop3: detected capacity change from 0 to 64 [ 153.639582][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.655744][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.670787][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.672153][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.684663][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.801983][ T7254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.526'. [ 153.935450][ T7112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.944509][ T7112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.955409][ T7112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.971875][ T7112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.717258][ T9] usb 1-1: USB disconnect, device number 2 [ 155.074195][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.083808][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.092631][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.099993][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.378476][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.903735][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.531'. [ 156.095572][ T7280] netlink: 68 bytes leftover after parsing attributes in process `syz.3.535'. [ 158.028047][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 158.120358][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 159.378095][ T7332] netlink: 'syz.6.550': attribute type 39 has an invalid length. [ 159.958206][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 160.073589][ T7343] ip6erspan0: entered promiscuous mode [ 160.217721][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.556'. [ 160.461178][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.555'. [ 161.217169][ T7359] new mount options do not match the existing superblock, will be ignored [ 161.530970][ T7359] option changes via remount are deprecated (pid=7350 comm=syz.1.557) [ 162.225585][ T7353] loop1: detected capacity change from 0 to 4096 [ 162.232487][ T7353] EXT4-fs: Ignoring removed orlov option [ 162.288094][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.310553][ T7353] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.557: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 162.330420][ T7353] EXT4-fs (loop1): Remounting filesystem read-only [ 162.337050][ T7353] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.557: directory missing '..' [ 162.417957][ T7372] netlink: 'syz.6.564': attribute type 39 has an invalid length. [ 162.429021][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.471974][ T7377] loop5: detected capacity change from 0 to 512 [ 162.573171][ T7377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.648888][ T7377] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.038048][ T7377] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 163.198464][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 163.259219][ T7088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.348517][ T7397] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.571'. [ 163.429736][ T7393] ip6erspan0: entered promiscuous mode [ 163.963592][ T7414] netlink: 'syz.6.577': attribute type 39 has an invalid length. [ 164.223398][ T7425] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.582'. [ 164.314564][ T7426] loop3: detected capacity change from 0 to 512 [ 164.523939][ T7426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.618650][ T7426] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.011456][ T7426] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 165.151467][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.245698][ T7436] syzkaller0: entered promiscuous mode [ 165.286340][ T7436] syzkaller0: entered allmulticast mode [ 165.412887][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 166.372942][ T7464] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.593'. [ 169.129179][ T7492] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.604'. [ 169.742231][ T7502] syzkaller0: entered promiscuous mode [ 169.766353][ T7502] syzkaller0: entered allmulticast mode [ 171.746022][ T7535] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.616'. [ 174.267630][ T7551] syz.3.621: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.286549][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.3.621 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 174.286570][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.286588][ T7551] Call Trace: [ 174.286596][ T7551] [ 174.286604][ T7551] dump_stack_lvl+0x241/0x360 [ 174.286641][ T7551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.286662][ T7551] ? __pfx__printk+0x10/0x10 [ 174.286697][ T7551] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 174.286717][ T7551] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 174.286741][ T7551] warn_alloc+0x278/0x410 [ 174.286772][ T7551] ? __pfx_warn_alloc+0x10/0x10 [ 174.286802][ T7551] ? translate_table+0x196/0x21f0 [ 174.286823][ T7551] ? __get_vm_area_node+0x1c8/0x2d0 [ 174.286845][ T7551] ? __get_vm_area_node+0x25c/0x2d0 [ 174.286878][ T7551] __vmalloc_node_range_noprof+0x62f/0x1380 [ 174.286946][ T7551] ? rcu_is_watching+0x15/0xb0 [ 174.286964][ T7551] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.286987][ T7551] ? rcu_is_watching+0x15/0xb0 [ 174.287006][ T7551] ? trace_kmalloc+0x1f/0xd0 [ 174.287022][ T7551] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 174.287041][ T7551] ? __kvmalloc_node_noprof+0x72/0x190 [ 174.287068][ T7551] __kvmalloc_node_noprof+0x142/0x190 [ 174.287090][ T7551] ? translate_table+0x196/0x21f0 [ 174.287114][ T7551] translate_table+0x196/0x21f0 [ 174.287186][ T7551] ? __might_fault+0xaa/0x120 [ 174.287210][ T7551] ? __pfx_translate_table+0x10/0x10 [ 174.287243][ T7551] ? __virt_addr_valid+0x183/0x530 [ 174.287271][ T7551] ? __might_fault+0xaa/0x120 [ 174.287292][ T7551] ? __might_fault+0xc6/0x120 [ 174.287325][ T7551] ? copy_from_sockptr_offset+0x6b/0xb0 [ 174.287354][ T7551] do_arpt_set_ctl+0x101c/0x1650 [ 174.287393][ T7551] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 174.287421][ T7551] ? nf_setsockopt+0x240/0x2c0 [ 174.287436][ T7551] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 174.287456][ T7551] ? __pfx_lock_release+0x10/0x10 [ 174.287481][ T7551] ? rcu_is_watching+0x15/0xb0 [ 174.287521][ T7551] ? __mutex_unlock_slowpath+0x227/0x800 [ 174.287557][ T7551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.287586][ T7551] ? __pfx___mutex_lock+0x10/0x10 [ 174.287623][ T7551] nf_setsockopt+0x295/0x2c0 [ 174.287645][ T7551] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.287671][ T7551] smc_setsockopt+0x275/0xe50 [ 174.287702][ T7551] ? __pfx_smc_setsockopt+0x10/0x10 [ 174.287722][ T7551] ? aa_sock_opt_perm+0xfd/0x1b0 [ 174.287753][ T7551] ? __pfx_smc_setsockopt+0x10/0x10 [ 174.287773][ T7551] do_sock_setsockopt+0x3af/0x720 [ 174.287808][ T7551] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 174.287841][ T7551] ? __fget_files+0x395/0x410 [ 174.287860][ T7551] ? __fget_files+0x2a/0x410 [ 174.287894][ T7551] __x64_sys_setsockopt+0x1ee/0x280 [ 174.287926][ T7551] do_syscall_64+0xf3/0x230 [ 174.287949][ T7551] ? clear_bhb_loop+0x35/0x90 [ 174.287977][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.288007][ T7551] RIP: 0033:0x7f5789f8cde9 [ 174.288028][ T7551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.288041][ T7551] RSP: 002b:00007f578ad8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.288059][ T7551] RAX: ffffffffffffffda RBX: 00007f578a1a6080 RCX: 00007f5789f8cde9 [ 174.288072][ T7551] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000007 [ 174.288082][ T7551] RBP: 00007f578a00e2a0 R08: 00000000000003f8 R09: 0000000000000000 [ 174.288093][ T7551] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 174.288104][ T7551] R13: 0000000000000000 R14: 00007f578a1a6080 R15: 00007fffa980ba98 [ 174.288142][ T7551] [ 174.288159][ T7551] Mem-Info: [ 174.658335][ T7551] active_anon:8055 inactive_anon:0 isolated_anon:0 [ 174.658335][ T7551] active_file:1363 inactive_file:38336 isolated_file:0 [ 174.658335][ T7551] unevictable:768 dirty:72 writeback:0 [ 174.658335][ T7551] slab_reclaimable:10427 slab_unreclaimable:99185 [ 174.658335][ T7551] mapped:31506 shmem:5419 pagetables:829 [ 174.658335][ T7551] sec_pagetables:0 bounce:0 [ 174.658335][ T7551] kernel_misc_reclaimable:0 [ 174.658335][ T7551] free:1337248 free_pcp:301 free_cma:0 [ 174.787836][ T7551] Node 0 active_anon:36020kB inactive_anon:0kB active_file:5452kB inactive_file:153268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129824kB dirty:284kB writeback:0kB shmem:23840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10580kB pagetables:3216kB sec_pagetables:0kB all_unreclaimable? no [ 174.916547][ T7551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 174.994332][ T7551] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.051289][ T7551] lowmem_reserve[]: 0 2491 2491 0 0 [ 175.059167][ T7551] Node 0 DMA32 free:1406640kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:52180kB inactive_anon:0kB active_file:5452kB inactive_file:152704kB unevictable:1536kB writepending:280kB present:3129332kB managed:2550804kB mlocked:0kB bounce:0kB free_pcp:6252kB local_pcp:5084kB free_cma:0kB [ 175.089750][ T7551] lowmem_reserve[]: 0 0 0 0 0 [ 175.095581][ T7551] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 175.188636][ T7551] lowmem_reserve[]: 0 0 0 0 0 [ 175.787025][ T7551] Node 1 Normal free:3902016kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.850083][ T7551] lowmem_reserve[]: 0 0 0 0 0 [ 175.865486][ T7551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.896379][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 175.896394][ T29] audit: type=1326 audit(1739055548.765:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 175.926587][ T29] audit: type=1326 audit(1739055548.765:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 175.952065][ T7551] Node 0 DMA32: 2*4kB (UE) 12*8kB (ME) 13*16kB (UE) 125*32kB (UE) 62*64kB (UE) 13*128kB (UE) 22*256kB (U) 20*512kB (UM) 17*1024kB (UM) 9*2048kB (UE) 328*4096kB (UM) = 1405144kB [ 175.953951][ T29] audit: type=1326 audit(1739055548.765:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 175.993771][ T7573] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.627'. [ 175.995588][ T29] audit: type=1326 audit(1739055548.765:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 176.094673][ T7551] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 176.147361][ T29] audit: type=1326 audit(1739055548.765:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 176.159308][ T7551] Node 1 [ 176.170186][ T29] audit: type=1326 audit(1739055548.775:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2c58b750 code=0x7ffc0000 [ 176.199520][ T29] audit: type=1326 audit(1739055548.775:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 176.228165][ T7551] Normal: 200*4kB (UME) 66*8kB (UME) 47*16kB (UME) 199*32kB (UME) 97*64kB (UME) 28*128kB (UME) 15*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3902016kB [ 176.276396][ T29] audit: type=1326 audit(1739055548.775:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 176.310328][ T7551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.351240][ T7551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.386389][ T29] audit: type=1326 audit(1739055548.775:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 176.395027][ T7551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.416287][ T29] audit: type=1326 audit(1739055548.785:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b2c58ba4a code=0x7ffc0000 [ 176.445186][ T7551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.454619][ T7551] 45019 total pagecache pages [ 176.506573][ T7551] 0 pages in swap cache [ 176.525278][ T7551] Free swap = 124996kB [ 176.529601][ T7551] Total swap = 124996kB [ 176.533962][ T7551] 2097051 pages RAM [ 176.546407][ T7551] 0 pages HighMem/MovableOnly [ 176.556396][ T7551] 427564 pages reserved [ 176.560787][ T7551] 0 pages cma reserved [ 176.813386][ T7583] syzkaller0: entered promiscuous mode [ 176.863353][ T7583] syzkaller0: entered allmulticast mode [ 176.904123][ T7588] warning: `syz.6.632' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.982205][ T7593] netlink: 'syz.5.634': attribute type 1 has an invalid length. [ 177.487744][ T7600] kAFS: unable to lookup cell '/S²jË¡8' [ 178.379839][ T7606] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.639'. [ 180.885486][ T7594] ip6erspan0: entered promiscuous mode [ 182.359630][ T7641] kAFS: unable to lookup cell '/S²jË¡8' [ 183.264208][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 183.264247][ T29] audit: type=1326 audit(1739055556.805:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 183.867737][ T29] audit: type=1326 audit(1739055556.805:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 183.920144][ T29] audit: type=1326 audit(1739055556.805:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 183.961729][ T29] audit: type=1326 audit(1739055556.805:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 184.019295][ T29] audit: type=1326 audit(1739055556.805:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 184.071388][ T29] audit: type=1326 audit(1739055556.805:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2c58b750 code=0x7ffc0000 [ 184.210666][ T29] audit: type=1326 audit(1739055556.805:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 184.287531][ T29] audit: type=1326 audit(1739055556.805:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 184.357583][ T29] audit: type=1326 audit(1739055556.805:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 184.431247][ T29] audit: type=1326 audit(1739055556.805:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b2c58ba4a code=0x7ffc0000 [ 185.096535][ T7665] syzkaller0: entered promiscuous mode [ 185.130748][ T7665] syzkaller0: entered allmulticast mode [ 188.788150][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 188.788290][ T29] audit: type=1326 audit(1739055562.305:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 188.959310][ T29] audit: type=1326 audit(1739055562.305:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 189.114280][ T29] audit: type=1326 audit(1739055562.305:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 189.286327][ T29] audit: type=1326 audit(1739055562.315:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 189.336345][ T29] audit: type=1326 audit(1739055562.315:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 189.406294][ T29] audit: type=1326 audit(1739055562.315:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddd0b8b750 code=0x7ffc0000 [ 189.562845][ T29] audit: type=1326 audit(1739055562.315:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fddd0b8e617 code=0x7ffc0000 [ 189.596702][ T7703] loop0: detected capacity change from 0 to 64 [ 189.622465][ T29] audit: type=1326 audit(1739055562.315:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddd0b8cde9 code=0x7ffc0000 [ 189.882567][ T29] audit: type=1326 audit(1739055562.315:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fddd0b8e617 code=0x7ffc0000 [ 189.907052][ T29] audit: type=1326 audit(1739055562.325:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fddd0b8ba4a code=0x7ffc0000 [ 190.735906][ T7711] loop3: detected capacity change from 0 to 64 [ 191.917855][ T7723] loop1: detected capacity change from 0 to 512 [ 191.972164][ T7723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.005465][ T7723] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.051415][ T7723] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 192.849633][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.034394][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 194.034411][ T29] audit: type=1326 audit(1739055567.585:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.126785][ T29] audit: type=1326 audit(1739055567.585:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.166299][ T29] audit: type=1326 audit(1739055567.595:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.188451][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.222051][ T29] audit: type=1326 audit(1739055567.595:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.256743][ T29] audit: type=1326 audit(1739055567.595:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.291683][ T29] audit: type=1326 audit(1739055567.595:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2c58b750 code=0x7ffc0000 [ 194.320900][ T29] audit: type=1326 audit(1739055567.595:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 194.356763][ T29] audit: type=1326 audit(1739055567.595:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2c58cde9 code=0x7ffc0000 [ 194.425837][ T29] audit: type=1326 audit(1739055567.595:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b2c58e617 code=0x7ffc0000 [ 194.480390][ T7752] loop5: detected capacity change from 0 to 64 [ 194.489643][ T29] audit: type=1326 audit(1739055567.605:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b2c58ba4a code=0x7ffc0000 [ 194.533368][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546703][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.696834][ T7756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.136761][ T7760] new mount options do not match the existing superblock, will be ignored [ 196.217100][ T7760] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 196.641463][ T7760] loop0: detected capacity change from 0 to 4096 [ 196.648847][ T7760] EXT4-fs: Ignoring removed orlov option [ 196.670103][ T7760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.733922][ T7759] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.682: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 196.753055][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.768713][ T7759] EXT4-fs (loop0): Remounting filesystem read-only [ 196.775234][ T7759] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.682: directory missing '..' [ 196.889346][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.229258][ T7776] kAFS: unable to lookup cell '/S²jË¡8' [ 197.858012][ T7778] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.267140][ T7784] xt_CT: No such helper "netbios-ns" [ 198.444929][ T7794] loop1: detected capacity change from 0 to 64 [ 199.778501][ T7804] new mount options do not match the existing superblock, will be ignored [ 199.800560][ T7804] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 199.990407][ T7798] netlink: 'syz.5.695': attribute type 2 has an invalid length. [ 200.026444][ T7802] loop6: detected capacity change from 0 to 4096 [ 200.033287][ T7802] EXT4-fs: Ignoring removed orlov option [ 200.076480][ T7798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.695'. [ 200.086427][ T7802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.122045][ T7802] EXT4-fs error (device loop6): ext4_empty_dir:3112: inode #12: block 80: comm syz.6.697: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 200.141583][ T7802] EXT4-fs (loop6): Remounting filesystem read-only [ 200.148725][ T7802] EXT4-fs warning (device loop6): ext4_empty_dir:3114: inode #12: comm syz.6.697: directory missing '..' [ 200.323951][ T7810] fuseblk: Bad value for 'fd' [ 200.608580][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.929900][ T7828] loop1: detected capacity change from 0 to 64 [ 201.673013][ T7837] loop3: detected capacity change from 0 to 64 [ 201.721676][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 201.722681][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 204.078846][ T7852] xt_CT: No such helper "netbios-ns" [ 204.707676][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.719'. [ 204.726439][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.746164][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.773841][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.806683][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.831794][ T7873] loop0: detected capacity change from 0 to 64 [ 206.721400][ T7883] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 206.759511][ T7885] loop6: detected capacity change from 0 to 64 [ 209.422318][ T7896] loop1: detected capacity change from 0 to 64 [ 210.861075][ T5888] IPVS: starting estimator thread 0... [ 210.873562][ T7924] tmpfs: Unknown parameter '' [ 211.817162][ T7926] IPVS: using max 38 ests per chain, 91200 per kthread [ 211.865348][ T7929] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 212.020089][ T7931] Cannot find set identified by id 0 to match [ 212.059268][ T7934] loop5: detected capacity change from 0 to 64 [ 212.076084][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.6.740'. [ 215.267478][ T7950] netlink: 512 bytes leftover after parsing attributes in process `syz.6.743'. [ 215.630458][ T7956] new mount options do not match the existing superblock, will be ignored [ 215.769294][ T7958] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 216.177333][ T7958] loop1: detected capacity change from 0 to 4096 [ 216.202655][ T7958] EXT4-fs: Ignoring removed orlov option [ 216.208951][ T7964] loop5: detected capacity change from 0 to 64 [ 216.673758][ T7969] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 217.107587][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.214090][ T7952] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.744: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 217.272334][ T7952] EXT4-fs (loop1): Remounting filesystem read-only [ 217.280541][ T7952] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.744: directory missing '..' [ 217.364076][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 217.517833][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.526021][ T7981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.307806][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 218.319658][ T7981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.339359][ T7981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.340242][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.161597][ T8012] loop5: detected capacity change from 0 to 64 [ 223.395335][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.768'. [ 223.508864][ T8043] loop6: detected capacity change from 0 to 512 [ 223.530377][ T8047] loop5: detected capacity change from 0 to 64 [ 223.544397][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 223.568962][ T8043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.592026][ T8043] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.082440][ T8043] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 224.212844][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.556518][ T8081] Cannot find set identified by id 0 to match [ 226.219712][ T8091] netlink: 'syz.5.783': attribute type 72 has an invalid length. [ 226.246552][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'. [ 227.506833][ T8101] loop5: detected capacity change from 0 to 64 [ 227.989272][ T8104] loop0: detected capacity change from 0 to 64 [ 228.631797][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 228.879943][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 228.947281][ T8114] new mount options do not match the existing superblock, will be ignored [ 228.956614][ T8114] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 228.992623][ T8114] loop0: detected capacity change from 0 to 4096 [ 228.999473][ T8114] EXT4-fs: Ignoring removed orlov option [ 229.024938][ T8114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.048752][ T8114] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz.0.789: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 229.069613][ T8114] EXT4-fs (loop0): Remounting filesystem read-only [ 229.076124][ T8114] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz.0.789: directory missing '..' [ 229.159107][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.980603][ T8131] netlink: 'syz.3.796': attribute type 72 has an invalid length. [ 229.990099][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 230.183637][ T8135] loop6: detected capacity change from 0 to 512 [ 230.682902][ T8141] loop1: detected capacity change from 0 to 64 [ 230.692212][ T8135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.707285][ T8135] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.270100][ T8135] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 231.401130][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.505063][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 231.634843][ T8160] loop3: detected capacity change from 0 to 512 [ 231.661874][ T8160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 231.674763][ T8160] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.724935][ T8160] 9pnet_fd: Insufficient options for proto=fd [ 231.956685][ T5847] Bluetooth: hci1: command 0x0405 tx timeout [ 232.967871][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 233.158630][ T8181] netlink: 'syz.3.809': attribute type 72 has an invalid length. [ 233.198847][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 234.438772][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 234.663795][ T8207] loop0: detected capacity change from 0 to 512 [ 234.771939][ T8207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.805846][ T8207] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.842595][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 235.024856][ T8207] 9pnet_fd: Insufficient options for proto=fd [ 236.272256][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.823'. [ 236.490107][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.592482][ T8228] tmpfs: Unknown parameter '' [ 236.716581][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 236.748489][ T8231] /dev/loop0: Can't open blockdev [ 237.169198][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 237.208517][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.253747][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 237.278949][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.332010][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.375641][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.477331][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.506323][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.980394][ T9] usb 6-1: can't set config #16, error -71 [ 238.020281][ T9] usb 6-1: USB disconnect, device number 2 [ 238.397620][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.831'. [ 238.631819][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.834'. [ 240.135940][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 240.550414][ T8284] libceph: resolve '.' (ret=-3): failed [ 240.558800][ T8284] lo speed is unknown, defaulting to 1000 [ 240.564792][ T8284] lo speed is unknown, defaulting to 1000 [ 240.572808][ T8284] lo speed is unknown, defaulting to 1000 [ 240.583143][ T8284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.600361][ T8284] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.628796][ T8284] lo speed is unknown, defaulting to 1000 [ 240.636029][ T8284] lo speed is unknown, defaulting to 1000 [ 240.646366][ T8284] lo speed is unknown, defaulting to 1000 [ 240.656091][ T8284] lo speed is unknown, defaulting to 1000 [ 240.664592][ T8284] lo speed is unknown, defaulting to 1000 [ 241.142184][ T8293] sock: sock_set_timeout: `syz.0.840' (pid 8293) tries to set negative timeout [ 241.399384][ T8298] loop1: detected capacity change from 0 to 64 [ 242.445589][ T8314] loop3: detected capacity change from 0 to 512 [ 242.544762][ T8314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 242.629650][ T8314] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.676350][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 242.691334][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.846'. [ 242.732714][ T8314] 9pnet_fd: Insufficient options for proto=fd [ 243.007764][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.6.848'. [ 243.190516][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 244.688868][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 244.959773][ T8351] loop1: detected capacity change from 0 to 128 [ 244.992429][ T8351] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.000169][ T5847] Bluetooth: hci1: command 0x0405 tx timeout [ 245.140683][ T8351] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.289826][ T8360] kAFS: unable to lookup cell '/S²jË¡8' [ 246.423948][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'. [ 246.584155][ T8376] loop0: detected capacity change from 0 to 512 [ 246.616967][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 246.655507][ T8376] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.661608][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.702590][ T8376] 9pnet_fd: Insufficient options for proto=fd [ 247.154422][ T8389] loop1: detected capacity change from 0 to 64 [ 247.725203][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 247.902903][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.865'. [ 249.065825][ T8411] fuseblk: Bad value for 'fd' [ 249.246869][ T8416] loop5: detected capacity change from 0 to 128 [ 249.335258][ T8416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.366961][ T8416] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.398857][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.217238][ T7088] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.393163][ T8436] new mount options do not match the existing superblock, will be ignored [ 250.403805][ T8436] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 250.469751][ T8436] loop3: detected capacity change from 0 to 4096 [ 250.476692][ T8436] EXT4-fs: Ignoring removed orlov option [ 250.510920][ T8436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.534460][ T8436] EXT4-fs error (device loop3): ext4_empty_dir:3112: inode #12: block 80: comm syz.3.870: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 250.564507][ T8436] EXT4-fs (loop3): Remounting filesystem read-only [ 250.571083][ T8436] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #12: comm syz.3.870: directory missing '..' [ 250.656408][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.225788][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 253.935235][ T8478] netlink: 11 bytes leftover after parsing attributes in process `syz.3.885'. [ 254.317386][ T8482] netlink: 'syz.5.893': attribute type 1 has an invalid length. [ 254.325455][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 254.589358][ T8487] new mount options do not match the existing superblock, will be ignored [ 254.615933][ T8487] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 255.471530][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.491350][ T8487] loop1: detected capacity change from 0 to 4096 [ 255.511792][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 255.678123][ T8487] EXT4-fs: Ignoring removed orlov option [ 255.926114][ T8487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.961773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.968639][ T8486] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.891: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 255.989674][ T8486] EXT4-fs (loop1): Remounting filesystem read-only [ 255.996186][ T8486] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.891: directory missing '..' [ 256.010178][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.102652][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.087120][ T8532] tipc: Started in network mode [ 257.092272][ T8532] tipc: Node identity f607639d567a, cluster identity 4711 [ 257.100968][ T8532] tipc: Enabled bearer , priority 0 [ 257.121361][ T8531] tipc: Disabling bearer [ 257.472936][ T8535] netlink: 512 bytes leftover after parsing attributes in process `syz.1.908'. [ 258.043539][ T8547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.223528][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 259.959968][ T8582] sock: sock_set_timeout: `syz.6.925' (pid 8582) tries to set negative timeout [ 260.097775][ T8585] loop0: detected capacity change from 0 to 64 [ 261.502786][ T8593] netlink: 'syz.6.928': attribute type 1 has an invalid length. [ 261.532668][ T8594] loop1: detected capacity change from 0 to 512 [ 261.595796][ T8593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.644614][ T8594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.666479][ T8594] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.726108][ T8594] 9pnet_fd: Insufficient options for proto=fd [ 261.750138][ T8600] bond1: (slave veth3): Enslaving as an active interface with a down link [ 262.375001][ T8593] ip6erspan0: entered promiscuous mode [ 262.446713][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 262.738072][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 263.997402][ T8653] loop1: detected capacity change from 0 to 512 [ 264.029993][ T8655] netlink: 'syz.6.946': attribute type 1 has an invalid length. [ 264.063482][ T8653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 264.086983][ T8653] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.097465][ T8655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.134231][ T8653] 9pnet_fd: Insufficient options for proto=fd [ 264.309283][ T8662] bond2: (slave veth5): Enslaving as an active interface with a down link [ 264.953628][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 265.187476][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 265.204059][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 265.213390][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.954'. [ 265.311937][ T8686] loop6: detected capacity change from 0 to 64 [ 266.280543][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.960'. [ 268.132381][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.972'. [ 268.279096][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 268.279265][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 268.702232][ T8749] new mount options do not match the existing superblock, will be ignored [ 268.929370][ T8747] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 269.377034][ T8743] loop1: detected capacity change from 0 to 4096 [ 269.386847][ T8743] EXT4-fs: Ignoring removed orlov option [ 269.492477][ T8745] warn_alloc: 1 callbacks suppressed [ 269.492490][ T8745] syz.3.974: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.553514][ T8745] CPU: 1 UID: 0 PID: 8745 Comm: syz.3.974 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 269.553539][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 269.553549][ T8745] Call Trace: [ 269.553557][ T8745] [ 269.553565][ T8745] dump_stack_lvl+0x241/0x360 [ 269.553602][ T8745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.553623][ T8745] ? __pfx__printk+0x10/0x10 [ 269.553657][ T8745] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 269.553677][ T8745] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 269.553702][ T8745] warn_alloc+0x278/0x410 [ 269.553734][ T8745] ? __pfx_warn_alloc+0x10/0x10 [ 269.553768][ T8745] ? translate_table+0x196/0x21f0 [ 269.553789][ T8745] ? __get_vm_area_node+0x1c8/0x2d0 [ 269.553807][ T8745] ? __get_vm_area_node+0x25c/0x2d0 [ 269.553825][ T8745] __vmalloc_node_range_noprof+0x62f/0x1380 [ 269.553861][ T8745] ? rcu_is_watching+0x15/0xb0 [ 269.553871][ T8745] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.553884][ T8745] ? rcu_is_watching+0x15/0xb0 [ 269.553894][ T8745] ? trace_kmalloc+0x1f/0xd0 [ 269.553903][ T8745] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 269.553913][ T8745] ? __kvmalloc_node_noprof+0x72/0x190 [ 269.553928][ T8745] __kvmalloc_node_noprof+0x142/0x190 [ 269.553941][ T8745] ? translate_table+0x196/0x21f0 [ 269.553954][ T8745] translate_table+0x196/0x21f0 [ 269.553988][ T8745] ? __might_fault+0xaa/0x120 [ 269.554001][ T8745] ? __pfx_translate_table+0x10/0x10 [ 269.554019][ T8745] ? __virt_addr_valid+0x183/0x530 [ 269.554034][ T8745] ? __might_fault+0xaa/0x120 [ 269.554046][ T8745] ? __might_fault+0xc6/0x120 [ 269.554063][ T8745] ? copy_from_sockptr_offset+0x6b/0xb0 [ 269.554086][ T8745] do_arpt_set_ctl+0x101c/0x1650 [ 269.554108][ T8745] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 269.554124][ T8745] ? nf_setsockopt+0x240/0x2c0 [ 269.554136][ T8745] ? __pfx_lock_release+0x10/0x10 [ 269.554151][ T8745] ? rcu_is_watching+0x15/0xb0 [ 269.554172][ T8745] ? __mutex_unlock_slowpath+0x227/0x800 [ 269.554193][ T8745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.554209][ T8745] ? __pfx___mutex_lock+0x10/0x10 [ 269.554230][ T8745] nf_setsockopt+0x295/0x2c0 [ 269.554242][ T8745] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 269.554257][ T8745] smc_setsockopt+0x275/0xe50 [ 269.554275][ T8745] ? __pfx_smc_setsockopt+0x10/0x10 [ 269.554287][ T8745] ? aa_sock_opt_perm+0xfd/0x1b0 [ 269.554304][ T8745] ? __pfx_smc_setsockopt+0x10/0x10 [ 269.554315][ T8745] do_sock_setsockopt+0x3af/0x720 [ 269.554335][ T8745] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 269.554354][ T8745] ? __fget_files+0x395/0x410 [ 269.554365][ T8745] ? __fget_files+0x2a/0x410 [ 269.554383][ T8745] __x64_sys_setsockopt+0x1ee/0x280 [ 269.554403][ T8745] do_syscall_64+0xf3/0x230 [ 269.554416][ T8745] ? clear_bhb_loop+0x35/0x90 [ 269.554432][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.554445][ T8745] RIP: 0033:0x7f5789f8cde9 [ 269.554461][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.554468][ T8745] RSP: 002b:00007f578ad8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.554479][ T8745] RAX: ffffffffffffffda RBX: 00007f578a1a6080 RCX: 00007f5789f8cde9 [ 269.554486][ T8745] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 269.554495][ T8745] RBP: 00007f578a00e2a0 R08: 00000000000003f8 R09: 0000000000000000 [ 269.554501][ T8745] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 269.554507][ T8745] R13: 0000000000000000 R14: 00007f578a1a6080 R15: 00007fffa980ba98 [ 269.554527][ T8745] [ 269.906083][ T8745] Mem-Info: [ 269.909283][ T8745] active_anon:8795 inactive_anon:0 isolated_anon:0 [ 269.909283][ T8745] active_file:14357 inactive_file:38374 isolated_file:0 [ 269.909283][ T8745] unevictable:768 dirty:66 writeback:0 [ 269.909283][ T8745] slab_reclaimable:10861 slab_unreclaimable:99637 [ 269.909283][ T8745] mapped:34608 shmem:6136 pagetables:819 [ 269.909283][ T8745] sec_pagetables:0 bounce:0 [ 269.909283][ T8745] kernel_misc_reclaimable:0 [ 269.909283][ T8745] free:1321876 free_pcp:207 free_cma:0 [ 269.990280][ T8745] Node 0 active_anon:35380kB inactive_anon:0kB active_file:57428kB inactive_file:153420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138432kB dirty:260kB writeback:0kB shmem:23008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10888kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 270.023199][ T8745] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 270.053480][ T8745] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.062040][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.080664][ T8745] lowmem_reserve[]: 0 2491 2491 0 0 [ 270.080720][ T8745] Node 0 DMA32 free:1369700kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:35340kB inactive_anon:0kB active_file:57428kB inactive_file:152856kB unevictable:1536kB writepending:260kB present:3129332kB managed:2550804kB mlocked:0kB bounce:0kB free_pcp:868kB local_pcp:68kB free_cma:0kB [ 270.080773][ T8745] lowmem_reserve[]: 0 0 0 0 0 [ 270.080816][ T8745] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 270.080864][ T8745] lowmem_reserve[]: 0 0 0 0 0 [ 270.080906][ T8745] Node 1 Normal free:3902140kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 270.080955][ T8745] lowmem_reserve[]: 0 0 0 0 0 [ 270.081000][ T8745] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.081145][ T8745] Node 0 DMA32: 2*4kB (ME) 4*8kB (ME) 44*16kB (UME) 454*32kB (UME) 411*64kB (UME) 176*128kB (UME) 107*256kB (UME) 79*512kB (UME) 52*1024kB (UME) 18*2048kB (UME) 280*4096kB (UM) = 1368936kB [ 270.231694][ T8745] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 270.243699][ T8745] Node 1 Normal: 199*4kB (UME) 66*8kB (UME) 47*16kB (UME) 197*32kB (UME) 96*64kB (UME) 26*128kB (UME) 15*256kB (UM) 7*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3902140kB [ 270.262388][ T8745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.272283][ T8745] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.281693][ T8745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.295676][ T8745] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.305195][ T8745] 58886 total pagecache pages [ 270.309968][ T8745] 0 pages in swap cache [ 270.314164][ T8745] Free swap = 124996kB [ 270.315877][ T8743] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.973: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 270.318555][ T8745] Total swap = 124996kB [ 270.318572][ T8745] 2097051 pages RAM [ 270.318579][ T8745] 0 pages HighMem/MovableOnly [ 270.318588][ T8745] 427564 pages reserved [ 270.318597][ T8745] 0 pages cma reserved [ 270.455221][ T8743] EXT4-fs (loop1): Remounting filesystem read-only [ 270.462980][ T8743] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz.1.973: directory missing '..' [ 270.668779][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.976035][ T8774] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 271.126536][ T8774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.249000][ T8779] bond1: (slave veth7): Enslaving as an active interface with a down link [ 272.600101][ T8807] new mount options do not match the existing superblock, will be ignored [ 272.612105][ T8807] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 272.648559][ T8807] loop5: detected capacity change from 0 to 4096 [ 272.655355][ T8807] EXT4-fs: Ignoring removed orlov option [ 272.677799][ T8807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.693339][ T8807] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz.5.996: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 272.716138][ T8807] EXT4-fs (loop5): Remounting filesystem read-only [ 272.722717][ T8807] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz.5.996: directory missing '..' [ 272.788298][ T7088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.924954][ T8811] netlink: 'syz.6.998': attribute type 1 has an invalid length. [ 272.990556][ T8811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.155557][ T8815] bond3: (slave veth7): Enslaving as an active interface with a down link [ 273.550943][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 273.661781][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 273.675477][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 273.685917][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 274.111549][ T8837] loop5: detected capacity change from 0 to 64 [ 274.352428][ T8819] non-paged memory [ 274.366284][ T8819] list_del corruption, ffff88807b30f700->prev is LIST_POISON2 (dead000000000122) [ 274.404001][ T8819] ------------[ cut here ]------------ [ 274.409871][ T8819] kernel BUG at lib/list_debug.c:61! [ 274.519766][ T8819] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 274.526745][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.6.999 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 274.536819][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 274.546869][ T8819] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 274.553894][ T8819] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 274.573493][ T8819] RSP: 0018:ffffc9000c2e7878 EFLAGS: 00010246 [ 274.579560][ T8819] RAX: 000000000000004e RBX: dead000000000122 RCX: 662a7d142316e000 [ 274.587525][ T8819] RDX: ffffc90015579000 RSI: 0000000000004c49 RDI: 0000000000004c4a [ 274.595492][ T8819] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: fffffbfff1cfa5b8 [ 274.603467][ T8819] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: dead000000000122 [ 274.611432][ T8819] R13: dffffc0000000000 R14: ffff8880653848d8 R15: ffff88807b30f700 [ 274.619404][ T8819] FS: 00007f83809476c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 274.628331][ T8819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.634913][ T8819] CR2: 000040000000e000 CR3: 000000002a564000 CR4: 00000000003526f0 [ 274.642941][ T8819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.650906][ T8819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.658870][ T8819] Call Trace: [ 274.662152][ T8819] [ 274.665077][ T8819] ? __die_body+0x5f/0xb0 [ 274.669410][ T8819] ? die+0x9e/0xc0 [ 274.673122][ T8819] ? do_trap+0x15a/0x3a0 [ 274.677359][ T8819] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 274.684120][ T8819] ? do_error_trap+0x1dc/0x2c0 [ 274.688873][ T8819] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 274.695299][ T8819] ? __pfx_do_error_trap+0x10/0x10 [ 274.700417][ T8819] ? handle_invalid_op+0x34/0x40 [ 274.705347][ T8819] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 274.711761][ T8819] ? exc_invalid_op+0x38/0x50 [ 274.716433][ T8819] ? asm_exc_invalid_op+0x1a/0x20 [ 274.721454][ T8819] ? __wake_up_klogd+0xcc/0x110 [ 274.726299][ T8819] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 274.732711][ T8819] ? __list_del_entry_valid_or_report+0x12b/0x190 [ 274.739120][ T8819] hci_chan_del+0x70/0x1b0 [ 274.743543][ T8819] l2cap_conn_put+0x70/0xe0 [ 274.748045][ T8819] l2cap_sock_shutdown+0xa8a/0x1020 [ 274.753242][ T8819] ? l2cap_sock_release+0x6c/0x1d0 [ 274.758348][ T8819] ? __pfx_lock_release+0x10/0x10 [ 274.763368][ T8819] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 274.768992][ T8819] ? bt_accept_dequeue+0x3ac/0x570 [ 274.774102][ T8819] l2cap_sock_release+0x79/0x1d0 [ 274.779034][ T8819] sock_close+0xbc/0x240 [ 274.783268][ T8819] ? __pfx_sock_close+0x10/0x10 [ 274.788128][ T8819] __fput+0x3e9/0x9f0 [ 274.792111][ T8819] task_work_run+0x24f/0x310 [ 274.796696][ T8819] ? __pfx_task_work_run+0x10/0x10 [ 274.801806][ T8819] ? finish_task_switch+0x1e5/0x870 [ 274.807001][ T8819] ? lockdep_hardirqs_on+0x99/0x150 [ 274.812196][ T8819] ? finish_task_switch+0x1e5/0x870 [ 274.817388][ T8819] get_signal+0x15f7/0x1750 [ 274.821885][ T8819] ? __pfx_get_signal+0x10/0x10 [ 274.826727][ T8819] arch_do_signal_or_restart+0x96/0x860 [ 274.832266][ T8819] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 274.838411][ T8819] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.844385][ T8819] ? schedule+0x155/0x320 [ 274.848705][ T8819] syscall_exit_to_user_mode+0xce/0x340 [ 274.854244][ T8819] do_syscall_64+0x100/0x230 [ 274.858827][ T8819] ? clear_bhb_loop+0x35/0x90 [ 274.863512][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.869414][ T8819] RIP: 0033:0x7f837fb8cde9 [ 274.873823][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.893430][ T8819] RSP: 002b:00007f8380947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 274.901845][ T8819] RAX: fffffffffffffffc RBX: 00007f837fda5fa0 RCX: 00007f837fb8cde9 [ 274.909810][ T8819] RDX: 000000000000000e RSI: 0000400000000080 RDI: 0000000000000006 [ 274.917771][ T8819] RBP: 00007f837fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 274.925730][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.933691][ T8819] R13: 0000000000000000 R14: 00007f837fda5fa0 R15: 00007fffd10af078 [ 274.941661][ T8819] [ 274.944671][ T8819] Modules linked in: [ 274.949434][ T8819] ---[ end trace 0000000000000000 ]--- [ 275.041837][ T8819] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 275.060043][ T8819] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 275.097912][ T8819] RSP: 0018:ffffc9000c2e7878 EFLAGS: 00010246 [ 275.196271][ T8819] RAX: 000000000000004e RBX: dead000000000122 RCX: 662a7d142316e000 [ 275.214522][ T8819] RDX: ffffc90015579000 RSI: 0000000000004c49 RDI: 0000000000004c4a [ 275.238518][ T8819] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: fffffbfff1cfa5b8 [ 275.250872][ T8844] new mount options do not match the existing superblock, will be ignored [ 275.261771][ T8844] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 275.346482][ T8844] loop1: detected capacity change from 0 to 4096 [ 275.354072][ T8844] EXT4-fs: Ignoring removed orlov option [ 275.364716][ T8819] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: dead000000000122 [ 275.373408][ T8819] R13: dffffc0000000000 R14: ffff8880653848d8 R15: ffff88807b30f700 [ 275.383519][ T8819] FS: 00007f83809476c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 275.393909][ T8819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.404349][ T8844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.421740][ T8819] CR2: 00007f9b21fff000 CR3: 000000002a564000 CR4: 00000000003526f0 [ 275.423612][ T8843] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #12: block 80: comm syz.1.1008: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 275.429849][ T8819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.457186][ T8819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.457267][ T8843] EXT4-fs (loop1): Remounting filesystem read-only [ 275.466634][ T8819] Kernel panic - not syncing: Fatal exception [ 275.471895][ T8819] Kernel Offset: disabled