last executing test programs: 3m44.957659026s ago: executing program 0 (id=710): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x40000000000004) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) 3m44.35714602s ago: executing program 1 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') 3m43.966509711s ago: executing program 1 (id=717): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3m43.886983225s ago: executing program 0 (id=718): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x8}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m43.521895281s ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) fallocate(r5, 0x8, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) 3m43.441743733s ago: executing program 1 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) 3m43.073927617s ago: executing program 1 (id=724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0xff, 0xe}}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 3m42.856939697s ago: executing program 1 (id=725): getgroups(0xd2d5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xfc, 0x30, 0x1, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_skbedit={0xe4, 0x1e, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0xb18dbd3406664627}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xa6, 0x6, "5aa4a900484077eb186a62ec68f8ea491c989e52db8bd1de0595a9996485b51f5e19fc7c1f567251e6d0b4aee99d1d636011ef8507eb8dc32d84cd0a3316c91437866a034d12622923bb693403f9ae203db38b4fceb8b778f95401afe086fe14f48ca0b5b712a97ec0a6e383393be21e02ab0c8e6a79c3b3358fdd2747100dbeb2f8111235e110cb6c84fe89d6eff93441794beb5722f26feee7c72d64fc786c4bb6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xfc}}, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m41.813468028s ago: executing program 1 (id=729): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x12, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21) close(0xffffffffffffffff) fallocate(r2, 0x1, 0x0, 0x1001f0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r4, 0x26, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 3m41.428351717s ago: executing program 0 (id=731): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m41.202881297s ago: executing program 2 (id=732): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0xc0000) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r1 = socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3m40.369864649s ago: executing program 2 (id=736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x519, &(0x7f0000000280)="$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") close(r5) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000040)={0x1, 0x1b5, 0xffff}) shutdown(r0, 0x2) 3m39.885380467s ago: executing program 0 (id=737): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 3m39.526862395s ago: executing program 2 (id=739): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x84, 0x2}, &(0x7f00000002c0)=0x5, 0x0, 0x9, 0x1dd6, 0x635f, 0x800, 0x1, 0x3}}], 0x58}, 0x40) 3m39.512156298s ago: executing program 4 (id=740): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x8}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m39.22706647s ago: executing program 0 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) fallocate(r5, 0x8, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) 3m39.130217299s ago: executing program 2 (id=742): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f00003d6000/0x3000)=nil, 0x3000, 0x2000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfffffe64}], 0x1, 0x0, 0x0) 3m38.722969722s ago: executing program 4 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x0, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x400f83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x3, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22c9}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0x40ffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x80000001, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0xdb2b, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x20008, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0xff, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m38.092467297s ago: executing program 4 (id=745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) 3m37.81004756s ago: executing program 4 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m37.396100627s ago: executing program 4 (id=747): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m37.393966502s ago: executing program 2 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32, @ANYBLOB="000000070000000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0) 3m36.807251428s ago: executing program 2 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x519, &(0x7f0000000280)="$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") close(r5) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000040)={0x1, 0x1b5, 0xffff}) shutdown(r0, 0x2) 3m36.561955633s ago: executing program 4 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000003b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[], 0x0) 3m36.307534259s ago: executing program 3 (id=751): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 3m36.227550989s ago: executing program 3 (id=752): r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000002700)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x2000000, 0x0) pread64(r0, &(0x7f0000000580)=""/222, 0xde, 0xb7c) 3m36.097911478s ago: executing program 3 (id=753): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x8}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m36.035263564s ago: executing program 3 (id=754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703d90008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x1000, 0xffffffffffffffff}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r4, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20000045, 0x0, 0x0) 3m31.637378752s ago: executing program 3 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 3m30.800182971s ago: executing program 3 (id=756): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) 3m26.71247791s ago: executing program 32 (id=729): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x12, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$eJzs281qE10cx/FfX56nb7aJVqutiH90o5uhjVcQSgtiQKmN+ALC1E40ZJqUTKhExHbn1q1XIBSX7gTxBrrxCly468ZlF+JIZ2KbtBGtoGOb72dz/uHML5yTcyacxczm7RdLpULgFNyaurtMvVK/tqS0utWjWFej7Y7q/9VsTZdHcx/P3bxz91o2l5uZM5vNzl/JmNnI+XePn76+8L42dOvNyNs+baTvb37OfNoY2xjf/Dr/qBhYMbBypWauLVQqNXfB92yxGJQcsxu+5waeFcuBV23pL/iV5eW6ueXF4cHlqhcE5pbrVvLqVqtYrVo396FbLJvjODY8KPxMfn1uzs0mPQr8WdVq1p2WNLGvJ7+eyIAAAECi2pz/1zj/dwrO/51g+/x/r3H/tuL8DwAAAAAAAAAAAAAAAAAAAADAYbAVhqkwDFPf2/+k6A2fsPF5QNKgpCFJxyQNSxqRlJKUlnRc0glJo5JOSjolaUzSaUlnJI03fVfSc8V+yaz/QJJTRhPu/87G+ne2phd3+6Wl5yv5lXzcxv3Zgory5WlSKX2J1rIhrmev5mYmLZLW2aXVRn51Jd/Tmp9SanvDtMtPxXlrzfdF+24nn1Fqe4PF2Zct+UzbfL8uXWzKO0rpwwNV5Gsx2pO7+WdTZtPXc3vyE9F1R51jO9qun+P8qD/OH2B/7Pl9ezXRm+zcIQX1JyXX970qBcVRKF7pnxjG4S+S/mfC37C76EmPBAAAAAAAAAAAAAAAAABwEL/7hGC4Gud/5eKk5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF7fAgAA//+tvV1C") bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21) close(0xffffffffffffffff) fallocate(r2, 0x1, 0x0, 0x1001f0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r4, 0x26, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 3m23.736269754s ago: executing program 33 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) fallocate(r5, 0x8, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) 3m21.72982567s ago: executing program 34 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x519, &(0x7f0000000280)="$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") close(r5) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000040)={0x1, 0x1b5, 0xffff}) shutdown(r0, 0x2) 3m21.238447094s ago: executing program 35 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000003b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[], 0x0) 3m15.734027116s ago: executing program 36 (id=756): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) 35.64269418s ago: executing program 6 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r6 = signalfd4(r0, &(0x7f0000000380)={[0x8]}, 0x8, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltfilter={0x4c, 0x2d, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xf}, {0x7, 0xfff2}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xcf}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 35.327399473s ago: executing program 6 (id=764): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x8}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.59003546s ago: executing program 6 (id=765): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 25.879005401s ago: executing program 6 (id=766): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x233473a1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.749623494s ago: executing program 6 (id=767): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 24.593184146s ago: executing program 6 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_SENDMSG={0x9, 0x71, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001400), 0x0, &(0x7f000001b000)=[{0x10, 0x10b, 0x1}, {0x10, 0x111, 0xa7}], 0x20}, 0x0, 0x4, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) lseek(r1, 0x0, 0x4) 0s ago: executing program 37 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_SENDMSG={0x9, 0x71, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001400), 0x0, &(0x7f000001b000)=[{0x10, 0x10b, 0x1}, {0x10, 0x111, 0xa7}], 0x20}, 0x0, 0x4, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) lseek(r1, 0x0, 0x4) kernel console output (not intermixed with test programs): nterface: batadv_slave_1 [ 92.465254][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.492119][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.504047][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.511490][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.538269][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.552949][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.560031][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.586898][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.671968][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.678963][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.705490][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.718381][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.727060][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.753469][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.894930][ T5842] hsr_slave_0: entered promiscuous mode [ 92.902068][ T5842] hsr_slave_1: entered promiscuous mode [ 92.909043][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.915103][ T5842] Cannot create hsr debugfs directory [ 92.926384][ T5855] hsr_slave_0: entered promiscuous mode [ 92.933774][ T5855] hsr_slave_1: entered promiscuous mode [ 92.940091][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 92.945846][ T5855] Cannot create hsr debugfs directory [ 92.972146][ T5847] hsr_slave_0: entered promiscuous mode [ 92.978931][ T5847] hsr_slave_1: entered promiscuous mode [ 92.986255][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.992384][ T5847] Cannot create hsr debugfs directory [ 93.149489][ T5856] hsr_slave_0: entered promiscuous mode [ 93.156230][ T5856] hsr_slave_1: entered promiscuous mode [ 93.163827][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 93.169716][ T5856] Cannot create hsr debugfs directory [ 93.588181][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.638679][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.651225][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.665524][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.754099][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.774074][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.792542][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.816433][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.890345][ T5850] Bluetooth: hci0: command tx timeout [ 93.918892][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.935840][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.947129][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.964053][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.971252][ T5850] Bluetooth: hci2: command tx timeout [ 93.973357][ T5848] Bluetooth: hci1: command tx timeout [ 94.051223][ T5848] Bluetooth: hci3: command tx timeout [ 94.087380][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.116000][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.130540][ T5848] Bluetooth: hci4: command tx timeout [ 94.137315][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.156178][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.202476][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.275625][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.328499][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.342537][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.355815][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.369242][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.387435][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.404465][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.411881][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.424016][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.467034][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.474232][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.497620][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.510710][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.517887][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.561743][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.568901][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.607238][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.635334][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.642543][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.665300][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.672504][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.885992][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.964612][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.007621][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.014866][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.058462][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.072376][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.079598][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.238826][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.269295][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.309332][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.316595][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.407218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.414508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.465269][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.557587][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.605109][ T5843] veth0_vlan: entered promiscuous mode [ 95.644875][ T5843] veth1_vlan: entered promiscuous mode [ 95.753753][ T5855] veth0_vlan: entered promiscuous mode [ 95.780971][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.816656][ T5855] veth1_vlan: entered promiscuous mode [ 95.861886][ T5843] veth0_macvtap: entered promiscuous mode [ 95.894649][ T5842] veth0_vlan: entered promiscuous mode [ 95.926311][ T5843] veth1_macvtap: entered promiscuous mode [ 95.958234][ T5855] veth0_macvtap: entered promiscuous mode [ 95.976116][ T5848] Bluetooth: hci0: command tx timeout [ 95.986482][ T5842] veth1_vlan: entered promiscuous mode [ 95.999473][ T5855] veth1_macvtap: entered promiscuous mode [ 96.050399][ T5848] Bluetooth: hci1: command tx timeout [ 96.056623][ T5848] Bluetooth: hci2: command tx timeout [ 96.084710][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.118713][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.140028][ T5848] Bluetooth: hci3: command tx timeout [ 96.166535][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.211193][ T5848] Bluetooth: hci4: command tx timeout [ 96.228065][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.254514][ T3018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.269432][ T3018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.302065][ T5842] veth0_macvtap: entered promiscuous mode [ 96.314396][ T3018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324922][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.357598][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.365112][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.375621][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.386683][ T5842] veth1_macvtap: entered promiscuous mode [ 96.407997][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.417037][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.489084][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.543405][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.596297][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.608088][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.631262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.639330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.647530][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.657051][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.683320][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.695649][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.764870][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.775923][ T5847] veth0_vlan: entered promiscuous mode [ 96.783337][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.786324][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.807683][ T5847] veth1_vlan: entered promiscuous mode [ 96.813423][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.843195][ T5856] veth0_vlan: entered promiscuous mode [ 96.916977][ T5856] veth1_vlan: entered promiscuous mode [ 96.946630][ T5847] veth0_macvtap: entered promiscuous mode [ 96.987764][ T5847] veth1_macvtap: entered promiscuous mode [ 96.988973][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.021308][ T5856] veth0_macvtap: entered promiscuous mode [ 97.047755][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.052979][ T5856] veth1_macvtap: entered promiscuous mode [ 97.066835][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.074580][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.163382][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.246360][ T5961] loop2: detected capacity change from 0 to 512 [ 97.261663][ T5961] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.276234][ T5961] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.282767][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.301076][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.309837][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312252][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.342103][ T5962] lo speed is unknown, defaulting to 1000 [ 97.362259][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.383529][ T5961] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.405419][ T5959] loop1: detected capacity change from 0 to 512 [ 97.420774][ T5937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.436911][ T5961] EXT4-fs (loop2): 1 truncate cleaned up [ 97.444513][ T5962] lo speed is unknown, defaulting to 1000 [ 97.448011][ T5937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.474030][ T5959] EXT4-fs: Ignoring removed orlov option [ 97.479812][ T5959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.487460][ T5959] ext4: Unknown parameter 'fsname' [ 97.494398][ T5961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.500506][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.588344][ T5962] lo speed is unknown, defaulting to 1000 [ 97.635403][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.658162][ T5962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.668714][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.702511][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.713266][ T5962] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.721447][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.915044][ T5962] lo speed is unknown, defaulting to 1000 [ 97.944409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.957336][ T5962] lo speed is unknown, defaulting to 1000 [ 97.966548][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.075916][ T5848] Bluetooth: hci0: command tx timeout [ 98.140417][ T5848] Bluetooth: hci2: command tx timeout [ 98.146197][ T5850] Bluetooth: hci1: command tx timeout [ 98.210250][ T5850] Bluetooth: hci3: command tx timeout [ 98.300662][ T5850] Bluetooth: hci4: command tx timeout [ 98.925526][ T5962] lo speed is unknown, defaulting to 1000 [ 99.000682][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.028182][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.047951][ T5962] lo speed is unknown, defaulting to 1000 [ 99.063078][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.117882][ T5962] lo speed is unknown, defaulting to 1000 [ 99.261369][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.269248][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.416501][ T5974] loop2: detected capacity change from 0 to 4096 [ 99.429131][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.460288][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.491458][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.582311][ T5984] program syz.4.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.646385][ T5974] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.778661][ T5974] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 99.955274][ T5972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.994245][ T5972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.047876][ T5990] loop0: detected capacity change from 0 to 512 [ 100.089127][ T5993] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 100.107839][ T5990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.148300][ T5990] EXT4-fs (loop0): 1 truncate cleaned up [ 100.152870][ T5972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.172483][ T5972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.180202][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.183162][ T5996] process 'syz.2.11' launched './file0' with NULL argv: empty string added [ 100.215752][ T5972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.232813][ T5972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.257351][ T5972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.287239][ T5972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.304273][ T30] audit: type=1326 audit(1752777216.687:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 100.341122][ T5994] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 100.363301][ T5972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.378616][ T30] audit: type=1326 audit(1752777216.747:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 100.416253][ T5972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.422524][ T5972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.435326][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.458393][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 100.481693][ T5972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.529052][ T5972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.539508][ T5996] veth3: entered promiscuous mode [ 100.560744][ T5972] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.579165][ T30] audit: type=1326 audit(1752777216.957:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 100.608215][ T30] audit: type=1326 audit(1752777216.987:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 100.629339][ T5972] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.666921][ T30] audit: type=1326 audit(1752777216.987:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 100.698420][ T30] audit: type=1326 audit(1752777216.987:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 100.725344][ T30] audit: type=1326 audit(1752777217.037:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 100.777910][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 100.848038][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 100.880426][ T30] audit: type=1326 audit(1752777217.037:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 101.004460][ T30] audit: type=1326 audit(1752777217.037:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 101.102739][ T30] audit: type=1326 audit(1752777217.047:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 101.143120][ T6008] loop2: detected capacity change from 0 to 1024 [ 101.179090][ T6008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.266706][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.377836][ T6008] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.17: Abort forced by user [ 101.393817][ T6017] program syz.4.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.413325][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.436227][ T6008] EXT4-fs (loop2): Remounting filesystem read-only [ 101.463782][ T6008] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 101.657249][ T6022] loop3: detected capacity change from 0 to 4096 [ 101.672649][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.726469][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.771415][ T6025] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 101.811565][ T6030] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 101.836021][ T6022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.000915][ T6022] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 102.075641][ T6039] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 102.121936][ T6040] loop4: detected capacity change from 0 to 512 [ 102.211054][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.284331][ T6040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.302831][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.358599][ T6040] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.425296][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.451443][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.461913][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 102.540339][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.728861][ T6057] program syz.3.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.946348][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.066996][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 103.159304][ T6069] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.282142][ T6068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.494813][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.866187][ T6087] loop2: detected capacity change from 0 to 1024 [ 103.908443][ T6087] EXT4-fs: Ignoring removed orlov option [ 103.921750][ T6068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.979178][ T6087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.166570][ T6068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.295439][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.372928][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.467908][ T6068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.531472][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.610742][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.661880][ T6112] loop3: detected capacity change from 0 to 128 [ 104.689272][ T6107] loop1: detected capacity change from 0 to 512 [ 104.760719][ T6115] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 104.772113][ T6107] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 104.794596][ T6112] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.854125][ T6112] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.886482][ T5937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.990879][ T3018] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.015605][ T3018] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.096854][ T6112] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.51: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 105.142975][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.362943][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.386479][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.544225][ T6130] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 105.595824][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.753070][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 105.791510][ T6132] bond1: entered promiscuous mode [ 105.797615][ T6132] bond1: entered allmulticast mode [ 105.817770][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.064535][ T6153] loop0: detected capacity change from 0 to 512 [ 106.103714][ T6153] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 106.162789][ T6132] bond1 (unregistering): Released all slaves [ 106.376662][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.451046][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.610124][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.690202][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.738012][ T6167] vlan2: entered promiscuous mode [ 106.762532][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 106.774741][ T6167] vlan2: entered allmulticast mode [ 106.797788][ T6167] hsr_slave_1: entered allmulticast mode [ 106.866454][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 106.929104][ T6180] loop3: detected capacity change from 0 to 1024 [ 106.980707][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.054305][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 107.054324][ T30] audit: type=1800 audit(1752777223.437:84): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.064466][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 107.237272][ T6189] sd 0:0:1:0: device reset [ 107.412603][ T6186] can0: slcan on ttyS3. [ 107.571214][ T6185] can0 (unregistered): slcan off ttyS3. [ 108.152491][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.612014][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 108.732350][ T6235] sd 0:0:1:0: device reset [ 108.919706][ T6240] loop1: detected capacity change from 0 to 512 [ 109.047849][ T6240] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 109.066048][ T6240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.095865][ T6240] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 109.107519][ T6240] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.135804][ T6240] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 109.212469][ T6240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.93: bg 0: block 40: padding at end of block bitmap is not set [ 109.272705][ T6240] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.318203][ T6240] EXT4-fs (loop1): 1 truncate cleaned up [ 109.363914][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.453782][ T6232] can0: slcan on ttyS3. [ 109.586010][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.672147][ T6232] can0 (unregistered): slcan off ttyS3. [ 110.201338][ T6276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.286641][ T6267] capability: warning: `syz.4.101' uses 32-bit capabilities (legacy support in use) [ 110.291187][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 110.320546][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 110.349742][ T6282] loop1: detected capacity change from 0 to 128 [ 110.359292][ T6280] syz_tun: entered promiscuous mode [ 110.430041][ T6280] syz_tun: left promiscuous mode [ 110.507033][ T6287] loop2: detected capacity change from 0 to 512 [ 110.509410][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.513538][ T30] audit: type=1800 audit(1752777226.877:85): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.106" name="file2" dev="loop1" ino=1048600 res=0 errno=0 [ 110.537629][ T6282] FAT-fs (loop1): Filesystem has been set read-only [ 110.608472][ T6282] syz.1.106: attempt to access beyond end of device [ 110.608472][ T6282] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 110.631152][ T6287] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.666227][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.676676][ T6282] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 110.719372][ T6287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.764579][ T6291] syz.1.106: attempt to access beyond end of device [ 110.764579][ T6291] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 110.794259][ T6287] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 110.808375][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 110.850627][ T6287] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.851007][ T6291] Buffer I/O error on dev loop1, logical block 2065, async page read [ 110.887192][ T6294] vlan0: entered allmulticast mode [ 110.921464][ T6291] syz.1.106: attempt to access beyond end of device [ 110.921464][ T6291] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 110.931517][ T6294] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 110.939834][ T6291] Buffer I/O error on dev loop1, logical block 2066, async page read [ 110.958715][ T6291] syz.1.106: attempt to access beyond end of device [ 110.958715][ T6291] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 111.001003][ T6291] Buffer I/O error on dev loop1, logical block 2067, async page read [ 111.009067][ T6287] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 111.021004][ T6291] syz.1.106: attempt to access beyond end of device [ 111.021004][ T6291] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 111.036612][ T6291] Buffer I/O error on dev loop1, logical block 2068, async page read [ 111.049041][ T6291] syz.1.106: attempt to access beyond end of device [ 111.049041][ T6291] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 111.068513][ T6291] Buffer I/O error on dev loop1, logical block 2069, async page read [ 111.083864][ T6287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.108: bg 0: block 40: padding at end of block bitmap is not set [ 111.099778][ T6302] can0: slcan on ttyS3. [ 111.116002][ T6302] sd 0:0:1:0: device reset [ 111.121932][ T6291] syz.1.106: attempt to access beyond end of device [ 111.121932][ T6291] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 111.137310][ T6291] Buffer I/O error on dev loop1, logical block 2070, async page read [ 111.194381][ T6287] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 111.204160][ T6291] syz.1.106: attempt to access beyond end of device [ 111.204160][ T6291] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 111.246558][ T6287] EXT4-fs (loop2): 1 truncate cleaned up [ 111.255036][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.272660][ T6299] can0 (unregistered): slcan off ttyS3. [ 111.302711][ T6291] Buffer I/O error on dev loop1, logical block 2071, async page read [ 111.350315][ T6291] syz.1.106: attempt to access beyond end of device [ 111.350315][ T6291] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 111.431318][ T6291] Buffer I/O error on dev loop1, logical block 2072, async page read [ 111.611686][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.407784][ T6342] can0: slcan on ttyS3. [ 112.499534][ T6342] sd 0:0:1:0: device reset [ 112.703436][ T6341] can0 (unregistered): slcan off ttyS3. [ 112.985846][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 113.188763][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 113.368710][ T6383] loop4: detected capacity change from 0 to 1024 [ 113.416106][ T6383] ======================================================= [ 113.416106][ T6383] WARNING: The mand mount option has been deprecated and [ 113.416106][ T6383] and is ignored by this kernel. Remove the mand [ 113.416106][ T6383] option from the mount to silence this warning. [ 113.416106][ T6383] ======================================================= [ 113.502571][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.669772][ T6393] 9pnet_fd: Insufficient options for proto=fd [ 114.019611][ T6375] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.169254][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.630458][ T6420] can0: slcan on ttyS3. [ 114.669771][ T6420] sd 0:0:1:0: device reset [ 114.713986][ T6424] 9pnet_fd: Insufficient options for proto=fd [ 115.048390][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 115.092012][ T6419] can0 (unregistered): slcan off ttyS3. [ 115.219492][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 115.382387][ T6448] loop2: detected capacity change from 0 to 1024 [ 115.484419][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.981974][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.240264][ T30] audit: type=1326 audit(1752777232.607:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.343974][ T30] audit: type=1326 audit(1752777232.617:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.417549][ T30] audit: type=1326 audit(1752777232.617:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.535928][ T30] audit: type=1326 audit(1752777232.647:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.599331][ T6486] can0: slcan on ttyS3. [ 116.628121][ T30] audit: type=1326 audit(1752777232.647:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.660210][ T6486] sd 0:0:1:0: device reset [ 116.689574][ T30] audit: type=1326 audit(1752777232.647:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.717255][ T30] audit: type=1326 audit(1752777232.647:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.740715][ T30] audit: type=1326 audit(1752777232.647:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.763192][ T30] audit: type=1326 audit(1752777232.647:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d018e929 code=0x7ffc0000 [ 116.888368][ T6483] can0 (unregistered): slcan off ttyS3. [ 116.897235][ T30] audit: type=1326 audit(1752777232.647:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81d0190847 code=0x7ffc0000 [ 117.140457][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 117.149588][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 117.246292][ T6502] syz_tun: entered promiscuous mode [ 117.271349][ T6502] syz_tun: left promiscuous mode [ 120.955676][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 120.964793][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 122.435831][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 122.435850][ T30] audit: type=1326 audit(1752777238.817:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.374208][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.391753][ T6603] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 123.411014][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.418486][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.459085][ T6607] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.476182][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.486173][ T30] audit: type=1326 audit(1752777239.857:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.494362][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.523561][ T6607] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 123.538444][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.555081][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.576849][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.595503][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.604959][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.610173][ T30] audit: type=1326 audit(1752777239.857:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.617960][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.676755][ T92] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.710425][ T30] audit: type=1326 audit(1752777239.857:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710481][ T30] audit: type=1326 audit(1752777239.857:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710527][ T30] audit: type=1326 audit(1752777239.857:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710566][ T30] audit: type=1326 audit(1752777239.857:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710601][ T30] audit: type=1326 audit(1752777239.857:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710634][ T30] audit: type=1326 audit(1752777239.857:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.710668][ T30] audit: type=1326 audit(1752777239.857:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 123.795009][ T92] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 126.255185][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 126.330655][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 126.394867][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 126.469641][ T6637] syz_tun: entered promiscuous mode [ 126.506415][ T6637] syz_tun: left promiscuous mode [ 126.537211][ T6645] loop3: detected capacity change from 0 to 1024 [ 126.616881][ T6645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.664607][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 126.669032][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.683033][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 126.696223][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 126.723588][ T6644] vlan0: entered allmulticast mode [ 126.728949][ T6644] bond1: entered allmulticast mode [ 126.998845][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.578506][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 127.578526][ T30] audit: type=1326 audit(1752777243.957:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 127.652515][ T30] audit: type=1326 audit(1752777243.957:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 127.715044][ T30] audit: type=1326 audit(1752777243.957:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 127.818816][ T30] audit: type=1326 audit(1752777243.967:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 127.928909][ T30] audit: type=1326 audit(1752777244.307:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.008037][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 128.020417][ T30] audit: type=1326 audit(1752777244.307:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.047637][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 128.100199][ T30] audit: type=1326 audit(1752777244.307:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.188807][ T30] audit: type=1326 audit(1752777244.307:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.211579][ T30] audit: type=1326 audit(1752777244.307:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.234372][ T30] audit: type=1326 audit(1752777244.307:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 128.255462][ T6688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.398623][ T6688] loop0: detected capacity change from 0 to 1024 [ 128.434375][ T6695] vlan0: entered allmulticast mode [ 128.474381][ T6695] bond1: entered allmulticast mode [ 128.551700][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.095062][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.631784][ T6727] __nla_validate_parse: 1 callbacks suppressed [ 129.631805][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 129.679977][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 129.788131][ T6727] syz_tun: entered promiscuous mode [ 129.846215][ T6727] syz_tun: left promiscuous mode [ 129.884773][ T6733] loop2: detected capacity change from 0 to 512 [ 130.034589][ T6733] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.259: dx entry: limit 0 != root limit 125 [ 130.130024][ T6733] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.259: Corrupt directory, running e2fsck is recommended [ 130.177243][ T6733] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 130.231111][ T6733] EXT4-fs error (device loop2): ext4_iget_extra_inode:5103: inode #15: comm syz.2.259: corrupted in-inode xattr: invalid ea_ino [ 130.307504][ T6733] EXT4-fs (loop2): Remounting filesystem read-only [ 130.354514][ T6733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.470227][ T6733] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.259: dx entry: limit 0 != root limit 125 [ 130.497718][ T6733] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.259: Corrupt directory, running e2fsck is recommended [ 130.737914][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.772715][ T10] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 131.353586][ T6739] loop3: detected capacity change from 0 to 8192 [ 131.536750][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.554537][ T10] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 131.609271][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.636127][ T10] usb 4-1: can't read configurations, error -71 [ 131.816572][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 131.860111][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 132.007248][ T6767] loop2: detected capacity change from 0 to 512 [ 132.198948][ T6767] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 132.227984][ T6767] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.255386][ T6773] Zero length message leads to an empty skb [ 132.299836][ T6767] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.357266][ T6767] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 132.367347][ T6767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.275: bg 0: block 40: padding at end of block bitmap is not set [ 132.435298][ T6767] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 132.446046][ T6767] EXT4-fs (loop2): 1 truncate cleaned up [ 132.459843][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.508833][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 132.525389][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 132.617973][ T6775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.681660][ T6784] loop1: detected capacity change from 0 to 1024 [ 132.722551][ T6779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.748686][ T6781] vlan0: entered allmulticast mode [ 132.806589][ T6781] bond1: entered allmulticast mode [ 132.847725][ T6784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.082980][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.093619][ T6795] tipc: Started in network mode [ 133.093680][ T6795] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 133.093886][ T6795] tipc: Enabled bearer , priority 0 [ 133.129448][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.137926][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211763][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.294410][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 133.294429][ T30] audit: type=1326 audit(1752777249.677:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.339086][ T30] audit: type=1326 audit(1752777249.707:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.362986][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 133.372318][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 133.388036][ T30] audit: type=1326 audit(1752777249.707:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.494777][ T30] audit: type=1326 audit(1752777249.707:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.534955][ T30] audit: type=1326 audit(1752777249.707:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.559539][ T30] audit: type=1326 audit(1752777249.707:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.582521][ T30] audit: type=1326 audit(1752777249.707:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.606037][ T30] audit: type=1326 audit(1752777249.707:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.616403][ T6806] loop1: detected capacity change from 0 to 512 [ 133.634567][ T30] audit: type=1326 audit(1752777249.707:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 133.634618][ T30] audit: type=1326 audit(1752777249.707:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b90847 code=0x7ffc0000 [ 133.687795][ T6806] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 134.101387][ T5970] tipc: Node number set to 11578026 [ 134.160553][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 134.206819][ T6836] loop2: detected capacity change from 0 to 1024 [ 134.267450][ T6836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.497673][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.091834][ T6863] loop2: detected capacity change from 0 to 512 [ 135.120244][ T6863] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 135.533894][ T6879] loop0: detected capacity change from 0 to 164 [ 135.545687][ T10] hid_parser_main: 25 callbacks suppressed [ 135.545714][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.582090][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.589554][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.625472][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.651563][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.670193][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.698068][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.733873][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.749999][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.779152][ T10] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 135.869304][ T10] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 136.579243][ T6894] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.579243][ T6894] The task syz.1.319 (6894) triggered the difference, watch for misbehavior. [ 137.527540][ T6908] loop3: detected capacity change from 0 to 256 [ 137.680644][ T6911] netlink: 14 bytes leftover after parsing attributes in process `syz.3.325'. [ 137.787323][ T6911] hsr_slave_0: left promiscuous mode [ 137.814536][ T6911] hsr_slave_1: left promiscuous mode [ 138.550311][ T92] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 138.731589][ T6942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.771509][ T6942] batadv_slave_0: entered promiscuous mode [ 138.780974][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 138.802672][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.870187][ T6942] batadv_slave_0 (unregistering): left promiscuous mode [ 138.877468][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.984614][ T6946] loop3: detected capacity change from 0 to 256 [ 139.016249][ T6946] FAT-fs (loop3): Directory bread(block 1285) failed [ 139.047206][ T6946] FAT-fs (loop3): Directory bread(block 1285) failed [ 139.079627][ T6946] FAT-fs (loop3): Directory bread(block 1285) failed [ 139.112831][ T6946] FAT-fs (loop3): Directory bread(block 1285) failed [ 140.009242][ T6963] loop0: detected capacity change from 0 to 256 [ 140.247487][ T6965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.345'. [ 140.380064][ T6965] hsr_slave_0: left promiscuous mode [ 140.493901][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 140.555034][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 140.587687][ T6969] syz_tun: entered promiscuous mode [ 140.610130][ T6969] syz_tun: left promiscuous mode [ 143.183587][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 143.274611][ T7034] loop0: detected capacity change from 0 to 512 [ 143.310799][ T7032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.377072][ T7034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.474329][ T7034] EXT4-fs (loop0): 1 truncate cleaned up [ 143.504371][ T7034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.577226][ T7034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.651785][ T7040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.824897][ T7045] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 144.105897][ T7040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.323305][ T7040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.533399][ T7040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.789278][ T2992] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.820171][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.839594][ T7065] loop0: detected capacity change from 0 to 256 [ 144.891036][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.965271][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.198247][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 145.310318][ T7067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.789822][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 145.933628][ T7079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.003772][ T7082] loop0: detected capacity change from 0 to 1024 [ 146.022549][ T7081] vlan0: entered allmulticast mode [ 146.070054][ T7081] bond3: entered allmulticast mode [ 146.093463][ T7082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.859601][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.931832][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 147.142806][ T7102] loop1: detected capacity change from 0 to 512 [ 147.159272][ T7104] batadv_slave_0: entered promiscuous mode [ 147.186245][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 147.206913][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.234321][ T7102] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.234829][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 147.254496][ T7102] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.277862][ T7102] __quota_error: 40 callbacks suppressed [ 147.277884][ T7102] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 147.306977][ T7104] batadv_slave_0 (unregistering): left promiscuous mode [ 147.314645][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.337471][ T7102] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.358034][ T7102] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 147.368116][ T7102] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.397: bg 0: block 40: padding at end of block bitmap is not set [ 147.395838][ T7102] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 147.412781][ T7102] EXT4-fs (loop1): 1 truncate cleaned up [ 147.454246][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.475065][ T7106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.674737][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.831488][ T7128] loop1: detected capacity change from 0 to 512 [ 147.856692][ T7128] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 148.089449][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 148.373927][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'. [ 148.441980][ T7144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.766006][ T7156] loop3: detected capacity change from 0 to 512 [ 148.830938][ T7156] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.859553][ T7156] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.900359][ T7156] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 148.920053][ T7156] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.965158][ T7156] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 149.005883][ T7156] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.417: bg 0: block 40: padding at end of block bitmap is not set [ 149.040656][ T7167] loop4: detected capacity change from 0 to 512 [ 149.067216][ T7156] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 149.090689][ T7167] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 149.094023][ T7156] EXT4-fs (loop3): 1 truncate cleaned up [ 149.108803][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.122359][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 149.153315][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 149.185409][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 149.217239][ T7170] syz_tun: entered promiscuous mode [ 149.271387][ T7170] syz_tun: left promiscuous mode [ 149.417721][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.468727][ T7181] loop4: detected capacity change from 0 to 512 [ 149.538723][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.577507][ T7181] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.636085][ T7189] batadv_slave_0: entered promiscuous mode [ 149.643651][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 149.678252][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 149.699537][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 149.741548][ T7188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.749204][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.787947][ T7189] batadv_slave_0 (unregistering): left promiscuous mode [ 149.795446][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.907043][ T7188] vlan0: entered allmulticast mode [ 149.944212][ T7188] bond1: entered allmulticast mode [ 150.074477][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.118904][ T30] audit: type=1326 audit(1752777266.497:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.183900][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 150.183927][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 150.184661][ T30] audit: type=1326 audit(1752777266.527:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184713][ T30] audit: type=1326 audit(1752777266.527:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184760][ T30] audit: type=1326 audit(1752777266.537:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184807][ T30] audit: type=1326 audit(1752777266.537:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184872][ T30] audit: type=1326 audit(1752777266.537:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184921][ T30] audit: type=1326 audit(1752777266.537:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.184968][ T30] audit: type=1326 audit(1752777266.537:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f106278e929 code=0x7ffc0000 [ 150.209720][ T7213] loop0: detected capacity change from 0 to 1024 [ 150.210764][ T7213] EXT4-fs: Ignoring removed orlov option [ 150.362125][ T7213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.416898][ T7217] loop3: detected capacity change from 0 to 512 [ 150.453867][ T7217] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 150.567992][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 150.814225][ T7230] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.070582][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.376039][ T7251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.487144][ T7256] vlan0: entered allmulticast mode [ 151.499499][ T7256] bond5: entered allmulticast mode [ 153.635475][ T7268] __nla_validate_parse: 4 callbacks suppressed [ 153.635493][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 153.997659][ T7278] loop2: detected capacity change from 0 to 256 [ 154.072581][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 154.180904][ T7281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.227304][ T7283] vlan0: entered allmulticast mode [ 154.245837][ T7279] loop3: detected capacity change from 0 to 1024 [ 154.256921][ T7283] bond3: entered allmulticast mode [ 154.361621][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.510113][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.466'. [ 154.519878][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.466'. [ 154.540444][ T7299] syz_tun: entered promiscuous mode [ 154.556562][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.575151][ T7299] syz_tun: left promiscuous mode [ 157.009284][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 158.943525][ T7358] loop4: detected capacity change from 0 to 256 [ 159.889061][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 159.929009][ T7358] FAT-fs (loop4): Directory bread(block 64) failed [ 159.950707][ T7358] FAT-fs (loop4): Directory bread(block 65) failed [ 159.957420][ T7358] FAT-fs (loop4): Directory bread(block 66) failed [ 160.034202][ T7367] loop2: detected capacity change from 0 to 256 [ 160.040953][ T7358] FAT-fs (loop4): Directory bread(block 67) failed [ 160.069233][ T7358] FAT-fs (loop4): Directory bread(block 68) failed [ 160.104832][ T7358] FAT-fs (loop4): Directory bread(block 69) failed [ 160.145364][ T7358] FAT-fs (loop4): Directory bread(block 70) failed [ 160.194744][ T7358] FAT-fs (loop4): Directory bread(block 71) failed [ 160.237522][ T7358] FAT-fs (loop4): Directory bread(block 72) failed [ 160.295237][ T7358] FAT-fs (loop4): Directory bread(block 73) failed [ 160.803351][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 160.803370][ T30] audit: type=1326 audit(1752777277.187:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 160.836802][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 160.853977][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 160.882839][ T30] audit: type=1326 audit(1752777277.187:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 160.924915][ T30] audit: type=1326 audit(1752777277.187:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 160.987959][ T30] audit: type=1326 audit(1752777277.187:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.044405][ T30] audit: type=1326 audit(1752777277.187:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.098994][ T30] audit: type=1326 audit(1752777277.187:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.126663][ T30] audit: type=1326 audit(1752777277.187:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.156392][ T30] audit: type=1326 audit(1752777277.187:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.184420][ T7394] loop3: detected capacity change from 0 to 2048 [ 161.187981][ T30] audit: type=1326 audit(1752777277.187:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.217785][ T30] audit: type=1326 audit(1752777277.187:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 161.273436][ T7394] loop3: p1 < > p4 [ 161.280686][ T7395] loop2: detected capacity change from 0 to 2048 [ 161.285505][ T7394] loop3: p4 size 8388608 extends beyond EOD, truncated [ 161.315308][ T7395] loop2: p1 < > p4 [ 161.325178][ T7395] loop2: p4 size 8388608 extends beyond EOD, truncated [ 161.473634][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 161.509750][ T7403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.526551][ T7403] vlan1: entered allmulticast mode [ 161.531845][ T7403] bond2: entered allmulticast mode [ 161.594106][ T7406] loop2: detected capacity change from 0 to 1024 [ 161.640283][ T7406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.662631][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 161.838160][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.010324][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 162.053857][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 162.117522][ T7432] tipc: Enabling of bearer rejected, failed to enable media [ 162.257117][ T7438] loop3: detected capacity change from 0 to 256 [ 162.303590][ T7437] loop4: detected capacity change from 0 to 2048 [ 162.370583][ T7437] loop4: p1 < > p4 [ 162.376342][ T7437] loop4: p4 size 8388608 extends beyond EOD, truncated [ 162.503169][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 162.658057][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 162.691759][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.810472][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.938273][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 163.754210][ T7489] xt_hashlimit: size too large, truncated to 1048576 [ 166.372462][ T7535] __nla_validate_parse: 3 callbacks suppressed [ 166.372482][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 167.087300][ T7549] loop0: detected capacity change from 0 to 1024 [ 167.182643][ T7549] EXT4-fs: Invalid want_extra_isize 0 [ 167.354706][ T7555] loop2: detected capacity change from 0 to 256 [ 167.466453][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 167.549140][ T7555] FAT-fs (loop2): Directory bread(block 64) failed [ 167.585359][ T7555] FAT-fs (loop2): Directory bread(block 65) failed [ 167.606829][ T7555] FAT-fs (loop2): Directory bread(block 66) failed [ 167.633371][ T7555] FAT-fs (loop2): Directory bread(block 67) failed [ 167.679619][ T7555] FAT-fs (loop2): Directory bread(block 68) failed [ 167.715894][ T7555] FAT-fs (loop2): Directory bread(block 69) failed [ 167.771601][ T7555] FAT-fs (loop2): Directory bread(block 70) failed [ 167.811250][ T7555] FAT-fs (loop2): Directory bread(block 71) failed [ 167.837056][ T7555] FAT-fs (loop2): Directory bread(block 72) failed [ 167.887773][ T7555] FAT-fs (loop2): Directory bread(block 73) failed [ 168.433198][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 169.127369][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 169.127388][ T30] audit: type=1326 audit(1752777285.507:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.172434][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 169.217835][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 169.281576][ T30] audit: type=1326 audit(1752777285.537:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.404365][ T30] audit: type=1326 audit(1752777285.537:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.469077][ T7586] loop2: detected capacity change from 0 to 4096 [ 169.564189][ T30] audit: type=1326 audit(1752777285.537:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.587449][ T30] audit: type=1326 audit(1752777285.537:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.610079][ T30] audit: type=1326 audit(1752777285.537:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.642137][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 169.695760][ T7586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.725606][ T30] audit: type=1326 audit(1752777285.537:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 169.796624][ T30] audit: type=1326 audit(1752777285.537:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd70d790847 code=0x7ffc0000 [ 169.819113][ T30] audit: type=1326 audit(1752777285.537:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd70d7907bc code=0x7ffc0000 [ 169.842078][ T30] audit: type=1326 audit(1752777285.547:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd70d7906f4 code=0x7ffc0000 [ 169.950453][ T7586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.231167][ T7604] loop1: detected capacity change from 0 to 2048 [ 170.251102][ T7604] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.329938][ T7604] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 170.598700][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 170.689586][ T7614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.756668][ T7619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.764303][ T7619] IPv6: NLM_F_CREATE should be set when creating new route [ 170.797946][ T7614] vlan1: entered allmulticast mode [ 170.827018][ T7614] bond3: entered allmulticast mode [ 170.907658][ T7616] loop2: detected capacity change from 0 to 1024 [ 170.947289][ T7616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.022986][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 171.054795][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 172.056501][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.137705][ T7647] loop1: detected capacity change from 0 to 256 [ 172.193625][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'. [ 172.246186][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'. [ 172.267054][ T7647] FAT-fs (loop1): Directory bread(block 64) failed [ 172.310282][ T7647] FAT-fs (loop1): Directory bread(block 65) failed [ 172.320176][ T7647] FAT-fs (loop1): Directory bread(block 66) failed [ 172.334370][ T7647] FAT-fs (loop1): Directory bread(block 67) failed [ 172.347068][ T7647] FAT-fs (loop1): Directory bread(block 68) failed [ 172.373036][ T7647] FAT-fs (loop1): Directory bread(block 69) failed [ 172.400375][ T7649] syz_tun: entered promiscuous mode [ 172.402743][ T7647] FAT-fs (loop1): Directory bread(block 70) failed [ 172.459379][ T7647] FAT-fs (loop1): Directory bread(block 71) failed [ 172.492875][ T7647] FAT-fs (loop1): Directory bread(block 72) failed [ 172.511599][ T7649] syz_tun: left promiscuous mode [ 172.546174][ T7647] FAT-fs (loop1): Directory bread(block 73) failed [ 172.563926][ T7653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.571275][ T7653] IPv6: NLM_F_CREATE should be set when creating new route [ 173.190166][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 173.219085][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 173.452393][ T7672] loop2: detected capacity change from 0 to 512 [ 173.516181][ T7672] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 173.550317][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 173.702221][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 173.830481][ T7672] EXT4-fs (loop2): 1 truncate cleaned up [ 173.878512][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.955425][ T7672] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.600: Logical block already allocated [ 173.972588][ T7672] EXT4-fs (loop2): Remounting filesystem read-only [ 174.017939][ T7673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.082440][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.167825][ T7675] vlan0: entered allmulticast mode [ 174.184776][ T7675] bond4: entered allmulticast mode [ 174.346967][ T7682] loop1: detected capacity change from 0 to 256 [ 174.469310][ T7682] FAT-fs (loop1): Directory bread(block 64) failed [ 174.504842][ T7682] FAT-fs (loop1): Directory bread(block 65) failed [ 174.540045][ T7682] FAT-fs (loop1): Directory bread(block 66) failed [ 174.570723][ T7682] FAT-fs (loop1): Directory bread(block 67) failed [ 174.577409][ T7682] FAT-fs (loop1): Directory bread(block 68) failed [ 174.647401][ T7682] FAT-fs (loop1): Directory bread(block 69) failed [ 174.677979][ T7682] FAT-fs (loop1): Directory bread(block 70) failed [ 174.715441][ T7682] FAT-fs (loop1): Directory bread(block 71) failed [ 174.740041][ T7682] FAT-fs (loop1): Directory bread(block 72) failed [ 174.765028][ T7682] FAT-fs (loop1): Directory bread(block 73) failed [ 175.213390][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 175.213410][ T30] audit: type=1326 audit(1752777291.597:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 175.301016][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 175.384445][ T7702] loop1: detected capacity change from 0 to 256 [ 175.408034][ T30] audit: type=1326 audit(1752777291.597:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 175.540760][ T30] audit: type=1326 audit(1752777291.597:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 175.607758][ T7699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.674753][ T7708] loop0: detected capacity change from 0 to 1024 [ 175.703176][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 175.712442][ T30] audit: type=1326 audit(1752777291.637:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 175.788832][ T7701] vlan1: entered allmulticast mode [ 175.799927][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 175.851548][ T7701] bond6: entered allmulticast mode [ 175.872905][ T30] audit: type=1326 audit(1752777291.637:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 176.017427][ T7708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.049211][ T30] audit: type=1326 audit(1752777291.637:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 176.176168][ T30] audit: type=1326 audit(1752777291.637:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 176.312349][ T30] audit: type=1326 audit(1752777291.657:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 176.352444][ T30] audit: type=1326 audit(1752777291.957:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 176.484211][ T30] audit: type=1326 audit(1752777291.967:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd70d78e929 code=0x7ffc0000 [ 176.558948][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.714749][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 177.826851][ T7744] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.884530][ T7746] loop2: detected capacity change from 0 to 256 [ 177.928279][ T7749] loop0: detected capacity change from 0 to 1024 [ 177.992657][ T7748] vlan1: entered allmulticast mode [ 178.024654][ T7746] FAT-fs (loop2): Directory bread(block 64) failed [ 178.060264][ T7746] FAT-fs (loop2): Directory bread(block 65) failed [ 178.066972][ T7746] FAT-fs (loop2): Directory bread(block 66) failed [ 178.074793][ T7748] bond7: entered allmulticast mode [ 178.146185][ T7746] FAT-fs (loop2): Directory bread(block 67) failed [ 178.168247][ T7746] FAT-fs (loop2): Directory bread(block 68) failed [ 178.175384][ T7746] FAT-fs (loop2): Directory bread(block 69) failed [ 178.182969][ T7746] FAT-fs (loop2): Directory bread(block 70) failed [ 178.192661][ T7746] FAT-fs (loop2): Directory bread(block 71) failed [ 178.199433][ T7746] FAT-fs (loop2): Directory bread(block 72) failed [ 178.207066][ T7746] FAT-fs (loop2): Directory bread(block 73) failed [ 178.305484][ T7749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.607531][ T7762] loop3: detected capacity change from 0 to 512 [ 178.637869][ T7762] EXT4-fs: Ignoring removed oldalloc option [ 178.654854][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 178.675320][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 178.721837][ T7762] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.633: Parent and EA inode have the same ino 15 [ 178.787980][ T7762] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.633: Parent and EA inode have the same ino 15 [ 178.846609][ T7762] EXT4-fs (loop3): 1 orphan inode deleted [ 178.885714][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.182155][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.422273][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.620716][ T7776] loop3: detected capacity change from 0 to 2048 [ 179.628214][ T7776] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.690944][ T7776] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 182.638237][ T7813] loop3: detected capacity change from 0 to 512 [ 182.672508][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 182.672527][ T30] audit: type=1326 audit(1752777299.057:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 182.810194][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 182.851562][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 182.863649][ T7813] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.884740][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 182.900044][ T30] audit: type=1326 audit(1752777299.057:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 182.934575][ T7813] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.969010][ T7813] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 183.002304][ T7813] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.017739][ T30] audit: type=1326 audit(1752777299.057:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 183.136039][ T7813] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 183.143644][ T30] audit: type=1326 audit(1752777299.087:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 183.201299][ T7813] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.649: bg 0: block 40: padding at end of block bitmap is not set [ 183.231982][ T7819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.269180][ T7813] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 183.280195][ T30] audit: type=1326 audit(1752777299.087:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 183.341092][ T7826] vlan1: entered allmulticast mode [ 183.347179][ T7813] EXT4-fs (loop3): 1 truncate cleaned up [ 183.360062][ T7826] bond8: entered allmulticast mode [ 183.381313][ T7813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.427726][ T30] audit: type=1326 audit(1752777299.087:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 183.742794][ T30] audit: type=1326 audit(1752777299.087:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8404b8e929 code=0x7ffc0000 [ 183.774132][ T30] audit: type=1326 audit(1752777299.087:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8404b90847 code=0x7ffc0000 [ 183.839008][ T30] audit: type=1326 audit(1752777299.087:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.4.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8404b907bc code=0x7ffc0000 [ 186.007690][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.321656][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.659'. [ 186.681108][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.666'. [ 186.731524][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.666'. [ 186.835792][ T7860] syz_tun: entered promiscuous mode [ 186.986412][ T7860] syz_tun: left promiscuous mode [ 188.720161][ T7879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.735078][ T7879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.150715][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.256085][ T7879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.286711][ T7879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.326547][ T7879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.537814][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.680'. [ 190.773185][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.285792][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 191.285815][ T30] audit: type=1326 audit(1752777307.657:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 191.411486][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 191.470119][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 191.483412][ T30] audit: type=1326 audit(1752777307.657:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 191.558695][ T7930] loop0: detected capacity change from 0 to 2048 [ 191.582288][ T7930] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.630039][ T30] audit: type=1326 audit(1752777307.657:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 191.686646][ T7930] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 191.767516][ T30] audit: type=1326 audit(1752777307.697:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 191.936906][ T30] audit: type=1326 audit(1752777307.717:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 192.013410][ T7937] loop2: detected capacity change from 0 to 256 [ 192.088916][ T30] audit: type=1326 audit(1752777307.717:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 192.179847][ C0] sched: DL replenish lagged too much [ 192.229358][ T30] audit: type=1326 audit(1752777307.717:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 192.296775][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.304618][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.370701][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.397193][ T30] audit: type=1326 audit(1752777307.717:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 192.494827][ T7944] loop0: detected capacity change from 0 to 512 [ 192.545374][ T30] audit: type=1326 audit(1752777307.717:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aad8e929 code=0x7ffc0000 [ 192.602027][ T7944] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 192.714872][ T30] audit: type=1326 audit(1752777307.727:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1aad90847 code=0x7ffc0000 [ 192.930816][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'. [ 194.540659][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.547015][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.219275][ T7974] loop2: detected capacity change from 0 to 2048 [ 195.248331][ T7974] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.293591][ T7974] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 195.519082][ T7977] loop2: detected capacity change from 0 to 512 [ 195.556353][ T7977] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 195.594445][ T7977] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.616859][ T7977] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.655920][ T7977] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 195.683035][ T7977] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.706: bg 0: block 40: padding at end of block bitmap is not set [ 195.734296][ T7977] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 195.802761][ T7977] EXT4-fs (loop2): 1 truncate cleaned up [ 195.834755][ T7977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.987355][ T7983] loop4: detected capacity change from 0 to 256 [ 196.191873][ T7984] netlink: 14 bytes leftover after parsing attributes in process `syz.4.705'. [ 196.242861][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.370027][ T7984] hsr_slave_0: left promiscuous mode [ 196.430018][ T7984] hsr_slave_1: left promiscuous mode [ 196.463328][ T7987] loop0: detected capacity change from 0 to 512 [ 196.536678][ T7987] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 197.122588][ T7997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.710'. [ 198.033372][ T8013] loop1: detected capacity change from 0 to 256 [ 198.342897][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 198.533769][ T8019] loop4: detected capacity change from 0 to 512 [ 198.590536][ T8019] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 198.682365][ T8023] loop2: detected capacity change from 0 to 256 [ 198.866536][ T8026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.723'. [ 199.150007][ T8026] hsr_slave_0: left promiscuous mode [ 199.247319][ T8026] hsr_slave_1: left promiscuous mode [ 199.787142][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.728'. [ 200.286541][ T8047] loop1: detected capacity change from 0 to 128 [ 200.517487][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 200.517508][ T30] audit: type=1800 audit(1752777316.897:818): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.729" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 200.683767][ T8051] loop0: detected capacity change from 0 to 512 [ 200.757021][ T8047] syz.1.729: attempt to access beyond end of device [ 200.757021][ T8047] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 200.953211][ T8051] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 200.990235][ T8051] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.017654][ T8051] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 201.063615][ T8051] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.109806][ T8047] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 201.140039][ T8051] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 201.168678][ T8051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.731: bg 0: block 40: padding at end of block bitmap is not set [ 201.261855][ T8047] syz.1.729: attempt to access beyond end of device [ 201.261855][ T8047] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 201.282838][ T8051] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 201.323009][ T8051] EXT4-fs (loop0): 1 truncate cleaned up [ 201.365863][ T8051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.460561][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.735'. [ 201.507918][ T8063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.735'. [ 201.524155][ T8047] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 201.594267][ T8047] syz.1.729: attempt to access beyond end of device [ 201.594267][ T8047] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 201.632724][ T8063] syz_tun: entered promiscuous mode [ 201.683763][ T8063] syz_tun: left promiscuous mode [ 201.705947][ T8047] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 201.840084][ T8047] syz.1.729: attempt to access beyond end of device [ 201.840084][ T8047] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 201.858683][ T8065] loop2: detected capacity change from 0 to 512 [ 201.892100][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.963047][ T8065] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 202.011102][ T8047] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 202.136940][ T8047] syz.1.729: attempt to access beyond end of device [ 202.136940][ T8047] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 202.316342][ T8047] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 202.396478][ T8047] syz.1.729: attempt to access beyond end of device [ 202.396478][ T8047] loop1: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 202.476789][ T8074] atomic_op ffff88807a8b7198 conn xmit_atomic 0000000000000000 [ 202.523681][ T8047] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 202.682500][ T8047] syz.1.729: attempt to access beyond end of device [ 202.682500][ T8047] loop1: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 202.957229][ T8047] Buffer I/O error on dev loop1, logical block 137, lost async page write [ 202.967144][ T8047] syz.1.729: attempt to access beyond end of device [ 202.967144][ T8047] loop1: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 203.020871][ T8047] Buffer I/O error on dev loop1, logical block 138, lost async page write [ 203.029748][ T8047] syz.1.729: attempt to access beyond end of device [ 203.029748][ T8047] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 203.128687][ T8047] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 203.228738][ T8047] syz.1.729: attempt to access beyond end of device [ 203.228738][ T8047] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 203.310006][ T8047] Buffer I/O error on dev loop1, logical block 148, lost async page write [ 203.432577][ T30] audit: type=1800 audit(1752777319.817:819): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.729" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 203.478420][ T8082] loop2: detected capacity change from 0 to 8192 [ 203.520056][ T8082] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.453159][ T8089] loop4: detected capacity change from 0 to 512 [ 204.552457][ T8089] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 204.585693][ T8089] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.628826][ T8089] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 204.659959][ T8089] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.736749][ T8089] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 204.777736][ T8089] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.747: bg 0: block 40: padding at end of block bitmap is not set [ 204.797554][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'. [ 204.826993][ T8089] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 204.870799][ T8089] EXT4-fs (loop4): 1 truncate cleaned up [ 204.892742][ T8089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.179438][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.197882][ T8096] loop2: detected capacity change from 0 to 512 [ 205.265303][ T8096] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 211.003952][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 211.044557][ T8113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.077419][ T8115] vlan1: entered allmulticast mode [ 211.085188][ T8115] bond5: entered allmulticast mode [ 211.139765][ T8113] loop3: detected capacity change from 0 to 1024 [ 211.175783][ T8113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.659721][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.672452][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.681406][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.689608][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.704305][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.730056][ T5850] Bluetooth: hci5: command tx timeout [ 218.577499][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.590734][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.600438][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.614649][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.622656][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.810009][ T5848] Bluetooth: hci5: command tx timeout [ 220.665585][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.682224][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.690688][ T5845] Bluetooth: hci6: command tx timeout [ 220.700972][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.709121][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.720492][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.117422][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 221.130146][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 221.138351][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 221.147037][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 221.155521][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 221.890052][ T5848] Bluetooth: hci5: command tx timeout [ 222.789997][ T5848] Bluetooth: hci7: command tx timeout [ 222.796070][ T5848] Bluetooth: hci6: command tx timeout [ 223.250331][ T5850] Bluetooth: hci8: command tx timeout [ 223.970140][ T5850] Bluetooth: hci5: command tx timeout [ 224.850012][ T5850] Bluetooth: hci7: command tx timeout [ 224.858826][ T5848] Bluetooth: hci6: command tx timeout [ 225.330097][ T5848] Bluetooth: hci8: command tx timeout [ 226.585119][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.600133][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.610546][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.620498][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.628441][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.930130][ T5848] Bluetooth: hci7: command tx timeout [ 226.937604][ T5850] Bluetooth: hci6: command tx timeout [ 227.410036][ T5850] Bluetooth: hci8: command tx timeout [ 228.689970][ T5850] Bluetooth: hci2: command tx timeout [ 229.010058][ T5850] Bluetooth: hci7: command tx timeout [ 229.490033][ T5850] Bluetooth: hci8: command tx timeout [ 230.770070][ T5850] Bluetooth: hci2: command tx timeout [ 232.849937][ T5850] Bluetooth: hci2: command tx timeout [ 234.929978][ T5850] Bluetooth: hci2: command tx timeout [ 240.905988][ T8115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.906864][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.976808][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.983424][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.277832][ T8129] lo speed is unknown, defaulting to 1000 [ 259.233473][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.372178][ T8127] lo speed is unknown, defaulting to 1000 [ 259.414473][ T8120] lo speed is unknown, defaulting to 1000 [ 259.460062][ T8132] lo speed is unknown, defaulting to 1000 [ 259.474603][ T8123] lo speed is unknown, defaulting to 1000 [ 260.629173][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 260.715233][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 260.785415][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 261.899531][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 274.318177][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 274.763535][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.742589][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.759540][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.769462][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.778423][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.786704][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.850078][ T5848] Bluetooth: hci0: command tx timeout [ 278.944565][ T8120] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 279.477349][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.506293][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.518136][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.527761][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.535864][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.930485][ T5850] Bluetooth: hci0: command tx timeout [ 281.359183][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 281.379239][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 281.390096][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 281.410660][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 281.434704][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 281.506547][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.589961][ T5848] Bluetooth: hci3: command tx timeout [ 282.588687][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 282.598149][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 282.607717][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 282.616354][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 282.624306][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 283.011235][ T5850] Bluetooth: hci0: command tx timeout [ 283.570165][ T5850] Bluetooth: hci9: command tx timeout [ 283.650225][ T5850] Bluetooth: hci3: command tx timeout [ 284.690187][ T5850] Bluetooth: hci10: command tx timeout [ 285.091869][ T5850] Bluetooth: hci0: command tx timeout [ 285.655795][ T5850] Bluetooth: hci9: command tx timeout [ 285.730024][ T5850] Bluetooth: hci3: command tx timeout [ 286.777573][ T5850] Bluetooth: hci10: command tx timeout [ 287.242718][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.261340][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.269537][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.279252][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.290528][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.736618][ T5848] Bluetooth: hci9: command tx timeout [ 287.810075][ T5848] Bluetooth: hci3: command tx timeout [ 288.850113][ T5848] Bluetooth: hci10: command tx timeout [ 289.330083][ T5848] Bluetooth: hci5: command tx timeout [ 289.816131][ T5848] Bluetooth: hci9: command tx timeout [ 290.930077][ T5848] Bluetooth: hci10: command tx timeout [ 291.409981][ T5848] Bluetooth: hci5: command tx timeout [ 293.490320][ T5848] Bluetooth: hci5: command tx timeout [ 295.570567][ T5848] Bluetooth: hci5: command tx timeout [ 317.420045][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426411][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.738206][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.755318][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.775014][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.788211][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.805919][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.893961][ T5848] Bluetooth: hci4: command tx timeout [ 340.279273][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.297114][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.306967][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.321239][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.330425][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.414370][ T8190] lo speed is unknown, defaulting to 1000 [ 340.834866][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 341.775861][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.795433][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.803871][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.818430][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.826706][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.970519][ T5848] Bluetooth: hci4: command tx timeout [ 342.370372][ T5848] Bluetooth: hci2: command tx timeout [ 342.705667][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.728035][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.736338][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.744726][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.758024][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.890104][ T5848] Bluetooth: hci6: command tx timeout [ 344.050619][ T5848] Bluetooth: hci4: command tx timeout [ 344.458229][ T5848] Bluetooth: hci2: command tx timeout [ 344.860000][ T5848] Bluetooth: hci7: command tx timeout [ 345.970168][ T5848] Bluetooth: hci6: command tx timeout [ 346.130309][ T5848] Bluetooth: hci4: command tx timeout [ 346.530036][ T5848] Bluetooth: hci2: command tx timeout [ 346.930274][ T5848] Bluetooth: hci7: command tx timeout [ 348.075745][ T5848] Bluetooth: hci6: command tx timeout [ 348.150677][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.159489][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.168268][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.176554][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.184429][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.610124][ T5848] Bluetooth: hci2: command tx timeout [ 349.010689][ T5848] Bluetooth: hci7: command tx timeout [ 350.130403][ T5848] Bluetooth: hci6: command tx timeout [ 350.210043][ T5848] Bluetooth: hci8: command tx timeout [ 351.090224][ T5848] Bluetooth: hci7: command tx timeout [ 352.290002][ T5848] Bluetooth: hci8: command tx timeout [ 354.370230][ T5848] Bluetooth: hci8: command tx timeout [ 356.455837][ T5848] Bluetooth: hci8: command tx timeout [ 356.591996][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.599279][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.618839][ T8190] bridge_slave_0: entered allmulticast mode [ 356.698999][ T8190] bridge_slave_0: entered promiscuous mode [ 356.718861][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.728815][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.740126][ T8190] bridge_slave_1: entered allmulticast mode [ 356.759436][ T8190] bridge_slave_1: entered promiscuous mode [ 356.877935][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.902117][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.047523][ T8190] team0: Port device team_slave_0 added [ 357.066975][ T8190] team0: Port device team_slave_1 added [ 357.197384][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.208296][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.243426][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.269282][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.279258][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.313911][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.457779][ T8190] hsr_slave_0: entered promiscuous mode [ 357.478582][ T8190] hsr_slave_1: entered promiscuous mode [ 357.498413][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 357.507462][ T8190] Cannot create hsr debugfs directory [ 358.048002][ T8190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 358.081292][ T8190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.120441][ T8190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.140461][ T8190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.237655][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.245193][ T8190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.253580][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.260803][ T8190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.465124][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.515504][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.056259][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.684841][ T8190] veth0_vlan: entered promiscuous mode [ 359.726849][ T8190] veth1_vlan: entered promiscuous mode [ 359.797217][ T8190] veth0_macvtap: entered promiscuous mode [ 359.827918][ T8190] veth1_macvtap: entered promiscuous mode [ 359.866945][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.888817][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.866743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.946450][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.954829][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.046469][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.063894][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.303150][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.758'. [ 385.319887][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.758'. [ 385.355554][ T8230] syz_tun: entered promiscuous mode [ 385.376918][ T8230] syz_tun: left promiscuous mode [ 385.859586][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.762'. [ 385.948170][ T8232] bond1: entered promiscuous mode [ 385.963194][ T8232] bond1: entered allmulticast mode [ 385.969003][ T8232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.179638][ T30] audit: type=1326 audit(1752777502.557:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.244943][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.763'. [ 386.254236][ T30] audit: type=1326 audit(1752777502.587:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.286712][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.763'. [ 386.297071][ T30] audit: type=1326 audit(1752777502.587:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.368089][ T30] audit: type=1326 audit(1752777502.587:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.428991][ T30] audit: type=1326 audit(1752777502.587:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.500876][ T30] audit: type=1326 audit(1752777502.587:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.554833][ T30] audit: type=1326 audit(1752777502.587:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.590924][ T30] audit: type=1326 audit(1752777502.587:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.621830][ T30] audit: type=1326 audit(1752777502.587:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3db38e929 code=0x7ffc0000 [ 386.656649][ T30] audit: type=1326 audit(1752777502.587:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3db390847 code=0x7ffc0000 [ 396.153932][ T8249] loop6: detected capacity change from 0 to 4096 [ 396.230646][ T8250] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.277133][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 396.277155][ T30] audit: type=1800 audit(1752777512.657:856): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.767" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 397.996934][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 398.009073][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 398.019530][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 398.027903][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 398.036987][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 398.141757][ T8253] lo speed is unknown, defaulting to 1000 [ 398.582768][ T8253] chnl_net:caif_netlink_parms(): no params data found [ 400.131314][ T5848] Bluetooth: hci11: command tx timeout [ 401.419981][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 402.211002][ T5845] Bluetooth: hci11: command tx timeout [ 402.317439][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.346593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 402.714123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 402.754688][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.810252][ T8253] bridge_slave_0: entered allmulticast mode [ 402.817527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 402.932142][ T8253] bridge_slave_0: entered promiscuous mode [ 403.033968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 403.201523][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.208739][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.329034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 403.493042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 403.517735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 404.660203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 405.069837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 405.480130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 406.539891][ T5845] Bluetooth: hci11: command tx timeout [ 406.630091][ T8253] bridge_slave_1: entered allmulticast mode [ 421.612348][ T5848] Bluetooth: hci11: command tx timeout [ 423.250381][ T8267] Bluetooth: hci10: command tx timeout [ 423.649949][ T8267] Bluetooth: hci3: command 0x0406 tx timeout [ 423.656034][ T8267] Bluetooth: hci9: command tx timeout [ 440.306360][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.019911][ T8267] Bluetooth: hci5: command 0x0406 tx timeout [ 453.026247][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.273928][ T8253] bridge_slave_1: entered promiscuous mode [ 454.546704][ T8265] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 485.990444][ T31] INFO: task kworker/u8:4:77 blocked for more than 155 seconds. [ 485.998150][ T31] Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 [ 487.439797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.448530][ T31] task:kworker/u8:4 state:D stack:21224 pid:77 tgid:77 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 488.419905][ T31] Workqueue: events_unbound linkwatch_event [ 488.427585][ T31] Call Trace: [ 488.890299][ T31] [ 488.893311][ T31] __schedule+0x16fd/0x4cf0 [ 488.897963][ T31] ? __lock_acquire+0xab9/0xd20 [ 489.009980][ T8267] Bluetooth: hci7: command 0x0406 tx timeout [ 489.016064][ T8267] Bluetooth: hci8: command 0x0406 tx timeout [ 489.240307][ T31] ? schedule+0x165/0x360 [ 489.246398][ T31] ? __pfx___schedule+0x10/0x10 [ 489.369904][ T31] ? schedule+0x91/0x360 [ 489.419874][ T31] schedule+0x165/0x360 [ 489.424113][ T31] schedule_preempt_disabled+0x13/0x30 [ 489.429607][ T31] __mutex_lock+0x724/0xe80 [ 489.600606][ T31] ? __mutex_lock+0x51b/0xe80 [ 489.605377][ T31] ? linkwatch_event+0xe/0x60 [ 489.755901][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 489.850034][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.855485][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 489.909884][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 489.915698][ T31] linkwatch_event+0xe/0x60 [ 490.039926][ T31] process_scheduled_works+0xae1/0x17b0 [ 490.045593][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.149938][ T31] worker_thread+0x8a0/0xda0 [ 490.154622][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.249785][ T31] ? __kthread_parkme+0x7b/0x200 [ 490.254856][ T31] kthread+0x70e/0x8a0 [ 490.258967][ T31] ? __pfx_worker_thread+0x10/0x10 [ 490.419972][ T31] ? __pfx_kthread+0x10/0x10 [ 490.424658][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.499909][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.505204][ T31] ? __pfx_kthread+0x10/0x10 [ 490.589893][ T31] ret_from_fork+0x3f9/0x770 [ 490.594572][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 490.700683][ T31] ? __switch_to_asm+0x39/0x70 [ 490.705535][ T31] ? __switch_to_asm+0x33/0x70 [ 490.800542][ T31] ? __pfx_kthread+0x10/0x10 [ 490.805220][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.899048][ T31] [ 490.910351][ T31] INFO: task syz-executor:8129 blocked for more than 160 seconds. [ 490.918220][ T31] Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 [ 491.079961][ T31] Blocked by coredump. [ 491.084611][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.191011][ T31] task:syz-executor state:D stack:22728 pid:8129 tgid:8129 ppid:1 task_flags:0x40054c flags:0x00004006 [ 491.314856][ T31] Call Trace: [ 491.318201][ T31] [ 491.357687][ T8274] Bluetooth: hci4: command tx timeout [ 491.363434][ T8274] Bluetooth: hci2: command tx timeout [ 491.368839][ T8274] Bluetooth: hci6: command tx timeout [ 491.429831][ T31] __schedule+0x16fd/0x4cf0 [ 491.434434][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.439331][ T31] ? schedule+0x165/0x360 [ 491.559859][ T31] ? __pfx___schedule+0x10/0x10 [ 491.590418][ T31] ? schedule+0x91/0x360 [ 491.594747][ T31] schedule+0x165/0x360 [ 491.656190][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.739778][ T31] __mutex_lock+0x724/0xe80 [ 491.744388][ T31] ? __mutex_lock+0x51b/0xe80 [ 491.749108][ T31] ? tun_chr_close+0x3e/0x1c0 [ 491.839979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.845113][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 491.927465][ T8274] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 491.960189][ T31] tun_chr_close+0x3e/0x1c0 [ 491.964792][ T31] __fput+0x449/0xa70 [ 491.968993][ T31] task_work_run+0x1d1/0x260 [ 492.049304][ T8281] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 492.112195][ T31] ? __pfx_task_work_run+0x10/0x10 [ 492.117395][ T31] ? kmem_cache_free+0x18f/0x400 [ 492.157726][ T8281] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 492.219825][ T31] do_exit+0x6b5/0x2300 [ 492.224075][ T31] ? do_raw_spin_lock+0x121/0x290 [ 492.229149][ T31] ? __pfx_do_exit+0x10/0x10 [ 492.355861][ T8281] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 492.372192][ T31] ? cgroup_freezing+0x20/0x360 [ 492.377240][ T31] do_group_exit+0x21c/0x2d0 [ 492.489896][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.495189][ T31] get_signal+0x1286/0x1340 [ 492.568608][ T8281] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 492.612120][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 492.617847][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 492.746340][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.840028][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 492.867695][ T31] exit_to_user_mode_loop+0x75/0x110 [ 492.949876][ T31] do_syscall_64+0x2bd/0x3b0 [ 492.954555][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.033711][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.074430][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.079280][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.191395][ T31] RIP: 0033:0x7f34671907bc [ 493.195890][ T31] RSP: 002b:00007fff58169510 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 493.309928][ T31] RAX: 000000000000006c RBX: 00007f3467ee4620 RCX: 00007f34671907bc [ 493.317974][ T31] RDX: 000000000000006c RSI: 00007f3467ee4670 RDI: 0000000000000003 [ 493.430227][ T31] RBP: 0000000000000000 R08: 00007fff58169564 R09: 000000000000000c [ 493.438267][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 493.519899][ T31] R13: 0000000000000000 R14: 00007f3467ee4670 R15: 0000000000000000 [ 493.527963][ T31] [ 493.602026][ T31] INFO: task syz-executor:8160 blocked for more than 162 seconds. [ 493.730452][ T31] Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 [ 493.737620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.900058][ T31] task:syz-executor state:D stack:25456 pid:8160 tgid:8160 ppid:1 task_flags:0x400140 flags:0x00004006 [ 494.020082][ T31] Call Trace: [ 494.023433][ T31] [ 494.026695][ T31] __schedule+0x16fd/0x4cf0 [ 494.124710][ T31] ? arch_stack_walk+0xfc/0x150 [ 494.129660][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.174866][ T31] ? schedule+0x165/0x360 [ 494.179244][ T31] ? __pfx___schedule+0x10/0x10 [ 494.269823][ T31] ? schedule+0x91/0x360 [ 494.274157][ T31] schedule+0x165/0x360 [ 494.278353][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.359795][ T31] __mutex_lock+0x724/0xe80 [ 494.419811][ T31] ? __mutex_lock+0x51b/0xe80 [ 494.424578][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 494.498970][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.549878][ T31] ? net_generic+0x1e/0x240 [ 494.554463][ T31] ? net_generic+0x1e/0x240 [ 494.559011][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 494.669988][ T31] ops_init+0x359/0x5c0 [ 494.674236][ T31] setup_net+0x10c/0x320 [ 494.678517][ T31] ? __pfx_setup_net+0x10/0x10 [ 494.769867][ T31] ? copy_net_ns+0x304/0x4d0 [ 494.812436][ T31] ? down_read_killable+0x1d1/0x350 [ 494.817735][ T31] copy_net_ns+0x31b/0x4d0 [ 494.889771][ T31] create_new_namespaces+0x3f3/0x720 [ 494.895145][ T31] ? security_capable+0x7e/0x2e0 [ 494.969812][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 494.975625][ T31] ksys_unshare+0x4c8/0x8c0 [ 495.059877][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 495.065003][ T31] __x64_sys_unshare+0x38/0x50 [ 495.149891][ T31] do_syscall_64+0xfa/0x3b0 [ 495.154479][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.219857][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.226005][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.285968][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.315794][ T31] RIP: 0033:0x7fd433f90127 [ 495.359123][ T31] RSP: 002b:00007ffe5724b978 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 495.412344][ T31] RAX: ffffffffffffffda RBX: 00007fd4341b5f40 RCX: 00007fd433f90127 [ 495.450336][ T8281] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 495.465127][ T8279] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 495.474385][ T8279] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 495.483330][ T8279] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 495.498530][ T8279] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 495.508014][ T8279] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 495.516459][ T8279] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 495.524834][ T8279] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 495.543330][ T8279] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 495.551514][ T8294] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 495.633167][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 495.705094][ T31] RBP: 00007fd4341b6738 R08: 0000000000000000 R09: 0000000000000000 [ 495.825948][ T8279] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 495.835703][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 495.850107][ T8279] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 495.858588][ T8279] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 495.891628][ T8279] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 495.919062][ T8279] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 495.939830][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 495.947889][ T31]