last executing test programs: 3m53.555867058s ago: executing program 0 (id=131): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008803, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m52.447798039s ago: executing program 0 (id=136): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m52.176146885s ago: executing program 0 (id=139): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_vif\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000280)='./bus\x00', 0x0) 3m50.179872904s ago: executing program 0 (id=145): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, 0x0, 0x1320022, 0x0, 0x0, 0x0, 0x0) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3m47.753988381s ago: executing program 0 (id=157): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f00000000c0)=0x8b, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c881}, 0x880) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5206, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m46.557127664s ago: executing program 0 (id=161): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000340), 0x1001) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 3m31.300817824s ago: executing program 32 (id=161): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000340), 0x1001) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 3m18.587784623s ago: executing program 4 (id=239): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, 0x0, 0x1320022, 0x0, 0x0, 0x0, 0x0) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3m17.513728814s ago: executing program 4 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x800, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800008ec0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x1ff, 0x0, 0x7f, 0x0, 0x401, 0x4, 0x2, '\x00', 0x59ac}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='sched_switch\x00', r9}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 3m13.835684746s ago: executing program 4 (id=246): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m12.501656992s ago: executing program 4 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tgkill(r0, r0, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'nr0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r6, 0x0, 0x0) close(r6) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$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") 3m11.720166867s ago: executing program 4 (id=252): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, 0x0, 0x1001) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") 3m9.332099064s ago: executing program 4 (id=254): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeed, 0x110, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c6"], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m53.796381738s ago: executing program 33 (id=254): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeed, 0x110, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c6"], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 27.24315056s ago: executing program 2 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timerfd_create(0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b700000000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x51, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) 24.481140283s ago: executing program 2 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000005300)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x8, 0x60000000}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) timer_create(0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000", 0x52}], 0x1) 18.375738942s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000340), 0x1001) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 14.498913258s ago: executing program 2 (id=626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000300)) 13.716180933s ago: executing program 2 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000005300)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x8, 0x60000000}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) timer_create(0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000", 0x52}], 0x1) 7.966871385s ago: executing program 6 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x8c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{}, {0xde1}}, 0x3, @random=0x1, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @void, @void, @val={0x2a, 0x0, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x4000, 0x0, 0x3, 0x0, {0x88d, 0xf30, 0x0, 0x49, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x7, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6}}, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf2d}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6.956289215s ago: executing program 6 (id=652): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 6.265035928s ago: executing program 6 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008006000000e00", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50) 5.926678635s ago: executing program 6 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000340), 0x1001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 5.862646186s ago: executing program 5 (id=657): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0) 4.886268415s ago: executing program 5 (id=659): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)="d1dd643bfed7560cf618ae5f79032f392f703ce82f449f889f35ab9b7f7261c29f49b32e0e1c337336bd17eebbd22cd5a83c991567ba3ef37d5ef23087c22c8b29910655c441879d7ac5fcc667ca64b2ddcd83c68297379715c82f4b3a2eec620135fe0fadc61f1787bdaeeff93dffb968e3d8401e1e4309923dac14611e0a949c3b5109097752c2c632fc29ec1bc1178d3239108afb8ddc5c0f7e7e87a1815ba780ee635b71b2468d18d52adfa9d4fb497b272bf67b1e2c37c640d80eb2264bea538f1e8e3913", 0xc7}, {&(0x7f0000000800)="cdf7491a08dcd48394bedab728d7d35112b2c4677d6138206a685297e4d88feeef43e1be5d02e252618cf86c3da0e6b10900a48224da63", 0x37}, {&(0x7f0000000980)="9a8e09e52d2723c07422bcd150656d7087b6e0d79282804723d2017cdecadd0e9a540b28a16a8d9ad2851a29c6440f4d8fdfe50b25faf8e9b43c55e4cb35f5361fe01d56585cc086fe712cd6da67ce3d53111e1f550c4b686ea2f97ee13612b9f3c9666866ec378152689974d0181a8a623124e8e5db769c607e6c", 0x7b}, {&(0x7f0000000a00)="f301c0349759be2bcadcc25c24f1d2a681c4f44b2a58441e8eedbe903c35a7625e5b4e3eac28e8a9cb2fa3dee34de8b548d97deb198d633ca693043afe85c5f4b36e6a2c4b0addc880cab475795d642a90e899643eb2c1e4e2f4151c4802182d529ec51700afbea448a768ac6535cab23e2628be38c01bda5baca9bb95714108747dc4b21377a7e8778c6416a6b3806b446ad46b02d4e229f8a1dfc48aa3db9bb589ee76cee9e5cd3a", 0xa9}, {&(0x7f0000000ac0)="4443b9cca1e9a570ebc1d3b058ede4bfd4e01956034b44a759d4d6cc656591895ac74b7b044945c1499f7423007d7839feb43fa3cc15a91d1537046cc56c9ddc29ef1d1f41fe9251069e1287b7f3b32b39bd844729a695a45ba5fcca316e8d5414a3cf1811ad40b3b2f64befb28c094e85b5f8276bc34b92c6ef540b855952", 0x7f}], 0x5}}], 0x2, 0x8c4) 3.639445089s ago: executing program 5 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffd, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.437801913s ago: executing program 5 (id=667): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f00000000c0), 0x10) close(r4) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x200000000001, 0x6, 0x7267, 0xb, 0x200000006, 0x1ffffffffff, 0x4, 0x9, 0x35}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 3.370660455s ago: executing program 3 (id=668): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) 1.984326192s ago: executing program 3 (id=669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) 1.148212398s ago: executing program 3 (id=670): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 1.080338149s ago: executing program 6 (id=671): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000001000390429bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="0198f9ffffff0000180012800b000100697036677265000008000280040012"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.05191817s ago: executing program 1 (id=672): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001640)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200800c4}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) 923.603582ms ago: executing program 3 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="30000e008000bd00080211000000080211000000ffffffff09ff0000000000000000000064000108720603030303030308000c006400000008000d"], 0x5c}}, 0x0) 753.457625ms ago: executing program 1 (id=674): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64000102}, 0x10) 646.375278ms ago: executing program 1 (id=675): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 544.14706ms ago: executing program 1 (id=676): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 392.122052ms ago: executing program 1 (id=677): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c84c958e6df0829a8d07f6d9d908097edd3ab04307", 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000006b00)={0xa, 0x4e22, 0x8001, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006c00)}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x100}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="8ebcaa59876b6fed16f20c8312e7f536bdc4255b0322f2371ffa5921721a5c92244fbac3f28518faed9aa8e719af6b1eac2d151eb41c32ddcaa7438031f38633b913ed476fbcb175915bdd958cc98989f2f459e26881e679d2a75838d0cb845e889a11605d5eea9f90a87d94734483c3d7", 0x71}], 0x1}}], 0x2, 0x900) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 321.276254ms ago: executing program 5 (id=678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008006000000e00", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50) 240.499805ms ago: executing program 3 (id=679): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b", 0x56}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d6", 0x16}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0f", 0x6c}, {&(0x7f0000000a40)='16', 0x2}], 0x4}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 74.022889ms ago: executing program 1 (id=680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x6}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 72.944749ms ago: executing program 3 (id=681): socket(0x23, 0x80805, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) 59.700239ms ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000340), 0x1001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x800000, &(0x7f0000000380)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {@resuid}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 269.43µs ago: executing program 5 (id=683): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 6 (id=684): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9c02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r7 = dup3(r5, r1, 0x0) ioctl$TIOCSTI(r7, 0x5412, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) kernel console output (not intermixed with test programs): 4559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.253343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.267985][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.278082][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.287603][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.297340][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.313442][ T4187] device veth1_vlan entered promiscuous mode [ 61.325332][ T4191] device veth1_macvtap entered promiscuous mode [ 61.364580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.373055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.381854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.389960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.399503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.408264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.417283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.425909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.433687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.451552][ T4187] device veth0_macvtap entered promiscuous mode [ 61.463187][ T4182] device veth0_vlan entered promiscuous mode [ 61.471424][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.480075][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.489874][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.498922][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.518098][ T4187] device veth1_macvtap entered promiscuous mode [ 61.539454][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.550913][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.564839][ T4181] device veth0_vlan entered promiscuous mode [ 61.575651][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.588314][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.599539][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.608973][ T4182] device veth1_vlan entered promiscuous mode [ 61.620975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.632877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.642161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.650955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.659537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.668306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.676757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.688014][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.699706][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.710789][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.738757][ T4181] device veth1_vlan entered promiscuous mode [ 61.751092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.760773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.769828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.779499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.790996][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.799987][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.808827][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.819549][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.834651][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.845456][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.856975][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.868335][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.879924][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.904255][ T4182] device veth0_macvtap entered promiscuous mode [ 61.914750][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.927613][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.941851][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.950179][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.959157][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.968438][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.977597][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.986835][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.994940][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.005393][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.017674][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.027733][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.039318][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.050187][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.077804][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.089621][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.105785][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.114482][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.123472][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.132682][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.144179][ T4182] device veth1_macvtap entered promiscuous mode [ 62.154839][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.164194][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.202515][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.203518][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.218496][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.226871][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.234600][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.248568][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.259498][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.270221][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.281514][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.296273][ T4181] device veth0_macvtap entered promiscuous mode [ 62.307181][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.315097][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.323289][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.334303][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.354930][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.376732][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.388510][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.399256][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.409265][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.421372][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.438167][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.451014][ T4181] device veth1_macvtap entered promiscuous mode [ 62.468143][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.480468][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.491238][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.502452][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.512141][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.521323][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.530154][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.584205][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.604786][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.614722][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.630975][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.631221][ T4293] loop4: detected capacity change from 0 to 1024 [ 62.642250][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.658519][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 62.664757][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 62.666216][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 62.671192][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 62.683050][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.691210][ T4293] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 62.693668][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 62.707410][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.718930][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.729172][ T4293] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.730435][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.752246][ T4293] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 62.770887][ T4293] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #17: comm syz.4.5: iget: bad i_size value: 4398046511204 [ 62.791892][ T4293] EXT4-fs (loop4): no journal found [ 62.797963][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.809431][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.822425][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.822633][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.837105][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.841384][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.859821][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.870518][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.880695][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.891378][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.902125][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.912859][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.923925][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.940471][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.948642][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.957489][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.969777][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.999580][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.009221][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.025365][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.034068][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.044399][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.069178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.090256][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.108116][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.134400][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.197488][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.225582][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.240106][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.250788][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.355357][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.364322][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.371863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.382558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.393652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.268714][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.284074][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.293438][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.549425][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.630568][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.836984][ T4241] Bluetooth: hci1: command 0x0419 tx timeout [ 64.844071][ T4241] Bluetooth: hci2: command 0x0419 tx timeout [ 65.843778][ T4241] Bluetooth: hci0: command 0x0419 tx timeout [ 66.019608][ T4319] loop3: detected capacity change from 0 to 256 [ 66.125899][ T4319] ======================================================= [ 66.125899][ T4319] WARNING: The mand mount option has been deprecated and [ 66.125899][ T4319] and is ignored by this kernel. Remove the mand [ 66.125899][ T4319] option from the mount to silence this warning. [ 66.125899][ T4319] ======================================================= [ 66.298924][ T4330] process 'syz.2.9' launched '/dev/fd/8' with NULL argv: empty string added [ 66.944121][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 66.950273][ T4241] Bluetooth: hci4: command 0x0419 tx timeout [ 67.028885][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.044432][ T4334] loop0: detected capacity change from 0 to 256 [ 67.125276][ T4291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.185474][ T4334] syz.0.10 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.409878][ T4343] loop4: detected capacity change from 0 to 1024 [ 67.516291][ T4343] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.589402][ T4347] fuse: Bad value for 'user_id' [ 67.600131][ T4343] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.388145][ T4343] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 68.417982][ T4347] loop2: detected capacity change from 0 to 40427 [ 68.460657][ T4343] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #17: comm syz.4.12: iget: bad i_size value: 4398046511204 [ 68.513549][ T4353] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 68.554474][ T4343] EXT4-fs (loop4): no journal found [ 68.564416][ T4347] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.626213][ T4353] device macvlan0 entered promiscuous mode [ 68.632201][ T4347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.712779][ T4353] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 68.925720][ T4367] xt_CONNSECMARK: invalid mode: 0 [ 68.961105][ T4365] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 68.977043][ T4353] syz.0.15 (4353) used greatest stack depth: 20352 bytes left [ 68.993623][ T4365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 69.076727][ T4365] device ipvlan1 entered promiscuous mode [ 69.128210][ T4365] bridge0: port 3(ipvlan1) entered blocking state [ 69.136426][ T4365] bridge0: port 3(ipvlan1) entered disabled state [ 71.175176][ C1] sched: RT throttling activated [ 71.418319][ T4390] loop3: detected capacity change from 0 to 256 [ 71.529262][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.536200][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.782177][ T4398] loop2: detected capacity change from 0 to 1024 [ 71.795499][ T4256] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.817396][ T4399] loop1: detected capacity change from 0 to 256 [ 72.026070][ T4398] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.286389][ T4398] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.465330][ T4398] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 72.499743][ T4398] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.27: iget: bad i_size value: 4398046511204 [ 72.615351][ T4398] EXT4-fs (loop2): no journal found [ 72.619551][ T4256] usb 5-1: device descriptor read/64, error -71 [ 72.799825][ T4407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30'. [ 72.855509][ T4407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30'. [ 73.041423][ T4407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30'. [ 73.293309][ T4415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.33'. [ 73.549815][ T4415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.801690][ T4415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.877709][ T4415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.941569][ T4415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.014662][ T4415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.080723][ T4427] loop2: detected capacity change from 0 to 256 [ 74.152252][ T4428] futex_wake_op: syz.0.35 tries to shift op by 36; fix this program [ 74.315391][ T4415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.446537][ T4415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.637712][ T4415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.648750][ T4415] device batadv_slave_1 entered promiscuous mode [ 75.322083][ T4437] futex_wake_op: syz.0.41 tries to shift op by 36; fix this program [ 76.137441][ T4447] loop2: detected capacity change from 0 to 1024 [ 76.395920][ T4453] netlink: 'syz.3.47': attribute type 39 has an invalid length. [ 76.405699][ T4447] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 76.456886][ T4447] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.505545][ T4447] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 76.754485][ T4447] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.42: iget: bad i_size value: 4398046511204 [ 77.115966][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.181817][ T4447] EXT4-fs (loop2): no journal found [ 77.433602][ T1108] usb 5-1: device descriptor read/64, error -71 [ 78.126775][ T4471] loop3: detected capacity change from 0 to 256 [ 78.155751][ T4472] fuse: Bad value for 'user_id' [ 78.199979][ T4473] loop1: detected capacity change from 0 to 512 [ 78.258785][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.456785][ T4472] loop0: detected capacity change from 0 to 40427 [ 78.525206][ T4472] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.529621][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 78.848895][ T4473] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.215442][ T4472] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.355390][ T4487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.57'. [ 79.441008][ T4472] xt_CONNSECMARK: invalid mode: 0 [ 80.515873][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.62'. [ 80.524939][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.62'. [ 80.535104][ T4498] futex_wake_op: syz.3.56 tries to shift op by 36; fix this program [ 80.570409][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.62'. [ 80.570710][ T4502] loop2: detected capacity change from 0 to 1024 [ 80.597242][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.62'. [ 80.736689][ T4502] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.759441][ T4502] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.771267][ T4502] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 80.800698][ T4502] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.61: iget: bad i_size value: 4398046511204 [ 80.836749][ T4502] EXT4-fs (loop2): no journal found [ 81.915816][ T13] cfg80211: failed to load regulatory.db [ 82.523113][ T4534] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.70'. [ 83.613555][ T4546] loop2: detected capacity change from 0 to 512 [ 83.814034][ T4548] futex_wake_op: syz.4.74 tries to shift op by 36; fix this program [ 83.874562][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 83.904865][ T4547] loop0: detected capacity change from 0 to 256 [ 83.991801][ T4546] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.575301][ T4560] loop1: detected capacity change from 0 to 1024 [ 85.709160][ T4560] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 85.755273][ T4560] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.800146][ T4560] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 85.864696][ T4560] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #17: comm syz.1.78: iget: bad i_size value: 4398046511204 [ 86.183165][ T4560] EXT4-fs (loop1): no journal found [ 89.290625][ T4256] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.557905][ T4594] futex_wake_op: syz.3.90 tries to shift op by 36; fix this program [ 89.674460][ T4598] loop2: detected capacity change from 0 to 1024 [ 89.965495][ T4598] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 90.147312][ T4598] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.332452][ T4598] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 90.777362][ T4598] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.93: iget: bad i_size value: 4398046511204 [ 90.827619][ T4598] EXT4-fs (loop2): no journal found [ 90.950421][ T4615] fuse: Bad value for 'user_id' [ 91.590102][ T4615] loop0: detected capacity change from 0 to 40427 [ 91.720619][ T4615] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.770541][ T4625] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 91.786358][ T4615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.811877][ T4627] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 91.834200][ T4615] xt_CONNSECMARK: invalid mode: 0 [ 91.915311][ T4627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.102'. [ 91.946900][ T4627] device team0 entered promiscuous mode [ 91.969231][ T4627] device team_slave_0 entered promiscuous mode [ 91.985668][ T4627] device team_slave_1 entered promiscuous mode [ 91.992781][ T4627] bridge0: port 3(team0) entered blocking state [ 92.004994][ T4627] bridge0: port 3(team0) entered disabled state [ 92.025068][ T4628] loop3: detected capacity change from 0 to 256 [ 92.036510][ T4627] bridge0: port 3(team0) entered blocking state [ 92.043107][ T4627] bridge0: port 3(team0) entered forwarding state [ 92.051073][ T4625] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 92.095484][ T4632] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 92.144412][ T4629] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 93.500268][ T4653] loop3: detected capacity change from 0 to 1024 [ 93.569632][ T4653] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 95.282469][ T4653] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.359408][ T4653] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 95.379403][ T4653] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #17: comm syz.3.110: iget: bad i_size value: 4398046511204 [ 95.395659][ T4669] fuse: Bad value for 'user_id' [ 95.491546][ T4653] EXT4-fs (loop3): no journal found [ 95.664590][ T4669] loop2: detected capacity change from 0 to 40427 [ 96.228672][ T4676] netlink: 172 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.452651][ T4669] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.549925][ T4669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.719847][ T4669] xt_CONNSECMARK: invalid mode: 0 [ 96.745015][ T4685] loop1: detected capacity change from 0 to 256 [ 98.555019][ T4697] device syzkaller0 entered promiscuous mode [ 99.138164][ T4723] netlink: 76 bytes leftover after parsing attributes in process `syz.2.132'. [ 99.154375][ T4721] loop0: detected capacity change from 0 to 1024 [ 99.221849][ T4721] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 99.279812][ T4721] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.290882][ T4721] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 99.311226][ T4721] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #17: comm syz.0.131: iget: bad i_size value: 4398046511204 [ 99.334988][ T4721] EXT4-fs (loop0): no journal found [ 102.438168][ T4762] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.144'. [ 102.509826][ T4764] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 102.544154][ T4766] binder: 4765:4766 ioctl 400c620e 200000000e40 returned -22 [ 102.602707][ T4764] team0: Port device wlan1 added [ 103.210034][ T4774] loop2: detected capacity change from 0 to 1024 [ 103.549104][ T4774] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 103.950242][ T4774] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.015278][ T4774] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 104.047044][ T4774] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.147: iget: bad i_size value: 4398046511204 [ 104.081715][ T4774] EXT4-fs (loop2): no journal found [ 104.862663][ T4793] loop3: detected capacity change from 0 to 256 [ 104.901224][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 104.955061][ T4801] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.225615][ T4806] loop1: detected capacity change from 0 to 512 [ 105.704536][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noquota,bsdgroups,. Quota mode: writeback. [ 105.718324][ T4806] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.989632][ T4817] binder: 4812:4817 ioctl c018620c 200000000280 returned -1 [ 107.056023][ T26] audit: type=1326 audit(1758687817.257:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 107.442266][ T26] audit: type=1326 audit(1758687817.257:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 107.533569][ T4829] loop0: detected capacity change from 0 to 512 [ 107.556698][ T26] audit: type=1326 audit(1758687817.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 107.754393][ T4832] futex_wake_op: syz.3.164 tries to shift op by 36; fix this program [ 108.039569][ T4829] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 108.478578][ T26] audit: type=1326 audit(1758687817.267:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.529236][ T26] audit: type=1326 audit(1758687817.267:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.554379][ T26] audit: type=1326 audit(1758687817.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.580337][ T26] audit: type=1326 audit(1758687817.277:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.604395][ T26] audit: type=1326 audit(1758687817.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.626493][ T26] audit: type=1326 audit(1758687817.277:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.648674][ T26] audit: type=1326 audit(1758687817.287:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dcb0cec9 code=0x7ffc0000 [ 108.721009][ T4841] loop3: detected capacity change from 0 to 1024 [ 108.776860][ T4829] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 108.794427][ T4829] ext4 filesystem being mounted at /30/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.147968][ T4841] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 109.170406][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.179402][ T4841] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.669093][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.789821][ T4841] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 109.872029][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.951243][ T4841] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #17: comm syz.3.169: iget: bad i_size value: 4398046511204 [ 109.970217][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.989941][ T4854] loop2: detected capacity change from 0 to 256 [ 110.049003][ T4841] EXT4-fs (loop3): no journal found [ 110.092923][ T4858] netlink: 96 bytes leftover after parsing attributes in process `syz.4.174'. [ 110.666939][ T4869] loop3: detected capacity change from 0 to 512 [ 111.462910][ T4869] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 111.700030][ T4869] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 111.718002][ T4869] ext4 filesystem being mounted at /37/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.836396][ T4879] futex_wake_op: syz.4.179 tries to shift op by 36; fix this program [ 113.635327][ T4884] loop1: detected capacity change from 0 to 512 [ 113.857457][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 113.947005][ T4884] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.487128][ T4905] loop3: detected capacity change from 0 to 256 [ 116.144505][ T4907] loop2: detected capacity change from 0 to 1024 [ 116.178362][ T4905] FAT-fs (loop3): Directory bread(block 64) failed [ 116.185098][ T4905] FAT-fs (loop3): Directory bread(block 65) failed [ 116.191745][ T4905] FAT-fs (loop3): Directory bread(block 66) failed [ 116.198384][ T4905] FAT-fs (loop3): Directory bread(block 67) failed [ 116.204979][ T4905] FAT-fs (loop3): Directory bread(block 68) failed [ 116.211595][ T4905] FAT-fs (loop3): Directory bread(block 69) failed [ 116.218222][ T4905] FAT-fs (loop3): Directory bread(block 70) failed [ 116.224865][ T4905] FAT-fs (loop3): Directory bread(block 71) failed [ 116.232581][ T4905] FAT-fs (loop3): Directory bread(block 72) failed [ 116.239273][ T4905] FAT-fs (loop3): Directory bread(block 73) failed [ 116.251133][ T4907] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 116.325455][ T4907] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.354390][ T4907] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 116.395512][ T4907] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #17: comm syz.2.187: iget: bad i_size value: 4398046511204 [ 116.463840][ T4907] EXT4-fs (loop2): no journal found [ 116.613381][ T4916] loop4: detected capacity change from 0 to 512 [ 116.629478][ T4913] loop3: detected capacity change from 0 to 2048 [ 116.826208][ T4913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.844511][ T4913] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.869550][ T4916] EXT4-fs (loop4): inline encryption not supported [ 116.935554][ T4916] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 116.967560][ T4913] fs-verity: sha512 using implementation "sha512-avx2" [ 118.480771][ T4941] futex_wake_op: syz.3.194 tries to shift op by 36; fix this program [ 118.494508][ T4937] loop4: detected capacity change from 0 to 512 [ 118.633735][ T4942] loop1: detected capacity change from 0 to 512 [ 118.768667][ T4937] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 118.809043][ T4937] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 118.838224][ T4937] EXT4-fs (loop4): 1 truncate cleaned up [ 118.843977][ T4937] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 119.157640][ T4942] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 119.437092][ T4942] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 119.455357][ T4942] ext4 filesystem being mounted at /38/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.753433][ T4964] loop4: detected capacity change from 0 to 1024 [ 120.848377][ T4964] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.890886][ T4964] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.960553][ T4964] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 121.029919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 121.038954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 121.078041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.087020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.095972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.105179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.115178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.125185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.157917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.167014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 121.266378][ T4964] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #17: comm syz.4.203: iget: bad i_size value: 4398046511204 [ 121.345892][ T4964] EXT4-fs (loop4): no journal found [ 124.187385][ T5000] loop3: detected capacity change from 0 to 256 [ 124.518197][ T5002] device ip6tnl1 entered promiscuous mode [ 125.114010][ T4241] Bluetooth: hci5: command 0x0409 tx timeout [ 126.024866][ T4982] chnl_net:caif_netlink_parms(): no params data found [ 126.090451][ T5019] loop1: detected capacity change from 0 to 1024 [ 126.285767][ T5019] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.820405][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 126.820573][ T26] audit: type=1326 audit(1758687837.097:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.146431][ T5019] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.151781][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 127.179518][ T5019] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 127.190992][ T26] audit: type=1326 audit(1758687837.097:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.224626][ T26] audit: type=1326 audit(1758687837.097:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.282524][ T5019] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #17: comm syz.1.218: iget: bad i_size value: 4398046511204 [ 127.304436][ T26] audit: type=1326 audit(1758687837.097:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.348732][ T5031] futex_wake_op: syz.2.219 tries to shift op by 36; fix this program [ 127.435245][ T26] audit: type=1326 audit(1758687837.107:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.517253][ T5019] EXT4-fs (loop1): no journal found [ 127.610093][ T26] audit: type=1326 audit(1758687837.107:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 127.652139][ T5033] overlayfs: missing 'lowerdir' [ 127.896584][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.978492][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.036841][ T26] audit: type=1326 audit(1758687837.107:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 128.060414][ T4982] device bridge_slave_0 entered promiscuous mode [ 128.131653][ T5040] loop3: detected capacity change from 0 to 256 [ 128.165596][ T26] audit: type=1326 audit(1758687837.107:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 128.260159][ T26] audit: type=1326 audit(1758687837.117:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 128.294830][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.335551][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.343705][ T4982] device bridge_slave_1 entered promiscuous mode [ 128.371436][ T26] audit: type=1326 audit(1758687837.117:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 128.438712][ T4982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.506898][ T4982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.746298][ T4982] team0: Port device team_slave_0 added [ 129.076978][ T4982] team0: Port device team_slave_1 added [ 129.223604][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.274260][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.292477][ T4241] Bluetooth: hci5: command 0x040f tx timeout [ 129.360004][ T4982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.405719][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 129.431932][ T4982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.449508][ T4982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.521269][ T4982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.683407][ T4982] device hsr_slave_0 entered promiscuous mode [ 129.731362][ T4982] device hsr_slave_1 entered promiscuous mode [ 129.746599][ T4982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.781203][ T4982] Cannot create hsr debugfs directory [ 129.846105][ T5063] loop4: detected capacity change from 0 to 512 [ 131.103194][ T5063] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.112147][ T5063] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 131.128905][ T5063] EXT4-fs (loop4): 1 truncate cleaned up [ 131.134625][ T5063] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 131.375952][ T4241] Bluetooth: hci5: command 0x0419 tx timeout [ 131.429972][ T5072] loop3: detected capacity change from 0 to 1024 [ 131.475983][ T5063] kthread_run failed with err -4 [ 131.541988][ T5072] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 131.625347][ T5072] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.678789][ T5072] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 131.859383][ T5072] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #17: comm syz.3.230: iget: bad i_size value: 4398046511204 [ 131.965631][ T5077] overlayfs: missing 'lowerdir' [ 132.535430][ T5072] EXT4-fs (loop3): no journal found [ 132.638729][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.645177][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.863831][ T5083] loop4: detected capacity change from 0 to 256 [ 132.907312][ T4982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.955284][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.022924][ T4982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.056851][ T5086] tipc: Started in network mode [ 133.086030][ T5086] tipc: Node identity 1a21da8f9bd3, cluster identity 4711 [ 133.149888][ T5086] tipc: Enabled bearer , priority 0 [ 133.425412][ T4982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.733638][ T4982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.829976][ T5088] device syzkaller0 entered promiscuous mode [ 133.925584][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.975417][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 134.085609][ T13] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 134.099837][ T13] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 134.119436][ T13] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 134.129107][ T13] usb 3-1: config 129 has no interface number 0 [ 134.137533][ T13] usb 3-1: config 129 has no interface number 1 [ 134.144034][ T13] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 134.160572][ T13] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 134.172070][ T13] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 134.187653][ T13] usb 3-1: config 129 interface 135 has no altsetting 0 [ 134.194607][ T13] usb 3-1: config 129 interface 5 has no altsetting 0 [ 134.204525][ T5086] tipc: Resetting bearer [ 134.254680][ T5086] tipc: Disabling bearer [ 135.098554][ T5113] loop1: detected capacity change from 0 to 512 [ 136.158606][ T4241] tipc: Node number set to 2180176527 [ 136.215952][ T5113] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 137.015366][ T5113] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 137.195371][ T13] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 138.210865][ T5129] overlayfs: missing 'lowerdir' [ 138.457705][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.475180][ T13] usb 3-1: Product: syz [ 138.500695][ T4982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.654090][ T13] usb 3-1: can't set config #129, error -71 [ 138.669012][ T5133] futex_wake_op: syz.2.241 tries to shift op by 36; fix this program [ 138.678230][ T13] usb 3-1: USB disconnect, device number 2 [ 138.729022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.744745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.772984][ T4982] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.833264][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.871560][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.933084][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.939803][ T5142] loop3: detected capacity change from 0 to 256 [ 138.940233][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.995063][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.034229][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.095839][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.119609][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.126721][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.216179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.388294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.411876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.696761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.965052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.124372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.163157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.270600][ T4982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.313414][ T4982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.329345][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.357228][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.458080][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.665823][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.747239][ T5164] loop1: detected capacity change from 0 to 512 [ 140.762498][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.885077][ T4375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.235638][ T5169] loop4: detected capacity change from 0 to 512 [ 141.328849][ T4375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.387292][ T5169] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 141.491888][ T5164] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.616615][ T5169] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 141.635091][ T5169] ext4 filesystem being mounted at /56/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.085788][ T5164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.110240][ T4375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.133344][ T5173] binder: 5151:5173 ioctl c018620c 200000000280 returned -1 [ 142.166564][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 142.166576][ T26] audit: type=1326 audit(1758687852.427:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 142.459394][ T5164] EXT4-fs: failed to create workqueue [ 142.574458][ T5179] overlayfs: missing 'lowerdir' [ 142.954378][ T26] audit: type=1326 audit(1758687852.427:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 142.985246][ T5164] EXT4-fs (loop1): mount failed [ 143.000441][ T26] audit: type=1326 audit(1758687852.427:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.089664][ T26] audit: type=1326 audit(1758687852.427:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.182847][ T26] audit: type=1326 audit(1758687852.427:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.282689][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.314934][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.333481][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.335203][ T26] audit: type=1326 audit(1758687852.427:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.464067][ T26] audit: type=1326 audit(1758687852.427:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.512797][ T4375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.749649][ T26] audit: type=1326 audit(1758687852.427:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 143.911974][ T5194] loop2: detected capacity change from 0 to 512 [ 144.475302][ T26] audit: type=1326 audit(1758687852.427:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 144.549820][ T26] audit: type=1326 audit(1758687852.427:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5151 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 144.827430][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.847836][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.927300][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.967571][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.008280][ T4982] device veth0_vlan entered promiscuous mode [ 145.015959][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.067161][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.116336][ T4982] device veth1_vlan entered promiscuous mode [ 145.792711][ T4982] device veth0_macvtap entered promiscuous mode [ 145.822356][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.848680][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.930854][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.001745][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.086353][ T4982] device veth1_macvtap entered promiscuous mode [ 146.261624][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.294941][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.361381][ T5219] loop3: detected capacity change from 0 to 256 [ 146.694617][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.766676][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.795276][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.826754][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.890065][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.927511][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.937584][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.949022][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.958860][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.969556][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.980672][ T4982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.090143][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.335051][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.592373][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.628111][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.648270][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.698819][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.708986][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.735250][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.745069][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.770094][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.911067][ T4982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.012584][ T4982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.063357][ T4982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.243662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.269227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.301227][ T4982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.321162][ T4982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.343200][ T4982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.372509][ T4982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.554569][ T5233] input: syz1 as /devices/virtual/input/input5 [ 148.610525][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.664545][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.751475][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.775508][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.783492][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.863485][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.917410][ T5242] loop3: detected capacity change from 0 to 1024 [ 149.172283][ T5242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.219495][ T5242] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.258484][ T5256] overlayfs: missing 'lowerdir' [ 150.739246][ T5275] loop5: detected capacity change from 0 to 256 [ 150.927049][ T5273] loop3: detected capacity change from 0 to 256 [ 151.160796][ T4375] device hsr_slave_0 left promiscuous mode [ 151.251867][ T4375] device hsr_slave_1 left promiscuous mode [ 151.270288][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.405095][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.492468][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.524530][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.774989][ T4375] device bridge_slave_1 left promiscuous mode [ 151.946409][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.221301][ T4375] device bridge_slave_0 left promiscuous mode [ 152.240999][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.818775][ T4375] device veth1_macvtap left promiscuous mode [ 152.865829][ T4375] device veth0_macvtap left promiscuous mode [ 152.901433][ T4375] device veth1_vlan left promiscuous mode [ 152.986553][ T4375] device veth0_vlan left promiscuous mode [ 153.099342][ T5300] loop1: detected capacity change from 0 to 2048 [ 153.247975][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.265457][ T5300] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.315137][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 153.315148][ T26] audit: type=1800 audit(1758687863.607:42): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.273" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 153.359466][ T5300] fs-verity: sha256 using implementation "sha256-avx2" [ 153.534412][ T4375] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 153.967818][ T5300] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 154.071847][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 154.113592][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 154.125598][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.139433][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.243672][ T4375] bond0 (unregistering): Released all slaves [ 155.921815][ T5321] loop3: detected capacity change from 0 to 512 [ 156.040309][ T5321] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 157.105891][ T5328] overlayfs: missing 'lowerdir' [ 157.209822][ T5321] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.380863][ T26] audit: type=1326 audit(1758687867.637:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 158.334573][ T26] audit: type=1326 audit(1758687867.647:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 158.690465][ T26] audit: type=1326 audit(1758687867.657:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 158.718061][ T5339] loop5: detected capacity change from 0 to 256 [ 158.747410][ T26] audit: type=1326 audit(1758687867.657:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 158.979240][ T26] audit: type=1326 audit(1758687867.657:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.094886][ T26] audit: type=1326 audit(1758687867.667:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.212862][ T26] audit: type=1326 audit(1758687867.667:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.317869][ T26] audit: type=1326 audit(1758687867.667:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.411711][ T26] audit: type=1326 audit(1758687867.677:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.525312][ T26] audit: type=1326 audit(1758687867.677:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 159.603756][ T26] audit: type=1326 audit(1758687867.677:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624cf73ec9 code=0x7ffc0000 [ 161.968805][ T4227] Bluetooth: hci3: command 0x0409 tx timeout [ 162.413632][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 162.787358][ T5397] loop2: detected capacity change from 0 to 128 [ 163.058248][ T5397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.091893][ T5405] capability: warning: `syz.3.293' uses deprecated v2 capabilities in a way that may be insecure [ 163.111830][ T5397] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.249916][ T5397] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop2' because it doesn't have stable inode numbers [ 163.286960][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.319648][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.332191][ T5356] device bridge_slave_0 entered promiscuous mode [ 163.362050][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.372898][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.388241][ T5356] device bridge_slave_1 entered promiscuous mode [ 163.426313][ T5411] loop1: detected capacity change from 0 to 256 [ 163.574663][ T5416] loop3: detected capacity change from 0 to 512 [ 163.619839][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.635304][ T4227] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.667727][ T5416] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 163.678629][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.713776][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 163.731327][ T5416] ext4 filesystem being mounted at /72/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.875271][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 163.992470][ T5356] team0: Port device team_slave_0 added [ 163.998914][ T4227] usb 3-1: config 8 has an invalid interface number: 106 but max is 0 [ 164.013905][ T4227] usb 3-1: config 8 has no interface number 0 [ 164.024277][ T4227] usb 3-1: config 8 interface 106 has no altsetting 0 [ 164.041494][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 164.061235][ T5356] team0: Port device team_slave_1 added [ 164.171073][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.202917][ T4227] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=f2.78 [ 164.233634][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.264721][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.282275][ T4227] usb 3-1: Product: syz [ 164.288000][ T4227] usb 3-1: Manufacturer: syz [ 164.292681][ T4227] usb 3-1: SerialNumber: syz [ 164.338989][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.386185][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.429574][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.513916][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.618306][ T4227] zaurus 3-1:8.106: invalid descriptor buffer length [ 164.643474][ T4227] usb 3-1: bad CDC descriptors [ 164.673585][ T4227] usb 3-1: USB disconnect, device number 3 [ 164.714364][ T5356] device hsr_slave_0 entered promiscuous mode [ 164.732286][ T5356] device hsr_slave_1 entered promiscuous mode [ 164.776528][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.793680][ T5356] Cannot create hsr debugfs directory [ 165.987706][ T5461] loop1: detected capacity change from 0 to 256 [ 166.095842][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 167.086130][ T26] audit: type=1326 audit(1758687877.257:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5457 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ea136ec9 code=0x7ffc0000 [ 167.343863][ T5469] loop3: detected capacity change from 0 to 512 [ 167.450158][ T26] audit: type=1326 audit(1758687877.257:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5457 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ea136ec9 code=0x7ffc0000 [ 167.707415][ T5469] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 168.032241][ T5469] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 168.050769][ T5469] ext4 filesystem being mounted at /77/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.277410][ T4172] Bluetooth: hci3: command 0x0419 tx timeout [ 169.068679][ T5356] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.192032][ T5356] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.335670][ T5356] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.423843][ T5356] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.391392][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.441121][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.477225][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.496382][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.544583][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.573739][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.605682][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.612741][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.661701][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.685830][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.724798][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.731923][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.775560][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.844760][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.854721][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.894080][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.937345][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.971071][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.012044][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.045341][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.093717][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.132977][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.167991][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.207665][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.243841][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.297330][ T5513] loop3: detected capacity change from 0 to 40427 [ 171.425549][ T5513] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 171.433309][ T5513] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.511971][ T5513] F2FS-fs (loop3): invalid crc value [ 171.567641][ T5513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.687411][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.694845][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.743659][ T5513] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 171.753093][ T5513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 171.768753][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.876585][ T5513] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.973768][ T4375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.055384][ T5553] netlink: 172 bytes leftover after parsing attributes in process `syz.2.316'. [ 172.084191][ T4375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.117415][ T5553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 172.155764][ T5553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 172.201349][ T4375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.320399][ T5564] loop2: detected capacity change from 0 to 256 [ 172.337094][ T4375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.425141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.458946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.478835][ T5564] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 172.596676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.667735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.703568][ T5356] device veth0_vlan entered promiscuous mode [ 172.745558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.768465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.808764][ T5356] device veth1_vlan entered promiscuous mode [ 173.605900][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.624567][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.653378][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.609454][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.775310][ T5356] device veth0_macvtap entered promiscuous mode [ 175.793449][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.937575][ T5356] device veth1_macvtap entered promiscuous mode [ 175.984936][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.018882][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.039420][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.060171][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.080389][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.095807][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.172025][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.260947][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.288760][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.322874][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.361510][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.885822][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.894548][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.977750][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.021617][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.036668][ T5621] loop3: detected capacity change from 0 to 16 [ 177.049486][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.074921][ T5621] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.101730][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.122484][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.135996][ T5621] attempt to access beyond end of device [ 177.135996][ T5621] loop3: rw=0, want=15300821032, limit=16 [ 177.215575][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.249404][ T5621] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 177.259468][ T5628] attempt to access beyond end of device [ 177.259468][ T5628] loop3: rw=0, want=15300821032, limit=16 [ 177.294110][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.311157][ T5628] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 177.330959][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.379434][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.435357][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.493262][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.580332][ T5356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.589258][ T5356] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.597993][ T5356] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.607347][ T5356] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.629040][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.650447][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.691500][ T5639] loop1: detected capacity change from 0 to 128 [ 177.818861][ T5643] loop3: detected capacity change from 0 to 512 [ 177.862014][ T5639] EXT4-fs (loop1): Test dummy encryption mode enabled [ 179.446607][ T5643] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.501536][ T5639] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 179.516618][ T5639] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.530775][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 180.566658][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 180.603329][ T5652] device veth1_macvtap left promiscuous mode [ 180.673047][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.822558][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.975301][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 180.982486][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 181.012237][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 181.201367][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.738935][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.794241][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.022430][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.078297][ T5689] netlink: 288 bytes leftover after parsing attributes in process `syz.3.340'. [ 183.333835][ T5706] loop6: detected capacity change from 0 to 16 [ 184.687598][ T5706] erofs: (device loop6): mounted with root inode @ nid 36. [ 184.772123][ T5706] attempt to access beyond end of device [ 184.772123][ T5706] loop6: rw=0, want=15300821032, limit=16 [ 184.787823][ T5706] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 184.799850][ T5706] attempt to access beyond end of device [ 184.799850][ T5706] loop6: rw=0, want=15300821032, limit=16 [ 184.815428][ T5706] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 187.551592][ T5760] syz.2.355[5760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.552386][ T5760] syz.2.355[5760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.987359][ T5764] loop6: detected capacity change from 0 to 512 [ 188.075913][ T5765] loop1: detected capacity change from 0 to 512 [ 188.138638][ T5765] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 188.224836][ T5765] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 188.242708][ T5765] ext4 filesystem being mounted at /76/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.262010][ T5765] EXT4-fs error (device loop1): __ext4_new_inode:1286: comm syz.1.350: failed to insert inode 16: doubly allocated? [ 188.389002][ T5764] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 188.579711][ T5764] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.167565][ T4375] device hsr_slave_0 left promiscuous mode [ 189.186992][ T4375] device hsr_slave_1 left promiscuous mode [ 190.225581][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.245211][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.284423][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.303922][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.359007][ T4375] bridge0: port 3(team0) entered disabled state [ 190.404310][ T4375] device bridge_slave_1 left promiscuous mode [ 190.457831][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.549720][ T4375] device bridge_slave_0 left promiscuous mode [ 190.592292][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.634417][ T4375] device veth1_macvtap left promiscuous mode [ 190.680047][ T4375] device veth0_macvtap left promiscuous mode [ 190.699411][ T4375] device veth1_vlan left promiscuous mode [ 190.743332][ T4375] device veth0_vlan left promiscuous mode [ 190.785266][ T26] audit: type=1326 audit(1758687901.027:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.405254][ T26] audit: type=1326 audit(1758687901.027:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.485436][ T26] audit: type=1326 audit(1758687901.027:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.538509][ T26] audit: type=1326 audit(1758687901.027:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.565222][ T26] audit: type=1326 audit(1758687901.027:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.588280][ T26] audit: type=1326 audit(1758687901.027:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.746858][ T26] audit: type=1326 audit(1758687901.027:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.780727][ T26] audit: type=1326 audit(1758687901.027:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 191.803794][ T26] audit: type=1326 audit(1758687901.027:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19be96eec9 code=0x7ffc0000 [ 192.635525][ T4375] device team_slave_1 left promiscuous mode [ 192.674598][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 192.702399][ T4375] device team_slave_0 left promiscuous mode [ 192.731438][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 192.746083][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.802492][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.164938][ T5812] netlink: 44 bytes leftover after parsing attributes in process `syz.5.367'. [ 193.173926][ T5812] netlink: 'syz.5.367': attribute type 1 has an invalid length. [ 193.210700][ T5812] fuse: Bad value for 'fd' [ 193.826845][ T4375] bond0 (unregistering): Released all slaves [ 193.941407][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.955200][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.011092][ T5829] loop3: detected capacity change from 0 to 128 [ 195.104192][ T5829] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59572!=65535) [ 195.131735][ T5829] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.370: iget: checksum invalid [ 195.213089][ T5829] EXT4-fs (loop3): get root inode failed [ 195.221704][ T5829] EXT4-fs (loop3): mount failed [ 195.276317][ T5836] loop2: detected capacity change from 0 to 512 [ 195.702327][ T5836] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.713626][ T5836] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.484443][ T5851] loop3: detected capacity change from 0 to 128 [ 196.565129][ T5851] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.685267][ T5851] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.822448][ T5851] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 197.405346][ T5599] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 198.005425][ T5599] usb 4-1: Using ep0 maxpacket: 32 [ 198.216655][ T5599] usb 4-1: config 8 has an invalid interface number: 106 but max is 0 [ 198.282053][ T5599] usb 4-1: config 8 has no interface number 0 [ 198.331238][ T5599] usb 4-1: config 8 interface 106 has no altsetting 0 [ 198.364931][ T5883] loop5: detected capacity change from 0 to 256 [ 198.846420][ T5599] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=f2.78 [ 199.096975][ T5599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.395565][ T5599] usb 4-1: Product: syz [ 199.399804][ T5599] usb 4-1: Manufacturer: syz [ 199.404412][ T5599] usb 4-1: SerialNumber: syz [ 199.532951][ T5898] overlayfs: failed to resolve './file1': -2 [ 200.022140][ T5902] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 200.025405][ T5599] usb 4-1: can't set config #8, error -71 [ 200.101888][ T5599] usb 4-1: USB disconnect, device number 2 [ 200.477197][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 200.592723][ T5916] loop6: detected capacity change from 0 to 512 [ 200.665710][ T4234] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 203.279527][ T5930] loop1: detected capacity change from 0 to 256 [ 203.292660][ T5928] loop3: detected capacity change from 0 to 512 [ 203.305656][ T4234] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 203.316068][ T4234] usb 6-1: can't read configurations, error -71 [ 203.377923][ T5930] exfat: Deprecated parameter 'namecase' [ 203.435884][ T5930] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 203.510840][ T5928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.543685][ T5944] loop5: detected capacity change from 0 to 256 [ 203.570248][ T5928] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.897775][ T5957] capability: warning: `syz.6.398' uses 32-bit capabilities (legacy support in use) [ 206.143556][ T5966] loop1: detected capacity change from 0 to 512 [ 206.614421][ T5969] fuse: Bad value for 'user_id' [ 206.805808][ T5966] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 207.174132][ T5969] loop6: detected capacity change from 0 to 40427 [ 207.309803][ T5966] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 207.327840][ T5966] ext4 filesystem being mounted at /81/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.844744][ T5969] F2FS-fs (loop6): Found nat_bits in checkpoint [ 208.135909][ T5969] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 208.582230][ T5988] xt_CONNSECMARK: invalid mode: 0 [ 209.167303][ T6002] loop1: detected capacity change from 0 to 256 [ 209.417830][ T6002] FAT-fs (loop1): Directory bread(block 64) failed [ 209.424615][ T6002] FAT-fs (loop1): Directory bread(block 65) failed [ 209.431616][ T6002] FAT-fs (loop1): Directory bread(block 66) failed [ 209.438278][ T6002] FAT-fs (loop1): Directory bread(block 67) failed [ 209.445093][ T6002] FAT-fs (loop1): Directory bread(block 68) failed [ 209.451792][ T6002] FAT-fs (loop1): Directory bread(block 69) failed [ 209.458736][ T6002] FAT-fs (loop1): Directory bread(block 70) failed [ 209.465421][ T6002] FAT-fs (loop1): Directory bread(block 71) failed [ 209.472471][ T6002] FAT-fs (loop1): Directory bread(block 72) failed [ 209.479159][ T6002] FAT-fs (loop1): Directory bread(block 73) failed [ 210.179807][ T6006] loop1: detected capacity change from 0 to 1024 [ 210.325267][ T6006] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.425468][ T6006] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.734979][ T5993] loop5: detected capacity change from 0 to 512 [ 210.862068][ T5993] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec01c, mo2=0002] [ 210.886334][ T5993] System zones: 0-7 [ 210.891111][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,quota,min_batch_time=0x0000000000000200,,errors=continue. Quota mode: writeback. [ 211.240220][ T6016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.407: bg 0: block 393: padding at end of block bitmap is not set [ 211.441299][ T6038] loop3: detected capacity change from 0 to 256 [ 211.596715][ T6043] loop5: detected capacity change from 0 to 512 [ 211.719790][ T6043] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 211.837577][ T6043] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.729076][ T4303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 212.791381][ T4303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 212.791381][ T4303] [ 212.865172][ T4303] EXT4-fs (loop1): Total free blocks count 0 [ 212.900225][ T4303] EXT4-fs (loop1): Free/Dirty block details [ 212.954615][ T4303] EXT4-fs (loop1): free_blocks=0 [ 212.975238][ T4303] EXT4-fs (loop1): dirty_blocks=16 [ 213.014638][ T4303] EXT4-fs (loop1): Block reservation details [ 213.021053][ T4303] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 213.644334][ T6076] loop6: detected capacity change from 0 to 128 [ 216.359451][ T6099] loop1: detected capacity change from 0 to 256 [ 216.968477][ T6110] loop6: detected capacity change from 0 to 256 [ 217.172202][ T6114] loop2: detected capacity change from 0 to 512 [ 217.190694][ T6115] fuse: Bad value for 'user_id' [ 217.334728][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 217.457443][ T6114] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.464876][ T6115] loop1: detected capacity change from 0 to 40427 [ 217.620543][ T6115] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.657892][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.713016][ T6115] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.911842][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 218.115388][ T6136] xt_CONNSECMARK: invalid mode: 0 [ 218.378959][ T6132] loop2: detected capacity change from 0 to 16 [ 218.632429][ T6132] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.919923][ T6132] attempt to access beyond end of device [ 218.919923][ T6132] loop2: rw=0, want=15300821032, limit=16 [ 219.042610][ T6132] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 219.075482][ T1108] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.084217][ T1108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.105168][ T1108] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.114214][ T1108] usb 6-1: config 1 has no interface number 1 [ 219.129722][ T1108] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 219.184780][ T6144] input: syz1 as /devices/virtual/input/input6 [ 219.293932][ T6144] Zero length message leads to an empty skb [ 219.355446][ T1108] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.384995][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.445471][ T1108] usb 6-1: Product: syz [ 219.527689][ T6153] futex_wake_op: syz.1.430 tries to shift op by 36; fix this program [ 220.150537][ T1108] usb 6-1: Manufacturer: syz [ 220.175190][ T1108] usb 6-1: SerialNumber: syz [ 220.345329][ T1108] usb 6-1: can't set config #1, error -71 [ 220.352307][ T1108] usb 6-1: USB disconnect, device number 4 [ 221.649124][ T6173] loop1: detected capacity change from 0 to 256 [ 221.705818][ T6173] exfat: Deprecated parameter 'utf8' [ 221.711175][ T6173] exfat: Deprecated parameter 'utf8' [ 221.716650][ T6173] exfat: Deprecated parameter 'namecase' [ 221.743039][ T6173] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 221.913040][ T4234] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 223.083617][ T6184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.092446][ T6184] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 223.100787][ T6184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.149351][ T6188] fuse: Bad value for 'user_id' [ 223.305945][ T4234] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.436199][ T4234] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.929489][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.938921][ T4234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 223.944927][ T6188] loop1: detected capacity change from 0 to 40427 [ 224.125246][ T4234] usb 4-1: string descriptor 0 read error: -71 [ 224.131607][ T4234] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.145320][ T1108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 224.158460][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.221382][ T6203] futex_wake_op: syz.5.443 tries to shift op by 36; fix this program [ 224.395754][ T4234] usb 4-1: can't set config #1, error -71 [ 224.536169][ T6188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 224.724409][ T4234] usb 4-1: USB disconnect, device number 3 [ 224.745400][ T6188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.979033][ T6188] xt_CONNSECMARK: invalid mode: 0 [ 225.357665][ T1108] usb 7-1: Using ep0 maxpacket: 16 [ 225.485453][ T1108] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 225.518410][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.547837][ T1108] usb 7-1: config 0 descriptor?? [ 225.596743][ T1108] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 226.510945][ T1108] usb 7-1: Detected FT232BM [ 226.562004][ T6229] loop2: detected capacity change from 0 to 1024 [ 226.989355][ T6242] loop5: detected capacity change from 0 to 256 [ 227.144960][ T6242] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 227.616020][ T6229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.688090][ T6229] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.025362][ T1108] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 228.124185][ T6256] binder: 6249:6256 ioctl c018620c 200000000280 returned -1 [ 228.719194][ T1108] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 228.734678][ T1108] usb 7-1: USB disconnect, device number 2 [ 228.745242][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 228.855464][ T26] audit: type=1326 audit(1758687938.407:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 228.891185][ T1108] ftdi_sio 7-1:0.0: device disconnected [ 229.150216][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.452'. [ 229.388914][ T26] audit: type=1326 audit(1758687938.407:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 229.635156][ T26] audit: type=1326 audit(1758687938.407:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 229.714918][ T6247] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 229.915885][ T6261] loop6: detected capacity change from 0 to 128 [ 230.010888][ T6270] syz.5.454[6270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.011508][ T6270] syz.5.454[6270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.749146][ T6270] loop5: detected capacity change from 0 to 256 [ 232.717709][ T4302] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 232.739551][ T26] audit: type=1326 audit(1758687938.407:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 232.935015][ T6269] futex_wake_op: syz.3.455 tries to shift op by 36; fix this program [ 232.992083][ T6270] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 233.102959][ T26] audit: type=1326 audit(1758687938.407:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 233.135193][ T4302] EXT4-fs (loop2): This should not happen!! Data will be lost [ 233.135193][ T4302] [ 233.145807][ T26] audit: type=1326 audit(1758687938.407:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 233.271057][ T4302] EXT4-fs (loop2): Total free blocks count 0 [ 233.311817][ T4302] EXT4-fs (loop2): Free/Dirty block details [ 233.369007][ T6279] loop1: detected capacity change from 0 to 128 [ 233.401426][ T4302] EXT4-fs (loop2): free_blocks=0 [ 233.416412][ T4302] EXT4-fs (loop2): dirty_blocks=16 [ 233.421643][ T4302] EXT4-fs (loop2): Block reservation details [ 233.648472][ T4302] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 234.189824][ T26] audit: type=1326 audit(1758687938.417:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.263173][ T26] audit: type=1326 audit(1758687938.417:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.409036][ T26] audit: type=1326 audit(1758687938.417:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.580440][ T26] audit: type=1326 audit(1758687938.417:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.604284][ T26] audit: type=1326 audit(1758687938.417:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.626700][ T26] audit: type=1326 audit(1758687938.417:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.648974][ T26] audit: type=1326 audit(1758687938.427:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 234.672811][ T26] audit: type=1326 audit(1758687938.427:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.6.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2d81aec9 code=0x7ffc0000 [ 236.045380][ T6312] loop6: detected capacity change from 0 to 512 [ 237.769765][ T6312] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 237.885140][ T6318] loop1: detected capacity change from 0 to 128 [ 238.037180][ T6323] loop5: detected capacity change from 0 to 128 [ 238.092242][ T6323] EXT4-fs (loop5): Test dummy encryption mode enabled [ 238.119205][ T6312] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 238.137082][ T6312] ext4 filesystem being mounted at /22/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.321569][ T6323] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 238.336090][ T6323] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.638299][ T6318] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.698443][ T6318] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.087340][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 239.340278][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 239.455252][ T4256] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 239.485310][ T4234] usb 2-1: config 8 has an invalid interface number: 106 but max is 0 [ 239.496930][ T4234] usb 2-1: config 8 has no interface number 0 [ 239.513030][ T4234] usb 2-1: config 8 interface 106 has no altsetting 0 [ 239.576142][ T6350] futex_wake_op: syz.2.469 tries to shift op by 36; fix this program [ 239.695647][ T4234] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=f2.78 [ 239.712360][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.734230][ T4234] usb 2-1: Product: syz [ 239.741023][ T4234] usb 2-1: Manufacturer: syz [ 239.750917][ T4234] usb 2-1: SerialNumber: syz [ 239.875419][ T4256] usb 4-1: config 1 interface 0 has no altsetting 0 [ 239.995391][ T4256] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.014707][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.045064][ T4256] usb 4-1: SerialNumber: syz [ 240.105890][ T6329] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 240.125905][ T4234] zaurus 2-1:8.106: invalid descriptor buffer length [ 240.133091][ T4234] usb 2-1: bad CDC descriptors [ 240.175313][ T4234] usb 2-1: USB disconnect, device number 2 [ 240.355507][ T4256] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 240.392106][ T4256] usb 4-1: USB disconnect, device number 4 [ 241.093078][ T6369] loop2: detected capacity change from 0 to 256 [ 241.509741][ T6374] loop6: detected capacity change from 0 to 128 [ 243.921309][ T6389] loop1: detected capacity change from 0 to 512 [ 244.390392][ T6389] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.479: casefold flag without casefold feature [ 244.482604][ T6389] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.479: couldn't read orphan inode 15 (err -117) [ 244.504568][ T6389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.318444][ T6405] loop3: detected capacity change from 0 to 16 [ 245.437980][ T6405] erofs: (device loop3): mounted with root inode @ nid 36. [ 245.659912][ T6408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.669062][ T6408] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.840521][ T6405] attempt to access beyond end of device [ 245.840521][ T6405] loop3: rw=0, want=15300821032, limit=16 [ 245.965297][ T6405] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 246.155160][ T4291] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 247.075174][ T4291] usb 7-1: Using ep0 maxpacket: 32 [ 247.215526][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 247.220594][ T4291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.247353][ T4291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.274644][ T4291] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.329913][ T4291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.330048][ T6430] loop3: detected capacity change from 0 to 512 [ 247.381054][ T4291] usb 7-1: config 0 descriptor?? [ 247.441308][ T4291] hub 7-1:0.0: USB hub found [ 247.506455][ T6430] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 247.568362][ T6430] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.645454][ T4291] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 247.793710][ T6451] futex_wake_op: syz.1.484 tries to shift op by 36; fix this program [ 248.515229][ T4291] usbhid 7-1:0.0: can't add hid device: -71 [ 248.531701][ T4291] usbhid: probe of 7-1:0.0 failed with error -71 [ 248.595984][ T4291] usb 7-1: USB disconnect, device number 3 [ 249.605190][ T4291] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 249.755376][ T6478] loop5: detected capacity change from 0 to 128 [ 250.237205][ T6481] overlayfs: missing 'lowerdir' [ 251.370790][ T6491] netlink: 44 bytes leftover after parsing attributes in process `syz.6.494'. [ 251.380097][ T6491] netlink: 'syz.6.494': attribute type 1 has an invalid length. [ 251.478711][ T6491] fuse: Bad value for 'fd' [ 253.175211][ T4291] usb 3-1: device descriptor read/all, error -71 [ 253.464631][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.496'. [ 253.476409][ T6509] device ip6tnl1 entered promiscuous mode [ 254.362203][ T6516] loop3: detected capacity change from 0 to 512 [ 255.367677][ T6521] loop2: detected capacity change from 0 to 512 [ 256.125457][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.131763][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.160170][ T6526] loop5: detected capacity change from 0 to 512 [ 256.501666][ T6521] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 256.524569][ T6526] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.631935][ T6526] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.663270][ T6521] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.106892][ T6545] syz.5.503[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.106980][ T6545] syz.5.503[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.272135][ T6531] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 259.517602][ T6531] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 259.590040][ T6531] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 260.020482][ T6531] syz.6.502 (6531) used greatest stack depth: 18664 bytes left [ 260.401004][ T6570] loop5: detected capacity change from 0 to 512 [ 260.693284][ T6580] loop2: detected capacity change from 0 to 128 [ 262.434154][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 262.443365][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.675369][ T4226] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 264.909599][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.140709][ T6609] futex_wake_op: syz.5.513 tries to shift op by 36; fix this program [ 265.303253][ T6613] loop6: detected capacity change from 0 to 512 [ 265.452246][ T6613] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 265.552030][ T6613] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.275633][ T6627] futex_wake_op: syz.1.514 tries to shift op by 36; fix this program [ 268.586213][ T6651] loop6: detected capacity change from 0 to 1024 [ 268.627043][ T6656] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 268.846392][ T6659] loop5: detected capacity change from 0 to 512 [ 268.977875][ T6659] EXT4-fs (loop5): invalid first ino: 0 [ 271.173456][ T6687] futex_wake_op: syz.5.533 tries to shift op by 36; fix this program [ 271.257764][ T6700] loop1: detected capacity change from 0 to 512 [ 271.304935][ T6700] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 271.593076][ T6664] loop3: detected capacity change from 0 to 40427 [ 271.688104][ T6664] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 271.724506][ T6664] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 271.744525][ T6664] F2FS-fs (loop3): invalid crc value [ 271.782164][ T6664] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.288429][ T6723] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 272.330996][ T6664] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 272.345611][ T6664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.507925][ T6664] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 272.555337][ T6664] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 272.579887][ T6734] loop1: detected capacity change from 0 to 256 [ 272.669671][ T6734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 272.725030][ T4256] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.835302][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 275.208123][ T4256] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 275.219164][ T4256] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.055485][ T4256] usb 3-1: string descriptor 0 read error: -71 [ 277.061762][ T4256] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.085147][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.295843][ T4256] usb 3-1: can't set config #1, error -71 [ 277.466269][ T4256] usb 3-1: USB disconnect, device number 6 [ 278.085474][ T6767] syz.2.550[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.086121][ T6767] syz.2.550[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.359143][ T6774] loop1: detected capacity change from 0 to 512 [ 279.299493][ T6776] loop5: detected capacity change from 0 to 512 [ 280.247026][ T6774] EXT4-fs (loop1): Ignoring removed nobh option [ 280.329787][ T6774] EXT4-fs (loop1): orphan cleanup on readonly fs [ 280.392579][ T6776] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.404102][ T6776] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.619397][ T6774] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 280.705616][ T6774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 280.827791][ T6791] loop6: detected capacity change from 0 to 256 [ 281.619307][ T6774] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.553: attempt to clear invalid blocks 2 len 1 [ 281.725230][ T6774] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.553: invalid indirect mapped block 1819239214 (level 0) [ 281.832761][ T6774] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.553: invalid indirect mapped block 1819239214 (level 1) [ 281.979651][ T6774] EXT4-fs (loop1): 1 truncate cleaned up [ 281.985494][ T6774] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,nobh,bsddf,nojournal_checksum,grpjquota=..,errors=continue. Quota mode: writeback. [ 282.461843][ T6791] FAT-fs (loop6): Directory bread(block 64) failed [ 282.468785][ T6791] FAT-fs (loop6): Directory bread(block 65) failed [ 282.475750][ T6791] FAT-fs (loop6): Directory bread(block 66) failed [ 282.482458][ T6791] FAT-fs (loop6): Directory bread(block 67) failed [ 282.489294][ T6791] FAT-fs (loop6): Directory bread(block 68) failed [ 282.496061][ T6791] FAT-fs (loop6): Directory bread(block 69) failed [ 282.503093][ T6791] FAT-fs (loop6): Directory bread(block 70) failed [ 282.509814][ T6791] FAT-fs (loop6): Directory bread(block 71) failed [ 282.516736][ T6791] FAT-fs (loop6): Directory bread(block 72) failed [ 282.523425][ T6791] FAT-fs (loop6): Directory bread(block 73) failed [ 283.685966][ T6818] futex_wake_op: syz.3.562 tries to shift op by 36; fix this program [ 284.137308][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 285.135930][ T6825] fuse: Bad value for 'user_id' [ 285.208722][ T6830] loop6: detected capacity change from 0 to 256 [ 286.016105][ T6850] loop6: detected capacity change from 0 to 512 [ 286.311094][ T6850] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.323216][ T6850] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.838812][ T6861] loop5: detected capacity change from 0 to 512 [ 287.584709][ T6861] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 287.641588][ T6861] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.415686][ T6861] EXT4-fs (loop5): 1 truncate cleaned up [ 288.455485][ T6861] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,journal_dev=0x0000000000000003,,errors=continue. Quota mode: none. [ 289.710312][ T6883] loop1: detected capacity change from 0 to 256 [ 294.728003][ T6914] loop1: detected capacity change from 0 to 512 [ 295.144315][ T6923] fuse: Bad value for 'user_id' [ 295.187761][ T6914] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 295.293949][ T6914] EXT4-fs (loop1): 1 truncate cleaned up [ 295.299926][ T6914] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 295.786759][ T6931] loop6: detected capacity change from 0 to 512 [ 298.595860][ T6953] loop5: detected capacity change from 0 to 512 [ 298.758203][ T6959] loop6: detected capacity change from 0 to 256 [ 298.786050][ T6953] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 298.878549][ T6953] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.000345][ T6963] futex_wake_op: syz.1.589 tries to shift op by 36; fix this program [ 299.671635][ T6976] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 299.704459][ T6976] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 299.941980][ T6985] loop1: detected capacity change from 0 to 512 [ 300.291879][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.303470][ T6985] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.001807][ T7001] loop2: detected capacity change from 0 to 512 [ 303.174116][ T7001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.456174][ T7001] EXT4-fs (loop2): 1 truncate cleaned up [ 304.461965][ T7001] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 305.752439][ T7019] loop1: detected capacity change from 0 to 512 [ 307.177782][ T7019] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 307.364956][ T7019] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 307.383035][ T7019] ext4 filesystem being mounted at /117/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.250133][ T7043] loop6: detected capacity change from 0 to 256 [ 309.410487][ T7049] loop3: detected capacity change from 0 to 512 [ 309.704820][ T7058] loop1: detected capacity change from 0 to 128 [ 310.613693][ T7049] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.612: casefold flag without casefold feature [ 310.903703][ T7049] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.612: couldn't read orphan inode 15 (err -117) [ 311.135989][ T7049] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.988227][ T7075] netlink: 'syz.6.616': attribute type 1 has an invalid length. [ 314.200036][ T7084] loop5: detected capacity change from 0 to 512 [ 315.581098][ T7095] loop2: detected capacity change from 0 to 512 [ 315.828937][ T7095] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 316.066915][ T7095] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 316.084863][ T7095] ext4 filesystem being mounted at /127/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.170087][ T7084] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 316.495761][ T7084] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.165798][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.172113][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.959923][ T7116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 318.017740][ T7117] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 320.414659][ T7163] loop3: detected capacity change from 0 to 512 [ 320.419735][ T7162] loop1: detected capacity change from 0 to 512 [ 320.468675][ T7163] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 320.587654][ T7162] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 320.609254][ T7163] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 320.627197][ T7163] ext4 filesystem being mounted at /149/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.665693][ T7162] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.843426][ T7183] futex_wake_op: syz.2.632 tries to shift op by 36; fix this program [ 322.007188][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.144974][ T7213] loop5: detected capacity change from 0 to 512 [ 323.262879][ T7216] xt_CONNSECMARK: invalid mode: 0 [ 326.840780][ T7248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.031336][ T7254] futex_wake_op: syz.3.655 tries to shift op by 36; fix this program [ 328.957544][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 329.074921][ T7252] loop6: detected capacity change from 0 to 512 [ 329.154181][ T7252] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 329.204688][ T7252] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 329.226645][ T7252] ext4 filesystem being mounted at /75/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.295921][ T7277] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 329.311773][ T7288] loop5: detected capacity change from 0 to 512 [ 331.141538][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.149313][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.280496][ T7288] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.291998][ T7288] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.070638][ T7311] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 437.705035][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 437.712118][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7323/1:b..l P5599/1:b..l P4465/1:b..l [ 437.722750][ C1] (detected by 1, t=10502 jiffies, g=19989, q=91) [ 437.729259][ C1] task:kworker/u4:13 state:R running task stack:22752 pid: 4465 ppid: 2 flags:0x00004000 [ 437.740791][ C1] Workqueue: bat_events batadv_nc_worker [ 437.746468][ C1] Call Trace: [ 437.749752][ C1] [ 437.752709][ C1] __schedule+0x11bb/0x4390 [ 437.757244][ C1] ? mark_lock+0x94/0x320 [ 437.761595][ C1] ? release_firmware_map_entry+0x190/0x190 [ 437.767503][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 437.772808][ C1] preempt_schedule_irq+0xb1/0x150 [ 437.777943][ C1] ? __cond_resched+0xb0/0xb0 [ 437.782627][ C1] ? rcu_is_watching+0x11/0xa0 [ 437.787400][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 437.793215][ C1] irqentry_exit+0x63/0x70 [ 437.797651][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 437.803647][ C1] RIP: 0010:batadv_nc_worker+0xeb/0x5c0 [ 437.809216][ C1] Code: 21 e6 f7 e8 67 7c 00 00 e8 a2 ba 2a 00 89 c5 31 ff 89 c6 e8 07 95 f9 f7 85 ed 74 10 e8 ee 75 e5 f7 84 c0 74 0e e8 95 91 f9 f7 56 e8 8e 91 f9 f7 eb 4f e8 77 ba 2a 00 89 c5 31 ff 89 c6 e8 dc [ 437.828839][ C1] RSP: 0018:ffffc9000398fbe0 EFLAGS: 00000293 [ 437.835020][ C1] RAX: ffffffff897e398b RBX: dffffc0000000000 RCX: ffff88802b5b0000 [ 437.842999][ C1] RDX: 0000000000000000 RSI: ffffffff8a59a460 RDI: ffffffff8a59a420 [ 437.851009][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 437.858985][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: 000000000000019d [ 437.866958][ C1] R13: ffff88801d4b8ce8 R14: ffff888076cacc80 R15: ffff88801a3c9c10 [ 437.874952][ C1] ? batadv_nc_worker+0xeb/0x5c0 [ 437.879924][ C1] process_one_work+0x863/0x1000 [ 437.884881][ C1] ? worker_detach_from_pool+0x240/0x240 [ 437.890547][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 437.895845][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 437.900882][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 437.906266][ C1] ? wq_worker_running+0x97/0x170 [ 437.911313][ C1] worker_thread+0xaa8/0x12a0 [ 437.916002][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 437.921353][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 437.927271][ C1] kthread+0x436/0x520 [ 437.931351][ C1] ? rcu_lock_release+0x20/0x20 [ 437.936205][ C1] ? kthread_blkcg+0xd0/0xd0 [ 437.940803][ C1] ret_from_fork+0x1f/0x30 [ 437.945239][ C1] [ 437.948261][ C1] task:kworker/1:9 state:R running task stack:25224 pid: 5599 ppid: 2 flags:0x00004000 [ 437.959045][ C1] Workqueue: mld mld_mca_work [ 437.963732][ C1] Call Trace: [ 437.967020][ C1] [ 437.969956][ C1] __schedule+0x11bb/0x4390 [ 437.974482][ C1] ? __schedule+0x11c3/0x4390 [ 437.979176][ C1] ? mark_lock+0x94/0x320 [ 437.983526][ C1] ? release_firmware_map_entry+0x190/0x190 [ 437.989445][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 437.994743][ C1] preempt_schedule_irq+0xb1/0x150 [ 437.999861][ C1] ? __cond_resched+0xb0/0xb0 [ 438.004562][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 438.010378][ C1] irqentry_exit+0x63/0x70 [ 438.014808][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 438.020285][ C1] RIP: 0010:igmp6_send+0x2e7/0x1430 [ 438.025503][ C1] Code: 00 00 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 f1 bb 24 f9 49 8b 07 65 48 ff 40 28 <65> 48 83 40 30 48 41 83 e6 f0 48 8b 44 24 48 4c 8d a8 50 02 00 00 [ 438.045123][ C1] RSP: 0018:ffffc900036cfa40 EFLAGS: 00000212 [ 438.051197][ C1] RAX: 0000607f46c50ed0 RBX: 1ffff1100c3f606c RCX: ffff88801d863b80 [ 438.059171][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 438.067142][ C1] RBP: ffffc900036cfbf8 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 438.075160][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: dffffc0000000000 [ 438.083153][ C1] R13: 000000000000000e R14: 000000000000000e R15: ffff8880220e86e0 [ 438.091194][ C1] ? mld_in_v1_mode+0x360/0x360 [ 438.096062][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 438.101275][ C1] ? read_lock_is_recursive+0x10/0x10 [ 438.106653][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 438.112556][ C1] ? _raw_spin_unlock+0x40/0x40 [ 438.117417][ C1] ? mld_in_v1_mode+0x2e3/0x360 [ 438.122278][ C1] mld_mca_work+0xb1/0x140 [ 438.126701][ C1] process_one_work+0x863/0x1000 [ 438.131669][ C1] ? worker_detach_from_pool+0x240/0x240 [ 438.137333][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 438.142636][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 438.147666][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 438.153052][ C1] ? wq_worker_running+0x97/0x170 [ 438.158098][ C1] worker_thread+0xaa8/0x12a0 [ 438.162806][ C1] kthread+0x436/0x520 [ 438.166886][ C1] ? rcu_lock_release+0x20/0x20 [ 438.171742][ C1] ? kthread_blkcg+0xd0/0xd0 [ 438.176336][ C1] ret_from_fork+0x1f/0x30 [ 438.180779][ C1] [ 438.183804][ C1] task:syz.1.680 state:R running task stack:23040 pid: 7323 ppid: 4181 flags:0x00004004 [ 438.194603][ C1] Call Trace: [ 438.197892][ C1] [ 438.200838][ C1] __schedule+0x11bb/0x4390 [ 438.205505][ C1] ? kmem_cache_free+0x8f/0x210 [ 438.210377][ C1] ? kasan_set_free_info+0x1f/0x40 [ 438.215497][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 438.220701][ C1] ? slab_free_freelist_hook+0xea/0x170 [ 438.226311][ C1] ? dev_hard_start_xmit+0x2a5/0x7e0 [ 438.231609][ C1] ? __dev_queue_xmit+0x19df/0x2ed0 [ 438.236812][ C1] ? ip6_finish_output2+0x1070/0x1500 [ 438.242193][ C1] ? ip6_fragment+0x1328/0x1ec0 [ 438.247052][ C1] ? ip6_xmit+0x1054/0x1670 [ 438.251564][ C1] ? sctp_packet_transmit+0x239f/0x2920 [ 438.257112][ C1] ? sctp_packet_singleton+0x230/0x330 [ 438.262581][ C1] ? sctp_sendmsg_to_asoc+0x1499/0x1d90 [ 438.268140][ C1] ? mark_lock+0x94/0x320 [ 438.272486][ C1] ? release_firmware_map_entry+0x190/0x190 [ 438.278385][ C1] ? lock_chain_count+0x20/0x20 [ 438.283254][ C1] ? preempt_schedule+0xa7/0xb0 [ 438.288128][ C1] preempt_schedule_common+0x82/0xd0 [ 438.293431][ C1] preempt_schedule+0xa7/0xb0 [ 438.298127][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 438.303781][ C1] ? unwind_next_frame+0xa3d/0x1d90 [ 438.308999][ C1] preempt_schedule_thunk+0x16/0x18 [ 438.314209][ C1] unwind_next_frame+0x12ac/0x1d90 [ 438.319335][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 438.324371][ C1] ? stack_trace_save+0xe0/0xe0 [ 438.329225][ C1] arch_stack_walk+0x10c/0x140 [ 438.334004][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 438.339316][ C1] stack_trace_save+0x98/0xe0 [ 438.344001][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 438.349150][ C1] ? memset+0x1e/0x40 [ 438.353145][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 438.358020][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 438.363115][ C1] slab_post_alloc_hook+0x4c/0x380 [ 438.368248][ C1] ? should_failslab+0x5/0x20 [ 438.372954][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 438.378250][ C1] ? __alloc_skb+0xf4/0x750 [ 438.382766][ C1] __alloc_skb+0xf4/0x750 [ 438.387118][ C1] ip6_frag_next+0x128/0xbb0 [ 438.391731][ C1] ip6_fragment+0x12d9/0x1ec0 [ 438.396457][ C1] ? nf_hook+0x350/0x350 [ 438.400729][ C1] ? ip6_frag_next+0xbb0/0xbb0 [ 438.405533][ C1] ip6_xmit+0x1054/0x1670 [ 438.409883][ C1] ? ip6_autoflowlabel+0xd0/0xd0 [ 438.414860][ C1] sctp_v6_xmit+0x980/0x1190 [ 438.419488][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 438.424701][ C1] ? rcu_lock_release+0x20/0x20 [ 438.429564][ C1] ? __skb_checksum+0x6fc/0x7a0 [ 438.434432][ C1] ? rcu_is_watching+0x11/0xa0 [ 438.439204][ C1] ? kmem_cache_free+0x14c/0x210 [ 438.444178][ C1] sctp_packet_transmit+0x239f/0x2920 [ 438.449581][ C1] sctp_packet_singleton+0x230/0x330 [ 438.454878][ C1] ? sctp_outq_select_transport+0x570/0x570 [ 438.460786][ C1] ? sctp_outq_select_transport+0x45d/0x570 [ 438.466773][ C1] ? sctp_transport_burst_limited+0x193/0x280 [ 438.472853][ C1] sctp_outq_flush+0x48f/0x30d0 [ 438.477750][ C1] ? rcu_is_watching+0x11/0xa0 [ 438.482533][ C1] ? enqueue_timer+0x225/0x520 [ 438.487314][ C1] ? sctp_outq_tail+0x8a0/0x8a0 [ 438.492186][ C1] ? sctp_outq_tail+0x600/0x8a0 [ 438.497042][ C1] ? sctp_outq_uncork+0x49/0xa0 [ 438.501905][ C1] sctp_do_sm+0x4e61/0x5500 [ 438.506426][ C1] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 438.512326][ C1] ? sctp_stream_init_ext+0x53/0x160 [ 438.517618][ C1] ? ____sys_sendmsg+0x5a2/0x8c0 [ 438.522560][ C1] ? ___sys_sendmsg+0x1f0/0x260 [ 438.527453][ C1] ? __sk_mem_raise_allocated+0x70d/0x1190 [ 438.533289][ C1] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 438.538685][ C1] sctp_sendmsg_to_asoc+0x1499/0x1d90 [ 438.544251][ C1] ? sctp_assoc_add_peer+0xe2c/0x15a0 [ 438.549657][ C1] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 438.555486][ C1] ? __sctp_connect+0xd20/0xd20 [ 438.560352][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 438.565738][ C1] ? lock_sock_nested+0x68/0x100 [ 438.570687][ C1] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 438.576246][ C1] ? security_sctp_bind_connect+0x85/0xb0 [ 438.581979][ C1] sctp_sendmsg+0x19ae/0x2950 [ 438.586675][ C1] ? aa_sk_perm+0x7b4/0x8f0 [ 438.591193][ C1] ? sctp_getsockopt+0x8a0/0x8a0 [ 438.596142][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 438.600653][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 438.607082][ C1] ? sock_rps_record_flow+0x17/0x3b0 [ 438.612379][ C1] ? inet_send_prepare+0x260/0x260 [ 438.617498][ C1] ? inet_sendmsg+0xe5/0x2f0 [ 438.622106][ C1] ? inet_send_prepare+0x260/0x260 [ 438.627224][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 438.632002][ C1] ? memset+0x1e/0x40 [ 438.635994][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 438.641036][ C1] ? import_iovec+0x6f/0xa0 [ 438.645567][ C1] ___sys_sendmsg+0x1f0/0x260 [ 438.650263][ C1] ? __sys_sendmsg+0x250/0x250 [ 438.655042][ C1] ? futex_wake+0x49f/0x530 [ 438.659580][ C1] ? __fdget+0x18b/0x210 [ 438.663835][ C1] __sys_sendmmsg+0x27c/0x4a0 [ 438.668543][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 438.673624][ C1] ? __context_tracking_exit+0x4c/0x80 [ 438.679116][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 438.685109][ C1] ? lock_chain_count+0x20/0x20 [ 438.689969][ C1] ? vtime_user_exit+0x2dc/0x400 [ 438.694924][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 438.699782][ C1] do_syscall_64+0x4c/0xa0 [ 438.704200][ C1] ? clear_bhb_loop+0x30/0x80 [ 438.708890][ C1] ? clear_bhb_loop+0x30/0x80 [ 438.713601][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.719505][ C1] RIP: 0033:0x7f624cf73ec9 [ 438.723941][ C1] RSP: 002b:00007f624b1db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.732379][ C1] RAX: ffffffffffffffda RBX: 00007f624d1cafa0 RCX: 00007f624cf73ec9 [ 438.740338][ C1] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 438.748293][ C1] RBP: 00007f624cff6f91 R08: 0000000000000000 R09: 0000000000000000 [ 438.756271][ C1] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000000 [ 438.764229][ C1] R13: 00007f624d1cb038 R14: 00007f624d1cafa0 R15: 00007ffc96a71c48 [ 438.772197][ C1]