last executing test programs: 1m53.855838514s ago: executing program 2 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="183b00000400000000000000000000001847000008000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000ffff0007010000f8ffffffb702000008000000b7030000040000008500000006"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 1m52.525729081s ago: executing program 2 (id=13): r0 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) epoll_pwait(r0, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) 1m52.156702426s ago: executing program 2 (id=16): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) listen(0xffffffffffffffff, 0xfffffffd) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000400009fde00000000000000", @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1m51.79392077s ago: executing program 2 (id=18): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@nojournal_checksum}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_clone(0x4000000, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x82, 0x500000001, 0x8000000000000001, 0x8}) 1m50.412530328s ago: executing program 2 (id=26): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m48.972724216s ago: executing program 2 (id=40): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) 1m48.479464012s ago: executing program 32 (id=40): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) 1m12.956822797s ago: executing program 3 (id=329): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m12.124384388s ago: executing program 3 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.028548489s ago: executing program 3 (id=338): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, &(0x7f0000000380), &(0x7f00000009c0)=0x4) 1m11.873761411s ago: executing program 3 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(r3, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 1m11.681388513s ago: executing program 3 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, 0x0, 0x32600) 1m9.408120682s ago: executing program 3 (id=358): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="07000000ad00", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1m9.013659767s ago: executing program 33 (id=358): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="07000000ad00", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 3.063382671s ago: executing program 5 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x22}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 2.865151573s ago: executing program 5 (id=950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, 0x0, &(0x7f0000000840)}, 0x20) 2.652034076s ago: executing program 5 (id=953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 2.551254567s ago: executing program 5 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.34840504s ago: executing program 5 (id=959): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) 2.183965452s ago: executing program 5 (id=963): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000740)=ANY=[], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001040), 0x8004c0, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000001140)={0x4, &(0x7f0000001100)=[{0x7, 0x0, 0x5}, {0x1, 0x3, 0x42, 0x10001}, {0x1, 0x1}, {0x2, 0x1, 0x7, 0xfff}]}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000001080)={0x2, 0x76, 0x10b, 0x0, 0x3}) 2.077735023s ago: executing program 6 (id=964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 1.896465346s ago: executing program 6 (id=967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.641549759s ago: executing program 6 (id=971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 1.408098322s ago: executing program 6 (id=974): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="140000000400008004000c000900000043bb290cb1e7a3e11d509ab80633a531ac97"], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x2}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x3, 0xb8, 0x40, 0x2, 0x0, 0x0, 0x9}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r2, &(0x7f00000003c0), 0x0) writev(r2, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) unshare(0x28020480) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.240312514s ago: executing program 4 (id=977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 1.240033224s ago: executing program 1 (id=978): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) 1.118130956s ago: executing program 4 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.108404196s ago: executing program 1 (id=980): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 1.074752366s ago: executing program 0 (id=981): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) close_range(r3, 0xffffffffffffffff, 0x0) 924.165258ms ago: executing program 4 (id=982): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 838.572749ms ago: executing program 1 (id=983): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 824.10141ms ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 712.228621ms ago: executing program 4 (id=985): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 685.377521ms ago: executing program 0 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 538.199823ms ago: executing program 0 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 479.394684ms ago: executing program 1 (id=988): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 437.547974ms ago: executing program 0 (id=989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 380.283775ms ago: executing program 4 (id=990): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) 356.979316ms ago: executing program 1 (id=991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 224.111177ms ago: executing program 4 (id=992): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x53a, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xa4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84402, 0x20) pwrite64(r3, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 223.553967ms ago: executing program 0 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 196.101258ms ago: executing program 6 (id=994): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) 66.863409ms ago: executing program 1 (id=995): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 0s ago: executing program 6 (id=996): socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.328879][ T4261] device veth0_macvtap entered promiscuous mode [ 78.358835][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.362999][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.379965][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.393580][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.422300][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.448877][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.463270][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.479906][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.506278][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.523869][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.535541][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.547272][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.558665][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.571415][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.582561][ T4261] device veth1_macvtap entered promiscuous mode [ 78.590570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.602364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.610582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.622832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.634336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.646723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.657341][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.678947][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.691491][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.708003][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.719774][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.744919][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.761001][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.777072][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.788825][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.798998][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.810052][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.840022][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.858527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.868598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.879620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.889763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.917662][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.928473][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.946250][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.956964][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.984536][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.016900][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.059412][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.081820][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.093832][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.105602][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.117067][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.129872][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.150938][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.191781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.200755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.240812][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.271925][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.280689][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.311778][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.336154][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.351923][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.372069][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.390640][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.401736][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.430633][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.441007][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.452223][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.464208][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.485433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.501175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.523882][ T4261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.541006][ T4261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550611][ T4261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575549][ T4261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.700776][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 79.709620][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 79.776936][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 79.776958][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 79.776996][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 80.082252][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.108027][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.129902][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.131848][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.151165][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.183363][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.194876][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.210229][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.228161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.272246][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.281393][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.305831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.389622][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.414419][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.421973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.422031][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.423859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.486329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.871983][ T4369] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.275905][ T26] audit: type=1326 audit(1746741043.715:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.389010][ T26] audit: type=1326 audit(1746741043.715:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.473053][ T26] audit: type=1326 audit(1746741043.715:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.564360][ T26] audit: type=1326 audit(1746741043.715:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.667253][ T26] audit: type=1326 audit(1746741043.715:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.836516][ T26] audit: type=1326 audit(1746741043.715:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.850312][ T4390] loop2: detected capacity change from 0 to 512 [ 82.926060][ T26] audit: type=1326 audit(1746741043.715:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 82.963398][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 82.976333][ T4390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.053083][ T4392] capability: warning: `syz.1.19' uses 32-bit capabilities (legacy support in use) [ 83.058304][ T26] audit: type=1326 audit(1746741043.715:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 83.088948][ T4390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.127691][ T26] audit: type=1326 audit(1746741043.715:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 83.150723][ T4390] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.245605][ T26] audit: type=1326 audit(1746741043.715:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 83.250717][ T4390] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.373020][ T4390] EXT4-fs (loop2): 1 truncate cleaned up [ 83.388319][ T4399] loop3: detected capacity change from 0 to 512 [ 83.389005][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.470756][ T4399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.616355][ T4390] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.18: invalid indirect mapped block 3489660928 (level 0) [ 83.683869][ T4399] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.22: corrupted inode contents [ 83.740110][ T4390] EXT4-fs (loop2): Remounting filesystem read-only [ 83.763647][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 83.769162][ T4390] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.18: invalid indirect mapped block 6 (level 1) [ 83.770203][ T4399] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #16: comm syz.3.22: mark_inode_dirty error [ 83.835906][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 83.836376][ T4390] EXT4-fs (loop2): Remounting filesystem read-only [ 83.853062][ T4399] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.22: corrupted inode contents [ 83.880182][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 83.913837][ T4399] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.22: mark_inode_dirty error [ 83.946645][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 83.966314][ T4399] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.22: corrupted inode contents [ 84.002620][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 84.017121][ T4399] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 84.050006][ T4264] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.050072][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 84.080366][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.083606][ T4399] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.22: corrupted inode contents [ 84.100822][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 84.108560][ T4399] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.22: mark_inode_dirty error [ 84.118872][ T4264] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 84.127226][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 84.154932][ T4399] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 84.167588][ T4399] EXT4-fs (loop3): Remounting filesystem read-only [ 84.179927][ T4399] EXT4-fs (loop3): 1 truncate cleaned up [ 84.189313][ T4399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.198519][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.205688][ T4399] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.209742][ T55] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 84.217805][ T4264] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.261467][ T55] EXT4-fs (loop3): Remounting filesystem read-only [ 84.305439][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.318710][ T4264] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 84.379972][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.392326][ T4264] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.446817][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.478480][ T4264] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 84.539417][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.555033][ T4264] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /7/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.565983][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 84.590823][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 84.601095][ T4264] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 85.492138][ T4438] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.568629][ T4284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.631527][ T4438] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.789850][ T4284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.878623][ T4284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.961077][ T4284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.436862][ T4457] loop0: detected capacity change from 0 to 2048 [ 86.596975][ T4457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.666474][ T41] cfg80211: failed to load regulatory.db [ 86.829838][ T4466] loop1: detected capacity change from 0 to 512 [ 86.853150][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 86.902768][ T4466] ======================================================= [ 86.902768][ T4466] WARNING: The mand mount option has been deprecated and [ 86.902768][ T4466] and is ignored by this kernel. Remove the mand [ 86.902768][ T4466] option from the mount to silence this warning. [ 86.902768][ T4466] ======================================================= [ 86.915936][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.964789][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.980145][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.002202][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.009661][ T4466] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 87.029421][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.037772][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.079749][ T4466] block device autoloading is deprecated and will be removed. [ 87.099255][ T4466] EXT4-fs (loop1): couldn't read superblock of external journal [ 87.291524][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 87.291540][ T26] audit: type=1326 audit(1746741048.725:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.408730][ T26] audit: type=1326 audit(1746741048.765:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.561980][ T26] audit: type=1326 audit(1746741048.765:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.642985][ T26] audit: type=1326 audit(1746741048.765:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.731856][ T26] audit: type=1326 audit(1746741048.765:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.806211][ T26] audit: type=1326 audit(1746741048.765:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.852284][ T26] audit: type=1326 audit(1746741048.785:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.874590][ T26] audit: type=1326 audit(1746741048.785:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.897885][ T26] audit: type=1326 audit(1746741048.785:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 87.920146][ T26] audit: type=1326 audit(1746741048.785:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 88.138055][ T4500] netlink: 96 bytes leftover after parsing attributes in process `syz.3.58'. [ 88.670885][ T4529] loop3: detected capacity change from 0 to 512 [ 88.677266][ T4468] chnl_net:caif_netlink_parms(): no params data found [ 88.697824][ T4522] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.66'. [ 88.876538][ T4529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.909880][ T4529] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.132946][ T4258] Bluetooth: hci3: command 0x0409 tx timeout [ 89.467098][ T4284] device hsr_slave_0 left promiscuous mode [ 89.527079][ T4284] device hsr_slave_1 left promiscuous mode [ 89.533341][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 89.559037][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.579169][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.650212][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.680873][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.703311][ T4284] device bridge_slave_1 left promiscuous mode [ 89.710798][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.774394][ T4284] device bridge_slave_0 left promiscuous mode [ 89.780672][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.908807][ T4284] device veth1_macvtap left promiscuous mode [ 89.935070][ T4284] device veth0_macvtap left promiscuous mode [ 89.942896][ T4557] syz.0.75[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.943011][ T4557] syz.0.75[4557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.955113][ T4284] device veth1_vlan left promiscuous mode [ 89.973240][ T4284] device veth0_vlan left promiscuous mode [ 90.059478][ T4560] loop3: detected capacity change from 0 to 2048 [ 90.147684][ T4557] ALSA: seq fatal error: cannot create timer (-19) [ 90.180460][ T4560] EXT4-fs (loop3): failed to initialize system zone (-117) [ 90.234394][ T4560] EXT4-fs (loop3): mount failed [ 90.545880][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.216394][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 91.239602][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 91.288915][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 91.289468][ T4597] loop9: detected capacity change from 0 to 7 [ 91.319839][ T4475] Dev loop9: unable to read RDB block 7 [ 91.332871][ T4475] loop9: unable to read partition table [ 91.338710][ T4475] loop9: partition table beyond EOD, truncated [ 91.350913][ T4597] Dev loop9: unable to read RDB block 7 [ 91.351367][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.360186][ T4597] loop9: unable to read partition table [ 91.373645][ T4597] loop9: partition table beyond EOD, truncated [ 91.386048][ T4597] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 91.386048][ T4597] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 91.457499][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.641644][ T4601] loop4: detected capacity change from 0 to 764 [ 91.964258][ T4606] siw: device registration error -23 [ 92.213499][ T4284] bond0 (unregistering): Released all slaves [ 92.356050][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.372867][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.387530][ T4468] device bridge_slave_0 entered promiscuous mode [ 92.470633][ T4552] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 92.488274][ T4552] netlink: 152 bytes leftover after parsing attributes in process `syz.1.73'. [ 92.524640][ T4552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.577455][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.608057][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.625726][ T4468] device bridge_slave_1 entered promiscuous mode [ 92.708034][ T4468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.774770][ T4468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.941840][ T4468] team0: Port device team_slave_0 added [ 92.989221][ T4468] team0: Port device team_slave_1 added [ 93.102822][ T4620] sd 0:0:1:0: device reset [ 93.118218][ T4468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.152122][ T4468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.247591][ T4468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.292252][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 93.346160][ T4468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.364570][ T4468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.391083][ T4468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.545454][ T4629] loop0: detected capacity change from 0 to 2048 [ 93.547153][ T4468] device hsr_slave_0 entered promiscuous mode [ 93.583058][ T4468] device hsr_slave_1 entered promiscuous mode [ 93.608226][ T4468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.637814][ T4468] Cannot create hsr debugfs directory [ 93.644486][ T4631] mmap: syz.1.96 (4631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.665310][ T4629] EXT4-fs (loop0): failed to initialize system zone (-117) [ 93.705053][ T4629] EXT4-fs (loop0): mount failed [ 93.763366][ T4637] netlink: 156 bytes leftover after parsing attributes in process `syz.1.97'. [ 93.773055][ T4637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 94.116926][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 94.116941][ T26] audit: type=1326 audit(1746741055.555:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.218064][ T4648] loop4: detected capacity change from 0 to 512 [ 94.267590][ T4648] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.280217][ T26] audit: type=1326 audit(1746741055.595:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.320477][ T4648] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.351939][ T4648] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 94.376962][ T26] audit: type=1326 audit(1746741055.595:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.393131][ T4468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.429414][ T4648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 94.445087][ T4648] System zones: 0-2, 18-18, 34-34 [ 94.474021][ T26] audit: type=1326 audit(1746741055.595:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.497324][ T26] audit: type=1326 audit(1746741055.595:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.510137][ T4648] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.519993][ T26] audit: type=1326 audit(1746741055.595:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.565158][ T4648] EXT4-fs (loop4): 1 truncate cleaned up [ 94.581164][ T4648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.618251][ T26] audit: type=1326 audit(1746741055.595:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.697326][ T26] audit: type=1326 audit(1746741055.615:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.760803][ T26] audit: type=1326 audit(1746741055.615:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.808611][ T4667] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.100: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 94.837475][ T26] audit: type=1326 audit(1746741055.615:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07658e969 code=0x7ffc0000 [ 94.861323][ T4468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.933068][ T4468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.975074][ T4468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.201394][ T4671] loop3: detected capacity change from 0 to 512 [ 95.205022][ T4673] loop1: detected capacity change from 0 to 512 [ 95.242959][ T4673] EXT4-fs: Ignoring removed nobh option [ 95.314155][ T4671] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.363767][ T4673] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.106: corrupted inode contents [ 95.376413][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 95.400272][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 95.455352][ T4468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.468735][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.479169][ T4671] EXT4-fs (loop3): 1 truncate cleaned up [ 95.511067][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.520190][ T4673] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #16: comm syz.1.106: mark_inode_dirty error [ 95.548078][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.556643][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.573358][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.602368][ T4673] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.106: corrupted inode contents [ 95.626408][ T4468] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.642293][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.660834][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.686556][ T4673] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.106: mark_inode_dirty error [ 95.708546][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.732769][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.739931][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.749446][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.761416][ T4673] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.106: corrupted inode contents [ 95.814377][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.820947][ T4673] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 95.850104][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.858254][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.873536][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.895935][ T4673] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.106: corrupted inode contents [ 95.906091][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.926245][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.941956][ T4673] EXT4-fs error (device loop1): ext4_truncate:4312: inode #16: comm syz.1.106: mark_inode_dirty error [ 95.950554][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.960170][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.982041][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 95.989017][ T4673] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 96.016008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.036158][ T4673] EXT4-fs (loop1): Remounting filesystem read-only [ 96.047684][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.060641][ T4673] EXT4-fs (loop1): 1 truncate cleaned up [ 96.073688][ T32] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:2: Failed to release dquot type 1 [ 96.082024][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.096276][ T4682] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.107473][ T32] EXT4-fs (loop1): Remounting filesystem read-only [ 96.120331][ T4673] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.137845][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.174861][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.175088][ T4673] EXT4-fs (loop1): unmounting filesystem. [ 96.207728][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.263349][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.279723][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 96.290876][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.330309][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.360207][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.399712][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.430262][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.497948][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.718994][ T4711] loop1: detected capacity change from 0 to 2048 [ 96.807607][ T4714] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.848141][ T4711] EXT4-fs (loop1): failed to initialize system zone (-117) [ 96.862262][ T4720] +}[@[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.862373][ T4720] +}[@[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.882163][ T4711] EXT4-fs (loop1): mount failed [ 97.015351][ T4333] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.224917][ T4723] loop0: detected capacity change from 0 to 8192 [ 97.247971][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.284978][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.330095][ T4468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.625001][ T4743] unsupported nla_type 52263 [ 98.608711][ T4749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.813472][ T4749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.831378][ T4775] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 98.851826][ T4775] netlink: 128 bytes leftover after parsing attributes in process `syz.3.124'. [ 98.868066][ T4775] netlink: 3 bytes leftover after parsing attributes in process `syz.3.124'. [ 98.998487][ T4749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.060194][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.078815][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.163087][ T4785] loop3: detected capacity change from 0 to 512 [ 99.198251][ T4749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.291047][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.310137][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.333464][ T4785] ext4 filesystem being mounted at /28/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 99.369131][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.392874][ T4785] EXT4-fs (loop3): unmounting filesystem. [ 99.439760][ T4468] device veth0_vlan entered promiscuous mode [ 99.488206][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.497373][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.536911][ T4468] device veth1_vlan entered promiscuous mode [ 99.644058][ T4749] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715637][ T4749] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.756803][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.795513][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.810821][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.830872][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.880390][ T4749] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.903094][ T4468] device veth0_macvtap entered promiscuous mode [ 99.910479][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.956232][ T4749] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.015287][ T4468] device veth1_macvtap entered promiscuous mode [ 100.098008][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.152373][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.181535][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.211850][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.235991][ T4811] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 100.252494][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.271773][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.306438][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.328269][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.367558][ T4468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.465633][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.486890][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.555982][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.597176][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.621835][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.651925][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.680664][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.701737][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.721865][ T4468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.737138][ T4822] 9pnet_fd: Insufficient options for proto=fd [ 100.748816][ T4816] loop1: detected capacity change from 0 to 512 [ 100.755373][ T4468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.768406][ T4468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.778971][ T4816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.804914][ T4816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.814816][ T4822] loop0: detected capacity change from 0 to 512 [ 100.831090][ T4820] netlink: 'syz.3.136': attribute type 21 has an invalid length. [ 100.837406][ T4816] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm +}[@: invalid indirect mapped block 4294967295 (level 1) [ 100.861388][ T4822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.871990][ T4820] netlink: 128 bytes leftover after parsing attributes in process `syz.3.136'. [ 100.881100][ T4820] netlink: 3 bytes leftover after parsing attributes in process `syz.3.136'. [ 100.891303][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.906802][ T4816] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm +}[@: invalid indirect mapped block 4294967295 (level 1) [ 100.932440][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.944571][ T4468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.976417][ T4816] EXT4-fs (loop1): 2 truncates cleaned up [ 100.991299][ T4816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.002277][ T4468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.025923][ T4468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.036971][ T4822] EXT4-fs (loop0): 1 truncate cleaned up [ 101.042937][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.061976][ T4468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.070799][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 101.070812][ T26] audit: type=1800 audit(1746741062.505:94): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 101.377609][ T4831] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 101.430831][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 101.680531][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 102.089766][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.152669][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.203016][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.216982][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.242003][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.296610][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.317205][ T4853] netlink: 96 bytes leftover after parsing attributes in process `syz.0.141'. [ 102.711427][ T26] audit: type=1326 audit(1746741064.145:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 102.811941][ T26] audit: type=1326 audit(1746741064.185:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 102.891903][ T26] audit: type=1326 audit(1746741064.205:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 102.985196][ T26] audit: type=1326 audit(1746741064.205:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.115665][ T26] audit: type=1326 audit(1746741064.205:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.155897][ T4879] loop5: detected capacity change from 0 to 1024 [ 103.183108][ T4879] EXT4-fs: Ignoring removed nobh option [ 103.188740][ T4879] EXT4-fs: Ignoring removed bh option [ 103.205836][ T26] audit: type=1326 audit(1746741064.215:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.282669][ T4879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.320296][ T26] audit: type=1326 audit(1746741064.215:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.365180][ T4885] netlink: 'syz.0.155': attribute type 21 has an invalid length. [ 103.379528][ T26] audit: type=1326 audit(1746741064.215:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.416843][ T4885] netlink: 'syz.0.155': attribute type 20 has an invalid length. [ 103.430572][ T4885] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.431563][ T4879] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 103.449711][ T26] audit: type=1326 audit(1746741064.215:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.5.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 103.780424][ T4897] netlink: 'syz.0.158': attribute type 3 has an invalid length. [ 103.792825][ T4879] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.153: Allocating blocks 497-513 which overlap fs metadata [ 103.910662][ T4901] loop3: detected capacity change from 0 to 2048 [ 103.924788][ T4879] EXT4-fs (loop5): pa ffff888075779ee0: logic 112, phys. 353, len 10 [ 103.934629][ T4879] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 1, pa_free 2 [ 103.964877][ T4904] 9p: Unknown Cache mode mmé [ 104.049925][ T4901] EXT4-fs (loop3): failed to initialize system zone (-117) [ 104.126021][ T4901] EXT4-fs (loop3): mount failed [ 104.165960][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 104.210354][ T4911] loop0: detected capacity change from 0 to 512 [ 104.295233][ T4914] loop1: detected capacity change from 0 to 512 [ 104.306350][ T4916] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.327843][ T4911] EXT4-fs: Ignoring removed i_version option [ 104.344831][ T4914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c198, mo2=0002] [ 104.359552][ T4911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.490304][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.553117][ T4914] System zones: 1-12 [ 104.584512][ T4911] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.623853][ T4914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.164: inode #1: comm syz.1.164: iget: illegal inode # [ 104.723632][ T4914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.164: error while reading EA inode 1 err=-117 [ 104.768643][ T4914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.164: inode #1: comm syz.1.164: iget: illegal inode # [ 104.849405][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 104.886784][ T4914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.164: error while reading EA inode 1 err=-117 [ 104.942410][ T4914] EXT4-fs (loop1): 1 orphan inode deleted [ 104.948615][ T4914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.973932][ T4938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.170'. [ 105.060672][ T4942] netlink: 'syz.3.172': attribute type 3 has an invalid length. [ 105.492672][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 105.581294][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 106.602490][ T4979] netlink: 'syz.4.184': attribute type 3 has an invalid length. [ 106.794978][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 107.073126][ T4984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.284356][ T4984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.447115][ T4984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.683871][ T4984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.825190][ T5022] netlink: 'syz.5.197': attribute type 21 has an invalid length. [ 107.956867][ T4984] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.990408][ T4984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.026164][ T4984] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.029738][ T5029] loop4: detected capacity change from 0 to 512 [ 108.094989][ T5029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.096642][ T4984] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.149725][ T5029] EXT4-fs (loop4): 1 truncate cleaned up [ 108.192229][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.211254][ T4304] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 108.327563][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 108.445618][ T4304] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.496748][ T4304] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 108.532020][ T4304] usb 6-1: config 1 interface 0 has no altsetting 0 [ 108.553523][ T4304] usb 6-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.40 [ 108.569677][ T4304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.640504][ T4304] usb 6-1: Product: ìµïŽƒé¿ì‘°êˆ­ï‹¨êšªé°²èœ«ç³¨æŸ‚⒯謤魃沽ê¦çƒ©ìŸ»ê˜•å­•é¯‹ë¸šæŠî’¤è‡§á¢©ä˜´á¬£ç—‘䭱賽ä©î¹µì·¹Í추꽸ైᕚê¨éƒµî¸—ꥀ뙉햣幩㇢陱듘ã†ä¯Žî‹±×¿åˆã¼ì€–榿ï ìŠ–魦㮧Ꮎ⟮謘ꋞ翴Շ瑋疆堞먜䢅嚇䈹㜌⎖鷤ᴳ뙖뀧녯噬䊡혚곋쵽많衃᜘奻é£ì¸™ê§˜äŽé¬žëª«ë©”æ« [ 108.704234][ T5054] process 'syz.0.206' launched '/dev/fd/3' with NULL argv: empty string added [ 108.731405][ T4304] usb 6-1: Manufacturer: 倊 [ 108.739910][ T4304] usb 6-1: SerialNumber: ã° [ 108.777002][ T5022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 109.093013][ T4304] usbhid 6-1:1.0: can't add hid device: -71 [ 109.099970][ T4304] usbhid: probe of 6-1:1.0 failed with error -71 [ 109.129543][ T4304] usb 6-1: USB disconnect, device number 2 [ 109.635578][ T5086] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 110.273403][ T5101] loop5: detected capacity change from 0 to 512 [ 110.280622][ T5101] EXT4-fs: Ignoring removed oldalloc option [ 111.591764][ T5101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.866553][ T5101] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.219: Parent and EA inode have the same ino 15 [ 111.880305][ T5101] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.219: Parent and EA inode have the same ino 15 [ 111.896227][ T5101] EXT4-fs (loop5): 1 orphan inode deleted [ 111.902069][ T5101] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 112.236013][ T5111] loop3: detected capacity change from 0 to 2048 [ 112.259944][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 112.316298][ T5111] EXT4-fs (loop3): failed to initialize system zone (-117) [ 112.341230][ T5111] EXT4-fs (loop3): mount failed [ 112.427260][ T4475] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.588790][ T5124] loop0: detected capacity change from 0 to 2048 [ 112.687293][ T5124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.830559][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 112.830576][ T26] audit: type=1800 audit(112.821:109): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.228" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 112.945782][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 113.131140][ T5145] Zero length message leads to an empty skb [ 113.235483][ T5151] loop0: detected capacity change from 0 to 512 [ 113.259084][ T5151] EXT4-fs: Ignoring removed nobh option [ 113.355231][ T5151] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.232: invalid indirect mapped block 256 (level 2) [ 113.445142][ T5151] EXT4-fs (loop0): 2 truncates cleaned up [ 113.474061][ T5151] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.587837][ T5151] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.232: bg 0: block 5: invalid block bitmap [ 113.717336][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 114.021536][ T5173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.238'. [ 114.373337][ T5187] loop0: detected capacity change from 0 to 512 [ 114.470597][ T5187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.696572][ T26] audit: type=1326 audit(114.701:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 114.755614][ T5201] loop3: detected capacity change from 0 to 1024 [ 114.802083][ T26] audit: type=1326 audit(114.731:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 114.868600][ T5201] EXT4-fs: Ignoring removed i_version option [ 114.907850][ T26] audit: type=1326 audit(114.731:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 114.950934][ T5201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.014805][ T26] audit: type=1326 audit(114.731:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48038d2d0 code=0x7ffc0000 [ 115.047078][ T5201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.126994][ T26] audit: type=1326 audit(114.731:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc480390197 code=0x7ffc0000 [ 115.189023][ T26] audit: type=1326 audit(114.731:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 115.277315][ T5218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 115.284334][ T5218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.294738][ T26] audit: type=1326 audit(114.731:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc480390197 code=0x7ffc0000 [ 115.296888][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 115.346264][ T5222] loop4: detected capacity change from 0 to 164 [ 115.361453][ T26] audit: type=1326 audit(114.741:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc48038d5ca code=0x7ffc0000 [ 115.394625][ T5218] vhci_hcd vhci_hcd.0: Device attached [ 115.401523][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 115.471172][ T26] audit: type=1326 audit(114.741:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 115.508588][ T5219] vhci_hcd: connection closed [ 115.517540][ T4284] vhci_hcd: stop threads [ 115.543594][ T4284] vhci_hcd: release socket [ 115.572800][ T4284] vhci_hcd: disconnect device [ 115.619551][ T126] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 115.646365][ T126] usb 41-1: enqueue for inactive port 0 [ 115.751972][ T126] vhci_hcd: vhci_device speed not set [ 116.374879][ T5255] loop5: detected capacity change from 0 to 1024 [ 116.421055][ T5255] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.455096][ T5255] EXT4-fs: Ignoring removed nobh option [ 116.495297][ T5255] EXT4-fs: Ignoring removed bh option [ 116.632705][ T5255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.826392][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 117.111784][ T5285] netlink: 'syz.5.271': attribute type 10 has an invalid length. [ 117.218118][ T5285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.494994][ T5300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 117.501557][ T5300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.533572][ T5309] loop4: detected capacity change from 0 to 512 [ 117.541056][ T5300] vhci_hcd vhci_hcd.0: Device attached [ 117.578534][ T5309] EXT4-fs: inline encryption not supported [ 117.658811][ T5309] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.677097][ T5300] loop1: detected capacity change from 0 to 2048 [ 117.753057][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.762928][ T4304] vhci_hcd: vhci_device speed not set [ 117.832940][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 117.832955][ T26] audit: type=1326 audit(117.841:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 117.860915][ T4304] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 117.883452][ T5322] loop0: detected capacity change from 0 to 2048 [ 117.898337][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 117.908956][ T26] audit: type=1326 audit(117.881:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 117.984384][ T5322] EXT4-fs (loop0): failed to initialize system zone (-117) [ 117.999419][ T5304] vhci_hcd: connection reset by peer [ 118.009125][ T55] vhci_hcd: stop threads [ 118.012765][ T5322] EXT4-fs (loop0): mount failed [ 118.020665][ T55] vhci_hcd: release socket [ 118.043392][ T26] audit: type=1326 audit(117.881:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.043996][ T55] vhci_hcd: disconnect device [ 118.176945][ T26] audit: type=1326 audit(117.881:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.251862][ T26] audit: type=1326 audit(117.881:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.344186][ T26] audit: type=1326 audit(117.881:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.386005][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 118.448355][ T26] audit: type=1326 audit(117.881:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.542156][ T26] audit: type=1326 audit(117.881:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.619611][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 118.625685][ T26] audit: type=1326 audit(117.881:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.738503][ T26] audit: type=1326 audit(117.881:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 118.769044][ T5349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.292'. [ 119.148912][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.297'. [ 120.307045][ T5394] loop4: detected capacity change from 0 to 2048 [ 120.327031][ T5399] device bridge0 entered promiscuous mode [ 120.364147][ T5399] device macvlan2 entered promiscuous mode [ 120.402950][ T5399] bridge0: port 3(macvlan2) entered blocking state [ 120.410587][ T5399] bridge0: port 3(macvlan2) entered disabled state [ 120.413029][ T5394] EXT4-fs (loop4): failed to initialize system zone (-117) [ 120.430294][ T5399] device bridge0 left promiscuous mode [ 120.465792][ T5394] EXT4-fs (loop4): mount failed [ 120.470574][ T5406] loop5: detected capacity change from 0 to 1764 [ 121.008357][ T5417] device syzkaller0 entered promiscuous mode [ 121.039138][ T5427] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 121.066343][ T5427] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 121.078257][ T5427] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 121.295944][ T5433] loop0: detected capacity change from 0 to 764 [ 121.339530][ T5433] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 121.616266][ T5439] loop0: detected capacity change from 0 to 2048 [ 121.693218][ T5439] EXT4-fs (loop0): failed to initialize system zone (-117) [ 121.700790][ T5439] EXT4-fs (loop0): mount failed [ 122.822550][ T5473] syz.5.342 uses obsolete (PF_INET,SOCK_PACKET) [ 122.915537][ T5476] loop0: detected capacity change from 0 to 512 [ 122.971931][ T4304] vhci_hcd: vhci_device speed not set [ 122.979581][ T5476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.044877][ T5476] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.345: bg 0: block 384: padding at end of block bitmap is not set [ 123.070028][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.085733][ T5476] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 123.099172][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.108201][ T5476] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.345: attempt to clear invalid blocks 983260 len 1 [ 123.138077][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.153081][ T5476] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz.0.345: Invalid inode table block 0 in block_group 0 [ 123.168586][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.175693][ T5476] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 123.185693][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.192263][ T5476] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 123.201588][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.215107][ T5476] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz.0.345: Invalid inode table block 0 in block_group 0 [ 123.230003][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.237003][ T5476] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 123.247815][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.254454][ T5476] EXT4-fs error (device loop0): ext4_truncate:4312: inode #11: comm syz.0.345: mark_inode_dirty error [ 123.266554][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.275049][ T5476] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 123.285265][ T5476] EXT4-fs (loop0): Remounting filesystem read-only [ 123.292145][ T5476] EXT4-fs (loop0): 1 truncate cleaned up [ 123.298066][ T5476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.329825][ T5476] EXT4-fs (loop0): shut down requested (2) [ 123.379207][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 123.735510][ T5486] loop0: detected capacity change from 0 to 2048 [ 123.784511][ T5486] loop0: p1 < > p4 [ 123.830455][ T5486] loop0: p4 size 8388608 extends beyond EOD, truncated [ 124.703472][ T5498] loop0: detected capacity change from 0 to 512 [ 124.722264][ T5498] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.729091][ T5498] ext4: Unknown parameter 'seclabel' [ 125.082355][ T4284] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.194682][ T4284] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.277259][ T4284] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.377971][ T4284] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.645021][ T5523] loop1: detected capacity change from 0 to 2048 [ 125.773005][ T5523] EXT4-fs (loop1): failed to initialize system zone (-117) [ 125.792899][ T5523] EXT4-fs (loop1): mount failed [ 126.125025][ T5541] loop4: detected capacity change from 0 to 2048 [ 126.241065][ T5541] loop4: p2 p3 p7 [ 126.409849][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.427555][ T4258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.437061][ T4258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.449674][ T4258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.462593][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.470045][ T4258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.742885][ T5553] udevd[5553]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 127.157754][ T5567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.263046][ T5581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.288245][ T5576] netlink: 'syz.0.379': attribute type 21 has an invalid length. [ 127.302805][ T5576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.379'. [ 127.384352][ T5567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.616750][ T5567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.798441][ T5567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.139981][ T5547] chnl_net:caif_netlink_parms(): no params data found [ 128.274127][ T4284] device hsr_slave_0 left promiscuous mode [ 128.301048][ T4284] device hsr_slave_1 left promiscuous mode [ 128.318914][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.329983][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.378980][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.387036][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.426233][ T4284] device bridge_slave_1 left promiscuous mode [ 128.459782][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.491972][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 128.502830][ T4284] device bridge_slave_0 left promiscuous mode [ 128.509627][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.558635][ T4284] device veth1_macvtap left promiscuous mode [ 128.565024][ T4284] device veth0_macvtap left promiscuous mode [ 128.572575][ T4284] device veth1_vlan left promiscuous mode [ 128.578454][ T4284] device veth0_vlan left promiscuous mode [ 129.189601][ T5635] loop5: detected capacity change from 0 to 128 [ 129.306381][ T5635] syz.5.394: attempt to access beyond end of device [ 129.306381][ T5635] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 129.385300][ T5635] syz.5.394: attempt to access beyond end of device [ 129.385300][ T5635] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 129.420695][ T5635] syz.5.394: attempt to access beyond end of device [ 129.420695][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.442885][ T5636] syz.5.394: attempt to access beyond end of device [ 129.442885][ T5636] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.456447][ T5635] syz.5.394: attempt to access beyond end of device [ 129.456447][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.480161][ T5635] syz.5.394: attempt to access beyond end of device [ 129.480161][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.494074][ T5635] syz.5.394: attempt to access beyond end of device [ 129.494074][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.507441][ T5636] syz.5.394: attempt to access beyond end of device [ 129.507441][ T5636] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.555446][ T5635] syz.5.394: attempt to access beyond end of device [ 129.555446][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.568866][ T5635] syz.5.394: attempt to access beyond end of device [ 129.568866][ T5635] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 129.698847][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 129.775168][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 129.825042][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.875866][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.513136][ T4284] bond0 (unregistering): Released all slaves [ 130.572048][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 130.611411][ T5567] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.630055][ T5632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.393'. [ 130.814844][ T5567] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.937590][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.971865][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.980199][ T5547] device bridge_slave_0 entered promiscuous mode [ 131.029339][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.051909][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.076503][ T5547] device bridge_slave_1 entered promiscuous mode [ 131.107302][ T5567] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.226179][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.250715][ T5671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 131.269836][ T5567] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.299984][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.620396][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 131.620410][ T26] audit: type=1326 audit(131.621:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.682875][ T5686] syz.4.407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.706165][ T26] audit: type=1326 audit(131.661:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.782720][ T5673] netlink: 136 bytes leftover after parsing attributes in process `syz.5.404'. [ 131.813080][ T26] audit: type=1326 audit(131.661:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.831083][ T5673] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.888758][ T26] audit: type=1326 audit(131.661:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.927898][ T26] audit: type=1326 audit(131.661:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.955489][ T26] audit: type=1326 audit(131.661:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 131.988123][ T26] audit: type=1326 audit(131.661:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 132.015783][ T26] audit: type=1326 audit(131.661:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 132.018806][ T5674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.046445][ T26] audit: type=1326 audit(131.661:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 132.082761][ T26] audit: type=1326 audit(131.671:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 132.123862][ T5683] lo speed is unknown, defaulting to 1000 [ 132.177625][ T5696] syz.4.410[5696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.177749][ T5696] syz.4.410[5696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.211462][ T5674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.256167][ T5683] lo speed is unknown, defaulting to 1000 [ 132.292205][ T5547] team0: Port device team_slave_0 added [ 132.374875][ T5674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.418842][ T5683] lo speed is unknown, defaulting to 1000 [ 132.426307][ T5547] team0: Port device team_slave_1 added [ 132.595593][ T5674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.651779][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 132.692971][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.736950][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744068][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.774100][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.803158][ T5683] infiniband syz0: set active [ 132.810661][ T5683] infiniband syz0: added lo [ 132.824498][ T5683] rdma_rxe: unable to create cq [ 132.829757][ T5683] infiniband syz0: Couldn't create ib_mad CQ [ 132.841177][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.850333][ T5683] infiniband syz0: Couldn't open port 1 [ 132.877854][ T4306] lo speed is unknown, defaulting to 1000 [ 132.885153][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.908187][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.926020][ T5683] RDS/IB: syz0: added [ 132.956570][ T5683] smc: adding ib device syz0 with port count 1 [ 132.985606][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.993218][ T5683] smc: ib device syz0 port 1 has pnetid [ 133.021096][ T4306] lo speed is unknown, defaulting to 1000 [ 133.050895][ T5683] lo speed is unknown, defaulting to 1000 [ 133.125910][ T5547] device hsr_slave_0 entered promiscuous mode [ 133.148230][ T5547] device hsr_slave_1 entered promiscuous mode [ 133.172080][ T5547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.190087][ T5547] Cannot create hsr debugfs directory [ 133.213993][ T5674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.358749][ T5674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.403479][ T5674] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.426866][ T5683] lo speed is unknown, defaulting to 1000 [ 133.496999][ T5674] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.670173][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.419'. [ 133.796973][ T5683] lo speed is unknown, defaulting to 1000 [ 133.907553][ T5547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.944044][ T5547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.979326][ T5547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.999682][ T5547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.203854][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.217954][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.695294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.733964][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 134.944173][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.033920][ T5683] lo speed is unknown, defaulting to 1000 [ 135.075396][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.107218][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.161125][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.168334][ T5755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.232307][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.241241][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.299243][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.306490][ T5755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.388658][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.407369][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.434324][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.472966][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.494765][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.512751][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.557876][ T5683] lo speed is unknown, defaulting to 1000 [ 135.569016][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.578647][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.605653][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.632789][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.661247][ T5547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.693263][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.743267][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.765678][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.842616][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.881513][ T5782] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.931822][ T5782] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.460597][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.481970][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.506349][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.886459][ T5811] tipc: Started in network mode [ 136.891553][ T5811] tipc: Node identity 4, cluster identity 4711 [ 136.930254][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 136.930270][ T26] audit: type=1326 audit(136.931:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 136.930941][ T5811] tipc: Node number set to 4 [ 136.938551][ T26] audit: type=1326 audit(136.931:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.041173][ T26] audit: type=1326 audit(136.931:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.173220][ T26] audit: type=1326 audit(136.931:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.295279][ T26] audit: type=1326 audit(136.971:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.381832][ T26] audit: type=1326 audit(136.971:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.493742][ T26] audit: type=1326 audit(136.971:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.591866][ T26] audit: type=1326 audit(136.971:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.686021][ T26] audit: type=1326 audit(136.991:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.792575][ T26] audit: type=1326 audit(136.991:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 137.862423][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.899947][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.978011][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.001195][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.048472][ T5547] device veth0_vlan entered promiscuous mode [ 138.060967][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.084947][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.130462][ T5547] device veth1_vlan entered promiscuous mode [ 138.209005][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.238002][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.267937][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.311263][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.354385][ T5547] device veth0_macvtap entered promiscuous mode [ 138.388538][ T5547] device veth1_macvtap entered promiscuous mode [ 138.466370][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.487524][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.510921][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.531790][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.574806][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.600713][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.611426][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.646918][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.684771][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.707471][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.739116][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.769462][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.824635][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.862835][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.901783][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.931727][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.952542][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.995158][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.038801][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.071320][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.093400][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.119647][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.158487][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.202194][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.226551][ T5547] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.257848][ T5547] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.287216][ T5547] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.320631][ T5547] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.536290][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.562705][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.634141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.712041][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.738511][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.781996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.489336][ T5909] netlink: 136 bytes leftover after parsing attributes in process `syz.1.463'. [ 140.571434][ T5909] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.824936][ T5909] rdma_rxe: rxe_register_device failed with error -23 [ 140.916508][ T5909] rdma_rxe: failed to add lo [ 143.004631][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 143.082363][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 143.210749][ T5977] netlink: 268 bytes leftover after parsing attributes in process `syz.6.483'. [ 143.496411][ T5985] loop4: detected capacity change from 0 to 1024 [ 143.510079][ T5988] loop6: detected capacity change from 0 to 512 [ 143.597752][ T5985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.649896][ T5988] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 143.822207][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 143.822222][ T26] audit: type=1800 audit(143.831:329): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.487" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 143.969740][ T5988] EXT4-fs (loop6): unmounting filesystem. [ 144.436780][ T6019] netlink: 'syz.6.496': attribute type 39 has an invalid length. [ 144.565016][ T6021] netlink: 220 bytes leftover after parsing attributes in process `syz.6.496'. [ 144.596390][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.496'. [ 144.621770][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.496'. [ 144.652735][ T5985] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 41: comm syz.4.485: bad entry in directory: inode out of bounds - offset=9216, inode=62208, rec_len=1024, size=1024 fake=0 [ 144.663355][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.496'. [ 144.703605][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.496'. [ 144.860912][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 145.068096][ T6040] tipc: Started in network mode [ 145.077424][ T6040] tipc: Node identity 4, cluster identity 4711 [ 145.087525][ T6040] tipc: Node number set to 4 [ 145.407526][ T26] audit: type=1326 audit(145.411:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 145.485351][ T26] audit: type=1326 audit(145.441:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 145.601612][ T26] audit: type=1326 audit(145.441:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 145.658936][ T26] audit: type=1326 audit(145.441:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 145.734785][ T26] audit: type=1326 audit(145.441:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 146.066990][ T6047] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 146.807660][ T6105] lo speed is unknown, defaulting to 1000 [ 148.587805][ T6135] device wireguard0 entered promiscuous mode [ 148.634397][ T6134] tipc: Started in network mode [ 148.639330][ T6134] tipc: Node identity 4, cluster identity 4711 [ 148.743226][ T6134] tipc: Node number set to 4 [ 150.148527][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.540'. [ 150.397349][ T6184] syz.6.544[6184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.397459][ T6184] syz.6.544[6184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.850024][ T26] audit: type=1326 audit(150.851:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 150.982562][ T26] audit: type=1326 audit(150.851:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.073267][ T26] audit: type=1326 audit(150.851:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.119381][ T26] audit: type=1326 audit(150.851:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.165060][ T26] audit: type=1326 audit(150.851:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.232830][ T26] audit: type=1326 audit(150.851:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.340746][ T26] audit: type=1326 audit(150.861:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.411047][ T6231] netlink: 'syz.6.559': attribute type 3 has an invalid length. [ 151.426590][ T26] audit: type=1326 audit(150.861:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.497927][ T26] audit: type=1326 audit(150.861:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.534504][ T6230] Falling back ldisc for ttyS3. [ 151.641065][ T26] audit: type=1326 audit(150.861:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 151.771304][ T6239] netlink: 9 bytes leftover after parsing attributes in process `syz.5.562'. [ 151.867386][ T6243] loop4: detected capacity change from 0 to 128 [ 152.502996][ T6264] netlink: 9 bytes leftover after parsing attributes in process `syz.5.572'. [ 152.910772][ T6276] loop6: detected capacity change from 0 to 2048 [ 153.008783][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 155.314583][ T6345] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 155.917183][ T6368] netlink: 'syz.5.611': attribute type 13 has an invalid length. [ 155.970392][ T6368] infiniband syz0: set active [ 156.102952][ T6368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.158062][ T6368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.192678][ T41] lo speed is unknown, defaulting to 1000 [ 156.245844][ T6380] smc: net device bond0 applied user defined pnetid SYZ2 [ 156.294439][ T6380] smc: net device bond0 erased user defined pnetid SYZ2 [ 157.823623][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 158.329975][ T6414] team0 (unregistering): Port device team_slave_0 removed [ 158.368420][ T6414] team0 (unregistering): Port device team_slave_1 removed [ 158.526127][ T26] kauditd_printk_skb: 1330 callbacks suppressed [ 158.526145][ T26] audit: type=1326 audit(158.531:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.0.632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc48038e969 code=0x0 [ 158.642647][ T6437] netlink: 'syz.5.633': attribute type 4 has an invalid length. [ 158.713790][ T6437] infiniband syz0: set down [ 158.737814][ T4301] lo speed is unknown, defaulting to 1000 [ 158.752412][ T7] lo speed is unknown, defaulting to 1000 [ 158.788838][ T6420] infiniband syz!: set active [ 158.801858][ T6420] infiniband syz!: added team_slave_0 [ 158.818251][ T6420] rdma_rxe: unable to create cq [ 158.847239][ T6420] infiniband syz!: Couldn't create ib_mad CQ [ 158.870060][ T6420] infiniband syz!: Couldn't open port 1 [ 158.929051][ T6420] RDS/IB: syz!: added [ 158.945090][ T6420] smc: adding ib device syz! with port count 1 [ 158.961038][ T6443] xt_hashlimit: max too large, truncated to 1048576 [ 158.971530][ T6420] smc: ib device syz! port 1 has pnetid [ 159.744263][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 159.930674][ T6465] syz.0.646[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.930800][ T6465] syz.0.646[6465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.402839][ T6477] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.484019][ T6477] smc: net device bond0 erased user defined pnetid SYZ2 [ 160.932913][ T6494] tipc: Enabled bearer , priority 0 [ 160.972817][ T6494] syzkaller0: MTU too low for tipc bearer [ 160.983746][ T6494] tipc: Disabling bearer [ 160.995310][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'. [ 161.004344][ T26] audit: type=1326 audit(161.001:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.041794][ T26] audit: type=1326 audit(161.001:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.081806][ T26] audit: type=1326 audit(161.041:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.161944][ T26] audit: type=1326 audit(161.041:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.241911][ T26] audit: type=1326 audit(161.041:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.323939][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.332340][ T26] audit: type=1326 audit(161.041:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.395480][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.421942][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.432917][ T26] audit: type=1326 audit(161.041:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.464748][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.490354][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.507979][ T6507] lo speed is unknown, defaulting to 1000 [ 161.515056][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.523147][ T26] audit: type=1326 audit(161.041:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.557077][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.576796][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.591792][ T26] audit: type=1326 audit(161.041:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206c18e969 code=0x7ffc0000 [ 161.620032][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.637921][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.654235][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.658720][ T6519] usb usb1: usbfs: process 6519 (syz.6.661) did not claim interface 0 before use [ 161.666611][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.695707][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.710572][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.721739][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.734881][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.746285][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.757560][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.771091][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.785127][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.810786][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.828931][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.851408][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.872790][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.896294][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.917729][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.938692][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 161.980784][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.014272][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'. [ 162.024555][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.076334][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.106054][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.195029][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.261229][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.476590][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.610570][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.747401][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.807517][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.881889][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.920193][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.949029][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 162.977593][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.007510][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.026660][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.043894][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.057923][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.067221][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.086659][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.095026][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.106421][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.106553][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 163.115247][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.131562][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.139716][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.148608][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 163.180237][ T4346] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.440242][ T6546] capability: warning: `syz.4.672' uses deprecated v2 capabilities in a way that may be insecure [ 163.458324][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.673'. [ 163.482176][ T6549] sctp: [Deprecated]: syz.0.674 (pid 6549) Use of int in maxseg socket option. [ 163.482176][ T6549] Use struct sctp_assoc_value instead [ 163.932633][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.680'. [ 164.082613][ T6571] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 164.570800][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 164.570816][ T26] audit: type=1326 audit(164.571:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 164.692991][ T26] audit: type=1326 audit(164.571:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 164.771927][ T26] audit: type=1326 audit(164.571:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 164.857678][ T26] audit: type=1326 audit(164.571:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 164.882182][ T6595] device wireguard0 entered promiscuous mode [ 164.920353][ T26] audit: type=1326 audit(164.611:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.4.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2106b8e969 code=0x7ffc0000 [ 165.124322][ T6604] netlink: 'syz.6.696': attribute type 4 has an invalid length. [ 165.376855][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 166.637210][ T6625] netlink: 348 bytes leftover after parsing attributes in process `syz.6.704'. [ 166.914731][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 166.961137][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 167.591959][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 167.618499][ T6648] netlink: 540 bytes leftover after parsing attributes in process `syz.1.713'. [ 170.201500][ T6722] netlink: 348 bytes leftover after parsing attributes in process `syz.0.737'. [ 171.872673][ T26] audit: type=1326 audit(171.881:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 171.946110][ T6784] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 171.968869][ T26] audit: type=1326 audit(171.921:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 171.984550][ T6784] netlink: 216 bytes leftover after parsing attributes in process `syz.0.755'. [ 172.040396][ T6784] NCSI netlink: No device for ifindex 0 [ 172.078272][ T26] audit: type=1326 audit(171.921:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.129128][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.756'. [ 172.145808][ T6787] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.161135][ T6787] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.171790][ T26] audit: type=1326 audit(171.931:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.251744][ T26] audit: type=1326 audit(171.931:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.312431][ T26] audit: type=1326 audit(171.931:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.387784][ T26] audit: type=1326 audit(171.931:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.418516][ T26] audit: type=1326 audit(171.931:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.477149][ T26] audit: type=1326 audit(171.931:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 172.564613][ T26] audit: type=1326 audit(171.931:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.6.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f4fe998e969 code=0x7ffc0000 [ 173.994592][ T6850] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.203764][ T6850] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.277281][ T6867] loop5: detected capacity change from 0 to 1024 [ 174.285359][ T6867] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.349836][ T6867] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.352022][ T6850] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.470350][ T6850] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.610485][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 174.763139][ T6850] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.827895][ T6850] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.883589][ T6850] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.952334][ T6850] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.309481][ T6898] loop5: detected capacity change from 0 to 1024 [ 175.437867][ T6898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.513182][ T6912] netlink: 304 bytes leftover after parsing attributes in process `syz.0.791'. [ 176.407903][ T6947] netlink: 304 bytes leftover after parsing attributes in process `syz.1.802'. [ 176.845035][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 177.293491][ T6978] loop5: detected capacity change from 0 to 2048 [ 177.344488][ T26] kauditd_printk_skb: 192 callbacks suppressed [ 177.344503][ T26] audit: type=1800 audit(177.351:1897): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.809" name="file1" dev="loop5" ino=1048606 res=0 errno=0 [ 177.620730][ T6987] loop5: detected capacity change from 0 to 512 [ 177.706057][ T6987] EXT4-fs (loop5): orphan cleanup on readonly fs [ 177.805822][ T6987] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.811: bad orphan inode 13 [ 177.877940][ T6987] ext4_test_bit(bit=12, block=18) = 1 [ 177.898378][ T6987] is_bad_inode(inode)=0 [ 177.921741][ T6987] NEXT_ORPHAN(inode)=2130706432 [ 177.932099][ T6987] max_ino=32 [ 177.935447][ T6987] i_nlink=1 [ 177.946224][ T6987] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.987302][ T7000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.817'. [ 178.015233][ T6987] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 178.034175][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 178.127447][ T6987] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 178.148624][ T7010] netlink: 304 bytes leftover after parsing attributes in process `syz.4.819'. [ 178.253490][ T4468] EXT4-fs (loop5): unmounting filesystem. [ 178.338169][ T7016] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 178.350343][ T7014] IPVS: stopping master sync thread 7016 ... [ 179.443746][ T26] audit: type=1326 audit(179.341:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 179.594114][ T7052] netlink: 'syz.0.834': attribute type 27 has an invalid length. [ 179.749052][ T26] audit: type=1326 audit(179.481:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 179.867004][ T26] audit: type=1326 audit(179.511:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 179.950610][ T26] audit: type=1326 audit(179.531:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.027109][ T26] audit: type=1326 audit(179.551:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.082966][ T26] audit: type=1326 audit(179.571:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.111351][ T26] audit: type=1326 audit(179.581:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.252163][ T26] audit: type=1326 audit(179.591:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.341844][ T26] audit: type=1326 audit(179.611:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c38e969 code=0x7ffc0000 [ 180.465793][ T7072] syz.6.843[7072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.465899][ T7072] syz.6.843[7072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.882587][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.903310][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.796368][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.821217][ T7095] loop6: detected capacity change from 0 to 512 [ 181.836328][ T7095] journal_path: Lookup failure for './bus' [ 181.854233][ T7095] EXT4-fs: error: could not find journal device path [ 181.903162][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.618508][ T7052] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.632627][ T7052] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.641152][ T7052] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.657113][ T7052] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.921385][ T7104] device bond1 entered promiscuous mode [ 182.941998][ T7104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.459501][ T7104] bond1 (unregistering): Released all slaves [ 183.969397][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 184.197521][ T7133] netlink: 'syz.1.864': attribute type 4 has an invalid length. [ 185.379363][ T7161] loop5: detected capacity change from 0 to 512 [ 185.510958][ T7161] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 185.822104][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.883'. [ 185.870320][ T7178] loop6: detected capacity change from 0 to 1024 [ 185.917617][ T7178] EXT4-fs: Ignoring removed nobh option [ 185.969926][ T7178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.073722][ T7178] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 186.112903][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 186.112919][ T26] audit: type=1800 audit(186.121:1911): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 186.231814][ T26] audit: type=1800 audit(186.151:1912): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 186.279489][ T5547] EXT4-fs (loop6): unmounting filesystem. [ 186.322465][ T26] audit: type=1800 audit(186.151:1913): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 186.932691][ T7218] device bond1 entered promiscuous mode [ 186.943441][ T7218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.572025][ T7218] bond1 (unregistering): Released all slaves [ 187.596986][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 187.669141][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 187.743148][ T7233] netlink: 'syz.6.902': attribute type 4 has an invalid length. [ 187.873282][ T7235] lo speed is unknown, defaulting to 1000 [ 187.911866][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.901'. [ 188.781285][ T7260] loop6: detected capacity change from 0 to 1024 [ 188.857948][ T7264] device macvlan2 entered promiscuous mode [ 188.892072][ T7264] device bridge0 entered promiscuous mode [ 188.899208][ T7264] bridge0: port 3(macvlan2) entered blocking state [ 188.906139][ T7264] bridge0: port 3(macvlan2) entered disabled state [ 188.917999][ T7260] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 188.922806][ T7264] device bridge0 left promiscuous mode [ 189.014317][ T26] audit: type=1800 audit(189.021:1914): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.910" name="file2" dev="loop6" ino=18 res=0 errno=0 [ 189.130998][ T5547] EXT4-fs (loop6): unmounting filesystem. [ 189.315183][ T7274] netlink: 268 bytes leftover after parsing attributes in process `syz.5.915'. [ 190.187468][ T7297] lo speed is unknown, defaulting to 1000 [ 190.354962][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.5.928'. [ 190.356658][ T26] audit: type=1326 audit(190.361:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 190.451716][ T26] audit: type=1326 audit(190.401:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 190.537478][ T26] audit: type=1326 audit(190.401:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 190.604470][ T26] audit: type=1326 audit(190.401:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 190.702716][ T26] audit: type=1326 audit(190.401:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 190.781752][ T26] audit: type=1326 audit(190.401:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc48038e969 code=0x7ffc0000 [ 191.173995][ T7333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.940'. [ 191.830413][ T7361] netlink: 60 bytes leftover after parsing attributes in process `syz.5.953'. [ 192.015621][ T7369] netlink: 'syz.5.954': attribute type 4 has an invalid length. [ 192.458435][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.6.964'. [ 192.641836][ T126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.757931][ T7399] loop4: detected capacity change from 0 to 1024 [ 192.779489][ T7399] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.815866][ T7399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.825349][ T126] usb 6-1: device descriptor read/64, error -71 [ 192.956143][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 193.131772][ T126] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.257745][ T7421] netlink: 60 bytes leftover after parsing attributes in process `syz.4.977'. [ 193.301729][ T126] usb 6-1: device descriptor read/64, error -71 [ 193.431873][ T126] usb usb6-port1: attempt power cycle [ 193.464903][ T7429] syz.0.981[7429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.465005][ T7429] syz.0.981[7429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.839739][ T7442] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 193.881906][ T126] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 193.937656][ T126] usb 6-1: device descriptor read/8, error -71 [ 194.108014][ T7449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.989'. [ 194.177422][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183877][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.217355][ T126] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 194.263159][ T126] usb 6-1: device descriptor read/8, error -71 [ 194.358091][ T7458] loop4: detected capacity change from 0 to 512 [ 194.393070][ T126] usb usb6-port1: unable to enumerate USB device [ 194.439379][ T7458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.445949][ T7464] [ 194.450626][ T7464] ============================================ [ 194.456793][ T7464] WARNING: possible recursive locking detected [ 194.462975][ T7464] 6.1.137-syzkaller #0 Not tainted [ 194.468107][ T7464] -------------------------------------------- [ 194.474268][ T7464] syz.1.995/7464 is trying to acquire lock: [ 194.480168][ T7464] ffff88807a71fa38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 194.489100][ T7464] [ 194.489100][ T7464] but task is already holding lock: [ 194.496471][ T7464] ffff88807a71ba38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 194.505385][ T7464] [ 194.505385][ T7464] other info that might help us debug this: [ 194.513465][ T7464] Possible unsafe locking scenario: [ 194.513465][ T7464] [ 194.520929][ T7464] CPU0 [ 194.524212][ T7464] ---- [ 194.527500][ T7464] lock(&trie->lock); [ 194.531588][ T7464] lock(&trie->lock); [ 194.535669][ T7464] [ 194.535669][ T7464] *** DEADLOCK *** [ 194.535669][ T7464] [ 194.543821][ T7464] May be due to missing lock nesting notation [ 194.543821][ T7464] [ 194.552154][ T7464] 3 locks held by syz.1.995/7464: [ 194.557194][ T7464] #0: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x379/0x670 [ 194.567156][ T7464] #1: ffff88807a71ba38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 194.576531][ T7464] #2: ffffffff8c92a960 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0 [ 194.585898][ T7464] [ 194.585898][ T7464] stack backtrace: [ 194.591822][ T7464] CPU: 0 PID: 7464 Comm: syz.1.995 Not tainted 6.1.137-syzkaller #0 [ 194.599821][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.609911][ T7464] Call Trace: [ 194.613204][ T7464] [ 194.616138][ T7464] dump_stack_lvl+0x168/0x22e [ 194.620830][ T7464] ? show_regs_print_info+0x12/0x12 [ 194.626032][ T7464] ? load_image+0x3b0/0x3b0 [ 194.630530][ T7464] __lock_acquire+0x122f/0x7c50 [ 194.635383][ T7464] ? deref_stack_reg+0x19f/0x230 [ 194.640326][ T7464] ? mark_lock+0x94/0x320 [ 194.644664][ T7464] ? verify_lock_unused+0x140/0x140 [ 194.649875][ T7464] ? __lock_acquire+0x12e5/0x7c50 [ 194.654901][ T7464] ? is_bpf_text_address+0x28b/0x2a0 [ 194.660205][ T7464] lock_acquire+0x1b4/0x490 [ 194.664706][ T7464] ? trie_delete_elem+0x90/0x690 [ 194.669646][ T7464] ? read_lock_is_recursive+0x10/0x10 [ 194.675017][ T7464] ? verify_lock_unused+0x140/0x140 [ 194.680228][ T7464] ? __kasan_kmalloc+0x8e/0xa0 [ 194.684995][ T7464] ? bpf_map_kmalloc_node+0xb8/0x1a0 [ 194.690274][ T7464] ? trie_update_elem+0x160/0xe90 [ 194.695301][ T7464] ? bpf_map_update_value+0x5a0/0x670 [ 194.700681][ T7464] _raw_spin_lock_irqsave+0xa4/0xf0 [ 194.705918][ T7464] ? trie_delete_elem+0x90/0x690 [ 194.710866][ T7464] ? _raw_spin_lock+0x40/0x40 [ 194.715546][ T7464] trie_delete_elem+0x90/0x690 [ 194.720310][ T7464] ? __cant_sleep+0x210/0x210 [ 194.724988][ T7464] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 194.730453][ T7464] bpf_trace_run2+0x1cd/0x3b0 [ 194.735144][ T7464] ? bpf_trace_run2+0xda/0x3b0 [ 194.739932][ T7464] ? bpf_trace_run1+0x3b0/0x3b0 [ 194.744787][ T7464] ? trie_update_elem+0x6c1/0xe90 [ 194.749814][ T7464] ? __lock_acquire+0x7c50/0x7c50 [ 194.754868][ T7464] ? __kmem_cache_alloc_node+0x140/0x260 [ 194.760504][ T7464] ? trie_update_elem+0x6c1/0xe90 [ 194.765540][ T7464] __bpf_trace_kfree+0x6e/0x90 [ 194.770300][ T7464] ? trie_update_elem+0x6c1/0xe90 [ 194.775442][ T7464] __traceiter_kfree+0x26/0x40 [ 194.780211][ T7464] ? trie_update_elem+0x6c1/0xe90 [ 194.785236][ T7464] kfree+0xf6/0x190 [ 194.789038][ T7464] trie_update_elem+0x6c1/0xe90 [ 194.793896][ T7464] bpf_map_update_value+0x5a0/0x670 [ 194.799112][ T7464] generic_map_update_batch+0x569/0x850 [ 194.804705][ T7464] ? rcu_read_unlock+0xa0/0xa0 [ 194.809474][ T7464] ? __fdget+0x17c/0x200 [ 194.813728][ T7464] ? rcu_read_unlock+0xa0/0xa0 [ 194.818486][ T7464] bpf_map_do_batch+0x466/0x600 [ 194.823336][ T7464] __sys_bpf+0x65f/0x6d0 [ 194.827595][ T7464] ? bpf_link_show_fdinfo+0x310/0x310 [ 194.832960][ T7464] ? do_sys_openat2+0x1fe/0x490 [ 194.837828][ T7464] ? lock_chain_count+0x20/0x20 [ 194.842710][ T7464] __x64_sys_bpf+0x78/0x90 [ 194.847150][ T7464] do_syscall_64+0x4c/0xa0 [ 194.851592][ T7464] ? clear_bhb_loop+0x45/0xa0 [ 194.856281][ T7464] ? clear_bhb_loop+0x45/0xa0 [ 194.860978][ T7464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.866888][ T7464] RIP: 0033:0x7fab9c38e969 [ 194.871322][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.890943][ T7464] RSP: 002b:00007fab9d2ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.899366][ T7464] RAX: ffffffffffffffda RBX: 00007fab9c5b5fa0 RCX: 00007fab9c38e969 [ 194.907363][ T7464] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 194.915334][ T7464] RBP: 00007fab9c410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 194.923304][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.931273][ T7464] R13: 0000000000000000 R14: 00007fab9c5b5fa0 R15: 00007ffe6ada4e98 [ 194.939335][ T7464] [ 194.973773][ T4265] EXT4-fs (loop4): unmounting filesystem.