last executing test programs: 17.882422225s ago: executing program 2 (id=1414): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17.041909344s ago: executing program 2 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x0, 'x'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@errors_continue}, {@discard}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@user_xattr}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 16.485098519s ago: executing program 2 (id=1423): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) 15.684914404s ago: executing program 2 (id=1435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x0, 'x'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@errors_continue}, {@discard}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@user_xattr}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 15.423084286s ago: executing program 4 (id=1439): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x8, 0x800) 15.407801917s ago: executing program 2 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0xcc, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c00000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e0", 0xa1}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce8", 0x32}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.911896117s ago: executing program 2 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(r6, r7, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) 14.503052731s ago: executing program 32 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(r6, r7, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) 14.486487722s ago: executing program 4 (id=1445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 13.89997227s ago: executing program 4 (id=1449): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 13.786107899s ago: executing program 4 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x0, 'x'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@errors_continue}, {@discard}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@user_xattr}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) 13.312701357s ago: executing program 4 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 12.649087351s ago: executing program 4 (id=1460): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(0x0, 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 12.372984754s ago: executing program 33 (id=1460): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(0x0, 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.97209741s ago: executing program 3 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3e9rHGkdAPDvTLK5tM2ZPRWpB94d3kl7aHeTi3eNIm0F0VcFtb6vMdmEkE02ZDe1CUVT/AMEERX8A3wj+AcI0j9BhIK+FxVFtNWX2pHdnWh+7CZLssnWzecDT/Z55pmZ7/MM2dn58TATwIX1VkTciYiRiHg3Iibz6WmeYqedmvM9f/ZovpmSyLJ7f0siyafFnmVGI+JKvth4RHz9KxHfSg7HrW9tr8xVq5WNvFxurK6X61vbN5ZX55YqS5W1mZnpD2Zvzr4/O5XlTtXPYkTc+tKffvT9n3351q8+8+3f3//L9e80m/WFj0XkzZs/VYAu2usutLbFruY22jiLYAPS7E9hZNCtAACgF81j9g9HxCdbx/+TMdI6mgMAAACGSXZ7Iv6VRGQAAADA0EojYiKStJSPBZiINC2V2mN4PxqX02qt3vj0Ym1zbaFZF1GMQrq4XK1M5WOFi1FImuXpfIztbvm9A+WZiHgtIn44ealVLs3XqguDvvgBAAAAF8SVN/ef//9zMm3lAQAAgCFT7FoAAAAAhoVTfgAAABh+zv8BAABgqH317t1mynbf473wYGtzpfbgxkKlvlJa3Zwvzdc21ktLtdpS65l9q8etr1qrrX821jYflhuVeqNc39q+v1rbXGvcX973CmwAAADgHL325pPfJRGx8/lLrRT5cwAB9vnjoBsA9NPIoBsADMzooBsADEzh2DnsIWDYJcfUHx68075WGL8+m/YAAAD9d+3jh+//j+V1x18bAP6fGesDABePu3twcRVOOgLwar9bAgzKh9ofr3Sr7/rwjh7u/7evMWTZiRoGAAD0zUQrJWkpP06fiDQtlSJebb0WoJAsLlcrU/n5wW8nC680y9OtJZNjxwwDAAAAAAAAAAAAAAAAAAAAAAAAAG1ZlkQGAAAADLWI9M9J62n+Edcm35nYf3XgwFu/fnrvxw/nGo2N6Yix5O+TzUljEdH4ST79vcwrAQAAAOAl0D5Pzz+nB90aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbN82eP5nfTecb96xcjotgp/miMtz7HoxARl/+RxOie5ZKIGOlD/J3HEXG1U/wkXmRZVsxb0Sn+pTOOX2xtms7x04i40of4cJE9ae5/7nT6/qXxVuuz8/dvNE+n1X3/l/53/zfSZf/z6oFyN68//UW5a/zHEa+Pdt7/7MZP2vH3hWgW3u6xj9/8xvZ2x4o9q+wUf2+scmN1vVzf2r6xvDq3VFmqrM3MTH8we3P2/dmp8uJytZL/7RjmB5/45Yuj+n+5S/zi/v4f2v7v9NT7LP799OGzj7QLhU7xr7/d+ff3apf4af7b96k836y/tpvfaef3euPnv3njqP4vdOn/+DH9v95T/+Nz737te3/oWHNoawAA56G+tb0yV61WNo7IjPcwzzlnbr8czehjJl6OZgwqk323/f94uvWccvFDmew0i49GH5oxduh7OhInXWESsdNcV4//kAAAwJD530H/UXeQAAAAAAAAAAAAAAAAAAAAgLN0wseSjUdEzzMfjLkzmK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzpPwEAAP//gEfRew==") 1.841462601s ago: executing program 1 (id=1520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f", 0x1b5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f00000098c0), 0x0, 0x8000) 1.141211198s ago: executing program 6 (id=1529): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2a01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.105265421s ago: executing program 6 (id=1531): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.021719218s ago: executing program 0 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) 977.675941ms ago: executing program 6 (id=1534): socket$kcm(0xa, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7492, 0x0, 0x2, 0x3b1}, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x18, 0xd9}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) 891.514728ms ago: executing program 0 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000740)='d', 0x1, 0x24000054, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf8}}, 0x14) 848.993301ms ago: executing program 1 (id=1536): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) 848.584262ms ago: executing program 3 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0xcc, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c00000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e0", 0xa1}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce8", 0x32}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb7020000080000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 792.785006ms ago: executing program 6 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x0, 'x'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@errors_continue}, {@discard}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@user_xattr}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$eJzs3c9PXFsdAPDvHZgCLc/hqYvnS3w2+gxttDNQbEtcVEyMrppY68YVIgyEMDCEGdpCGkPjH2Bi/BVduXJj4tqYmP4JxqSJ7o0xmkbbunChjrnDHYu8AYaUYSjz+SSn95z763tO4R7m3HMzN4C+dTkiZiJiICKuRkQhW5/LUuzspnS/F88fzacpicbQvb8lkWTrWudKsuWl7LDhiPjaVyK+lXwwbm1re2WuUilvZOVSfXW9VNvavra8OrdUXiqvzUxN3py+NX1jeuLE2nr7S3/+4Xd//uXbv/nsgz/O/vXKt9NqjWbb9rajEzsd7rfb9Hzz/6JlMCI2jhPsDBvI2pPvdUUAAOhI+hn/wxHxyYh4+ZNe1wYAAADohsYXRuNfSUQDAAAAOLdyzWdgk1wxexZgNHK5YnH3Gd6PxsVcpVqrf2axurm2sPus7Fjkc4vLlfJE9qzwWOSTtDzZzL8qX99XnoqItyPi+4WRZrk4X60s9PrmBwAAAPSJS/vG//8o7I7/AQAAgHNmrNcVAAAAALrO+B8AAADOvwPH/8ng6VYEAAAA6Iav3rmTpkbr/dcL97c2V6r3ry2UayvF1c354nx1Y724VK0uNb+zb/Wo81Wq1fXPxdrmw1K9XKuXalvbs6vVzbX6bPO93rPlRuFUmgUAAADs8fYnnvwhiYidz480U+pCti1/9OEz3a0d0E254+2edKsewOkb6HUFgJ7xgC/0rw7G+MA5d8TA/gf7yse8bQAAAJwF4x97rfl/84HwBjOQh/5l/h/6l/l/6F/m/6HPDR29y/BBG357wnUBAAC6ZrSZklwxmwscjVyuWIx4q/lagHyyuFwpT0TEhyLi94X8UFqe7HWlAQAAAAAAAAAAAAAAAAAAAAAAAOAN02gk0QAAAADOtYjcX5LsRf7jhfdH998fuJD8s9BcRsSDn9770cO5en1jMl3/9/+tr/84W3+9tSb1jVO+kwEAAAC0tMbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJykF88fzbfSacZ99sWIGGsXfzCGm8vhXxUi4uLLJAb3HJdExMAJxN95HBHvtIufpNWKsawW++PnImKkx/EvnUB86GdP0v5nJr3+8vuuv1xcbi7bX3+DWXpdzy4f1P/lWv1fs59r1/+9dfiph1uZd5/+snRg/McR7w62739a8ZN28S903sZvfn17+6BtjZ9FjB/x9yeNX6qvrpdqW9vXllfnlspL5bWpqcmb07emb0xPlBaXK+Xs37YxvvfxX//nsPZfbBt/t/89sP0R8X6H7f/304fPP3JI/Cufav/zf+eQ+OnvxKezvwPp9vFWfmc3v9d7v/jde4e1f+GA9h/684+IKx22/+rd7/ypw10BgFNQ29pematUyhtdyYx07cwyaaa6diaqIXN2M3ezC/3Yh/e4YwIAAE7cqw/9+7ccY4IHAAAAAAAAAAAAAAAAAAAAeC1d/xKyof//ZoHh3jUVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ/w0AAP//5w/Stg==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) 684.999375ms ago: executing program 3 (id=1541): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="4c000000000000000000000007000000443cd063ac14141400000004e00018250001000003960a01010000000005ac1414aa00000000e0000001000000027f000001000000066401010200000008000000007789356e03f1cfe2cf820fc10cedd6e873f6cde1b44373c40a55ae31e3dbaa4a6ca0433e"], 0x50}, 0x4840) 645.123638ms ago: executing program 0 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, 0x0, 0x0) 644.690838ms ago: executing program 5 (id=1543): syz_emit_ethernet(0x0, 0x0, 0x0) 553.167095ms ago: executing program 5 (id=1544): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 532.005357ms ago: executing program 5 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 492.61242ms ago: executing program 0 (id=1546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x1b5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f00000098c0), 0x0, 0x8000) 441.000745ms ago: executing program 3 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) 440.675795ms ago: executing program 1 (id=1548): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) getxattr(0x0, &(0x7f0000000300)=@known='user.incfs.size\x00', 0x0, 0x0) 417.338927ms ago: executing program 0 (id=1549): socket$kcm(0xa, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7492, 0x0, 0x2, 0x3b1}, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x18, 0xd9}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) 320.532144ms ago: executing program 5 (id=1550): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 309.889285ms ago: executing program 1 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 309.252735ms ago: executing program 3 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0xcc, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c00000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e0", 0xa1}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce8", 0x32}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb7020000080000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 265.484779ms ago: executing program 6 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x4c80c) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002d40)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 212.555873ms ago: executing program 0 (id=1554): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 156.110698ms ago: executing program 1 (id=1555): syz_emit_ethernet(0x0, 0x0, 0x0) 155.550378ms ago: executing program 5 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 88.068734ms ago: executing program 3 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 5.00264ms ago: executing program 1 (id=1558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") 4.80644ms ago: executing program 5 (id=1559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x1b5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f00000098c0), 0x0, 0x8000) 0s ago: executing program 6 (id=1560): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x40010) kernel console output (not intermixed with test programs): 45407][ T6202] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.585847][ T6202] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.890048][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 118.899469][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 119.069635][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 119.094457][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.112861][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.120310][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.132062][ T6241] device bridge_slave_0 left promiscuous mode [ 119.138413][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.153647][ T6241] device bridge_slave_1 left promiscuous mode [ 119.161984][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.179923][ T6241] bond0: (slave bond_slave_0): Releasing backup interface [ 119.209092][ T6241] bond0: (slave bond_slave_1): Releasing backup interface [ 119.315534][ T6241] team0: Port device team_slave_0 removed [ 119.356062][ T6241] team0: Port device team_slave_1 removed [ 119.362740][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.367747][ T6255] loop1: detected capacity change from 0 to 8192 [ 119.370341][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.387056][ T6255] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.399223][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.408997][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 119.409010][ T26] audit: type=1326 audit(1754153232.631:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.441238][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.522195][ T26] audit: type=1326 audit(1754153232.631:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.556397][ T6247] team0: Mode changed to "loadbalance" [ 119.591216][ T26] audit: type=1326 audit(1754153232.631:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.646381][ T26] audit: type=1326 audit(1754153232.631:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.674073][ T26] audit: type=1326 audit(1754153232.631:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.731530][ T26] audit: type=1326 audit(1754153232.631:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.779540][ T6265] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.824224][ T26] audit: type=1326 audit(1754153232.631:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.899598][ T26] audit: type=1326 audit(1754153232.631:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 119.901402][ T6265] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.957883][ T26] audit: type=1326 audit(1754153232.641:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 120.008294][ T26] audit: type=1326 audit(1754153232.641:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 120.031405][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 120.051840][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 120.080608][ T6265] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.215100][ T6265] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.629020][ T6265] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.680688][ T6265] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.702316][ T6265] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.717264][ T6265] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.307185][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 121.307206][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 121.766684][ T6321] loop0: detected capacity change from 0 to 8192 [ 121.777123][ T6321] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.850685][ T6326] loop4: detected capacity change from 0 to 128 [ 121.900921][ T6326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.942508][ T6326] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.037859][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 122.059273][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 122.068197][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 122.622494][ T6349] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.669129][ T6349] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.742063][ T6349] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.821813][ T6349] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.868145][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 122.877180][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 122.915581][ T6349] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.929379][ T6349] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.944067][ T6349] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.959599][ T6349] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.635027][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 124.872781][ T6402] loop0: detected capacity change from 0 to 8192 [ 124.949017][ T6402] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.101459][ T6411] loop4: detected capacity change from 0 to 512 [ 125.118375][ T6411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.191735][ T6411] EXT4-fs error (device loop4): ext4_quota_enable:7018: comm syz.4.829: Bad quota inum: 29696, type: 1 [ 125.206945][ T6411] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 125.223321][ T6411] EXT4-fs (loop4): mount failed [ 125.538786][ T6432] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.605578][ T6432] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.676278][ T6432] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.772584][ T6432] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.826573][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 126.026950][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 126.026963][ T26] audit: type=1326 audit(1754153239.251:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.087625][ T26] audit: type=1326 audit(1754153239.291:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.146837][ T26] audit: type=1326 audit(1754153239.301:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.211941][ T26] audit: type=1326 audit(1754153239.301:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.253865][ T6453] loop4: detected capacity change from 0 to 256 [ 126.268594][ T6453] FAT-fs (loop4): Directory bread(block 1285) failed [ 126.276886][ T26] audit: type=1326 audit(1754153239.301:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.315251][ T6453] FAT-fs (loop4): Directory bread(block 1285) failed [ 126.317473][ T26] audit: type=1326 audit(1754153239.311:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.332271][ T6453] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 126.393196][ T26] audit: type=1326 audit(1754153239.311:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.418265][ T26] audit: type=1326 audit(1754153239.311:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.451897][ T26] audit: type=1326 audit(1754153239.351:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.493216][ T26] audit: type=1326 audit(1754153239.351:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 126.504195][ T6459] loop3: detected capacity change from 0 to 1024 [ 126.570495][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 126.580282][ T6459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.618362][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 127.356180][ T6502] loop2: detected capacity change from 0 to 2048 [ 127.423101][ T6502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.810950][ T6519] 9pnet: Could not find request transport: t [ 127.947470][ T6525] loop4: detected capacity change from 0 to 512 [ 127.993721][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 127.998771][ T6527] loop3: detected capacity change from 0 to 2048 [ 128.022235][ T6525] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 128.051266][ T6525] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.053093][ T6527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.088574][ T6525] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.876: corrupted inode contents [ 128.138158][ T6525] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #16: comm syz.4.876: mark_inode_dirty error [ 128.159662][ T6525] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.876: corrupted inode contents [ 128.176570][ T6525] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.876: mark_inode_dirty error [ 128.204423][ T6525] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.876: corrupted inode contents [ 128.249412][ T6525] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 128.273822][ T6525] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.876: corrupted inode contents [ 128.299689][ T6525] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.876: mark_inode_dirty error [ 128.321158][ T6525] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 128.339772][ T6525] EXT4-fs (loop4): 1 truncate cleaned up [ 128.365644][ T4681] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1 [ 128.395552][ T6525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.405712][ T6525] EXT4-fs (loop4): unmounting filesystem. [ 128.860739][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 129.031421][ T6432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.045590][ T6432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.060239][ T6432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.074060][ T6432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.177112][ T6580] loop4: detected capacity change from 0 to 128 [ 129.325089][ T6585] loop2: detected capacity change from 0 to 512 [ 129.349276][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.368655][ T6585] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.532288][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 129.722436][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 129.842918][ T6606] loop3: detected capacity change from 0 to 8192 [ 129.873359][ T6606] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.902838][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.915'. [ 129.906473][ T6614] loop2: detected capacity change from 0 to 512 [ 129.973967][ T6614] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.042319][ T6614] EXT4-fs (loop2): mount failed [ 130.497446][ T6637] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.580375][ T6637] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.620606][ T6641] loop4: detected capacity change from 0 to 512 [ 130.699824][ T6637] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.725140][ T6641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.782828][ T6637] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.842687][ T6641] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.925: Unimplemented hash flags: 0x0001 [ 130.875368][ T6641] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.925: Corrupt directory, running e2fsck is recommended [ 130.926117][ T6637] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.939889][ T6637] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.953776][ T6637] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.967508][ T6637] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.989171][ T6641] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.925: path /225/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 131.197247][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 131.235803][ T6658] syz.2.931[6658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.235882][ T6658] syz.2.931[6658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.719424][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 131.719438][ T26] audit: type=1326 audit(1754153244.941:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 131.799834][ T26] audit: type=1326 audit(1754153244.941:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 131.875888][ T26] audit: type=1326 audit(1754153244.941:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 131.942843][ T26] audit: type=1326 audit(1754153244.941:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 132.008815][ T26] audit: type=1326 audit(1754153244.941:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 132.129684][ T6680] loop4: detected capacity change from 0 to 8192 [ 132.152418][ T6680] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.211222][ T4338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.345630][ T26] audit: type=1326 audit(1754153245.571:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 132.406475][ T26] audit: type=1326 audit(1754153245.601:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 132.437283][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 132.453601][ T4338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.479955][ T26] audit: type=1326 audit(1754153245.601:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 132.491073][ T4338] usb 3-1: config 0 has no interfaces? [ 132.534429][ T4338] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 132.540860][ T6682] loop3: detected capacity change from 0 to 8192 [ 132.558774][ T26] audit: type=1326 audit(1754153245.601:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a9998eba3 code=0x7ffc0000 [ 132.562880][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.592309][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.598649][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.609397][ T26] audit: type=1326 audit(1754153245.661:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a9998d61f code=0x7ffc0000 [ 132.649340][ T4338] usb 3-1: Product: syz [ 132.664227][ T4338] usb 3-1: Manufacturer: syz [ 132.674375][ T4338] usb 3-1: SerialNumber: syz [ 132.691933][ T4338] usb 3-1: config 0 descriptor?? [ 132.734654][ T6691] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.793686][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 132.840614][ T6691] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.913006][ T6697] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 133.116045][ T6691] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.806983][ T6691] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.031493][ T6691] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.084881][ T6691] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.161252][ T6691] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.175639][ T6691] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.302775][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 134.482345][ T6728] loop3: detected capacity change from 0 to 512 [ 134.492763][ T6728] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.508775][ T6728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.542119][ T6728] EXT4-fs (loop3): 1 truncate cleaned up [ 134.561151][ T6728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.702864][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 134.810862][ T6740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 135.011760][ T4338] usb 3-1: USB disconnect, device number 2 [ 135.061992][ T6750] loop4: detected capacity change from 0 to 512 [ 135.114158][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.130614][ T6750] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.144377][ T6750] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 135.169760][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 135.205721][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 135.233675][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 135.249863][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 135.259503][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 135.344867][ T6771] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 135.406208][ T6771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.525412][ T6762] infiniband syz1: set active [ 135.531902][ T4323] geneve1 speed is unknown, defaulting to 1000 [ 135.546472][ T6762] infiniband syz1: added geneve1 [ 135.607096][ T6762] RDS/IB: syz1: added [ 135.612601][ T6762] smc: adding ib device syz1 with port count 1 [ 135.621595][ T6762] smc: ib device syz1 port 1 has pnetid [ 135.629748][ T4338] geneve1 speed is unknown, defaulting to 1000 [ 135.646295][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 135.811716][ T6781] loop3: detected capacity change from 0 to 8192 [ 135.841534][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 135.843306][ T6781] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.140668][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 136.147797][ T4309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.334758][ T4309] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.349384][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.371136][ T4309] usb 2-1: Product: syz [ 136.375336][ T4309] usb 2-1: Manufacturer: syz [ 136.395083][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 136.401533][ T4309] usb 2-1: SerialNumber: syz [ 136.434183][ T4309] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.490987][ T4323] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.510945][ T6808] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.660316][ T6808] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.712509][ T4309] usb 2-1: USB disconnect, device number 2 [ 136.734198][ T6762] geneve1 speed is unknown, defaulting to 1000 [ 136.802920][ T6808] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.905886][ T6808] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.263245][ T26] kauditd_printk_skb: 117 callbacks suppressed [ 137.263259][ T26] audit: type=1326 audit(1754153250.491:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 137.361418][ T26] audit: type=1326 audit(1754153250.491:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 137.421260][ T26] audit: type=1326 audit(1754153250.491:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 137.452812][ T6808] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.480464][ T26] audit: type=1326 audit(1754153250.491:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 137.533211][ T6808] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.541923][ T4323] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 137.549747][ T4323] ath9k_htc: Failed to initialize the device [ 137.561167][ T26] audit: type=1326 audit(1754153250.491:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 137.614583][ T4309] usb 2-1: ath9k_htc: USB layer deinitialized [ 137.648750][ T6808] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.788404][ T6808] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.806058][ T6843] syz.2.994[6843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.806151][ T6843] syz.2.994[6843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.110225][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 138.483124][ T6857] geneve1 speed is unknown, defaulting to 1000 [ 139.096192][ T6883] loop0: detected capacity change from 0 to 8192 [ 139.116328][ T6883] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.133562][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 139.679353][ T6910] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.812885][ T6910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.857840][ T26] audit: type=1326 audit(1754153253.081:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 139.889855][ T6915] loop3: detected capacity change from 0 to 512 [ 139.917204][ T26] audit: type=1326 audit(1754153253.111:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 139.944372][ T6915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e028, mo2=0002] [ 139.961301][ T6915] System zones: 1-12 [ 139.967644][ T6915] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1026: invalid indirect mapped block 8 (level 2) [ 139.969140][ T6910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.021547][ T6915] EXT4-fs (loop3): Remounting filesystem read-only [ 140.028501][ T6915] EXT4-fs (loop3): 1 truncate cleaned up [ 140.032330][ T26] audit: type=1326 audit(1754153253.111:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 140.034315][ T6915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.126568][ T6924] sctp: [Deprecated]: syz.3.1026 (pid 6924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.126568][ T6924] Use struct sctp_sack_info instead [ 140.141201][ T26] audit: type=1326 audit(1754153253.111:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 140.165855][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.184711][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.209491][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.240355][ T26] audit: type=1326 audit(1754153253.111:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.4.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79d418eb69 code=0x7ffc0000 [ 140.242962][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.262643][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.360434][ T6910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.510167][ T6910] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.528443][ T6910] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.576197][ T6910] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.618395][ T6910] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.685513][ T6917] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 140.760203][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 141.748788][ T6987] loop0: detected capacity change from 0 to 512 [ 141.759377][ T6987] EXT4-fs: Invalid want_extra_isize 2 [ 141.973102][ T6987] geneve1 speed is unknown, defaulting to 1000 [ 142.688043][ T6994] loop2: detected capacity change from 0 to 8192 [ 142.734828][ T6994] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.074511][ T7018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.340802][ T7018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.425396][ T7018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.499922][ T7018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.533980][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.545019][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.553465][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.561125][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.583860][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.598589][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.606512][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.614880][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.628629][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.636152][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.643772][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.651252][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.658672][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.666385][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.673960][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.681472][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.688860][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.696396][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.703879][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.711493][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.718897][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.727609][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.739550][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.747056][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.754671][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.762147][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.769546][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.776994][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.784469][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.791898][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.799320][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.806770][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.814229][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.821665][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.830376][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.837840][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.845466][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.852917][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.860334][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.867774][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.879042][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.886507][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.894110][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.901562][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.908956][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.916485][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.923943][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.932605][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.939997][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.947462][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.954983][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.962437][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.969825][ T14] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 143.979988][ T14] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 144.002011][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 144.047623][ T7018] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.047855][ T7035] hub 6-0:1.0: USB hub found [ 144.061471][ T7018] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.075297][ T7018] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.091006][ T7018] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.141279][ T7035] hub 6-0:1.0: 1 port detected [ 144.539596][ T7046] loop4: detected capacity change from 0 to 2048 [ 144.773156][ T7046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.097132][ T7051] netlink: 'syz.2.1071': attribute type 3 has an invalid length. [ 145.204751][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 145.204764][ T26] audit: type=1326 audit(1754153258.431:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.351276][ T26] audit: type=1326 audit(1754153258.471:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.463860][ T26] audit: type=1326 audit(1754153258.471:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.558068][ T26] audit: type=1326 audit(1754153258.471:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.693748][ T26] audit: type=1326 audit(1754153258.471:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.818146][ T26] audit: type=1326 audit(1754153258.471:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 145.939338][ T26] audit: type=1326 audit(1754153258.471:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 146.085642][ T26] audit: type=1326 audit(1754153258.471:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 146.230966][ T26] audit: type=1326 audit(1754153258.471:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 146.283530][ T26] audit: type=1326 audit(1754153258.471:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 146.293962][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 146.327559][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 146.647431][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 146.672477][ T7078] loop4: detected capacity change from 0 to 8192 [ 146.706676][ T7078] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.730237][ T7081] bridge0: port 3(vlan2) entered blocking state [ 146.760227][ T7081] bridge0: port 3(vlan2) entered disabled state [ 146.778604][ T7081] device vlan2 entered promiscuous mode [ 146.821277][ T7089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.828636][ T7089] IPv6: NLM_F_CREATE should be set when creating new route [ 146.835898][ T7089] IPv6: NLM_F_CREATE should be set when creating new route [ 147.021295][ T7097] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.170518][ T7097] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.413033][ T7097] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.477398][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'. [ 147.513178][ T7097] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.600411][ T7097] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.615820][ T7097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.629924][ T7097] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.647454][ T7097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.920609][ T7118] geneve1 speed is unknown, defaulting to 1000 [ 149.630556][ T7126] loop2: detected capacity change from 0 to 128 [ 150.606737][ T7126] syz.2.1103: attempt to access beyond end of device [ 150.606737][ T7126] loop2: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 150.648334][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 150.670124][ T7135] syz.2.1103: attempt to access beyond end of device [ 150.670124][ T7135] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 150.686405][ T7135] syz.2.1103: attempt to access beyond end of device [ 150.686405][ T7135] loop2: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 150.700765][ T7135] syz.2.1103: attempt to access beyond end of device [ 150.700765][ T7135] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 150.714220][ T7126] syz.2.1103: attempt to access beyond end of device [ 150.714220][ T7126] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 150.714324][ T7126] syz.2.1103: attempt to access beyond end of device [ 150.714324][ T7126] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 150.714393][ T7126] syz.2.1103: attempt to access beyond end of device [ 150.714393][ T7126] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 150.714503][ T7126] syz.2.1103: attempt to access beyond end of device [ 150.714503][ T7126] loop2: rw=2049, sector=305, nr_sectors = 41 limit=128 [ 150.902531][ T7139] 9pnet: Could not find request transport: 0xffffffffffffffff [ 150.981533][ T7135] syz.2.1103: attempt to access beyond end of device [ 150.981533][ T7135] loop2: rw=2049, sector=225, nr_sectors = 72 limit=128 [ 151.065665][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 151.065679][ T26] audit: type=1800 audit(1754153264.291:756): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1103" name="bus" dev="loop2" ino=1048639 res=0 errno=0 [ 151.113621][ T7126] syz.2.1103: attempt to access beyond end of device [ 151.113621][ T7126] loop2: rw=2049, sector=353, nr_sectors = 1 limit=128 [ 151.222390][ T26] audit: type=1804 audit(1754153264.341:757): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1103" name="/newroot/211/file0/bus" dev="loop2" ino=1048639 res=1 errno=0 [ 151.868909][ T7159] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.946639][ T7159] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.025515][ T7159] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.082639][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 152.103286][ T7159] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.141625][ T7167] netlink: 'syz.4.1120': attribute type 21 has an invalid length. [ 152.149559][ T7167] netlink: 'syz.4.1120': attribute type 4 has an invalid length. [ 152.189463][ T7159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.205507][ T7159] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.214886][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'. [ 152.241494][ T7159] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.254880][ T7159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.348381][ T7172] random: crng reseeded on system resumption [ 152.638307][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1126'. [ 152.701526][ T7183] loop0: detected capacity change from 0 to 8192 [ 152.719344][ T7183] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.038937][ T7191] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.175391][ T7191] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.318334][ T7191] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.483407][ T7191] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.568239][ T7191] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.583976][ T7191] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.597642][ T7191] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.611422][ T7191] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.780386][ T26] audit: type=1326 audit(1754153267.001:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 153.821931][ T7200] mmap: syz.3.1131 (7200) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.853640][ T26] audit: type=1326 audit(1754153267.001:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 153.889380][ T7204] loop2: detected capacity change from 0 to 1024 [ 153.918095][ T26] audit: type=1326 audit(1754153267.001:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 153.958753][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1137'. [ 153.997677][ T26] audit: type=1326 audit(1754153267.001:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 154.090002][ T26] audit: type=1326 audit(1754153267.001:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 154.142289][ T26] audit: type=1326 audit(1754153267.001:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 154.202267][ T7204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.215099][ T26] audit: type=1326 audit(1754153267.001:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 154.285423][ T7222] netlink: 'syz.0.1135': attribute type 4 has an invalid length. [ 154.285480][ T7222] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1135'. [ 154.875468][ T26] audit: type=1326 audit(1754153267.001:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 155.052019][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 155.118348][ T7230] netlink: 'syz.0.1143': attribute type 4 has an invalid length. [ 155.147863][ T7229] loop4: detected capacity change from 0 to 8192 [ 155.182463][ T7230] netlink: 'syz.0.1143': attribute type 4 has an invalid length. [ 155.205831][ T7229] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.497037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 155.505555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.531066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.539296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.547691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.556005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.564295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.572711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.581053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.589395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 156.010514][ T7245] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.115710][ T7245] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.168489][ T7245] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.236196][ T7245] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.377010][ T7245] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.389138][ T7245] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.400541][ T7245] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.411974][ T7245] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.607783][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1152'. [ 156.755732][ T7257] loop4: detected capacity change from 0 to 1024 [ 156.890374][ T7257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.261221][ T7272] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 158.268979][ T7272] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1155'. [ 158.853863][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 159.040334][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 159.064948][ T7287] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 159.124359][ T7287] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 159.230375][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1166'. [ 159.333851][ T7298] loop3: detected capacity change from 0 to 128 [ 159.382495][ T7298] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.421453][ T7298] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.829187][ T7314] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 159.837081][ T7314] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1171'. [ 161.013252][ T7316] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.128816][ T7316] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.146083][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 161.193024][ T7316] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.258676][ T7316] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.396851][ T7338] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 161.434984][ T7338] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 161.516761][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1181'. [ 161.519000][ T7333] infiniband syz!: set active [ 161.548258][ T7333] infiniband syz!: added team_slave_0 [ 161.602264][ T7333] RDS/IB: syz!: added [ 161.606386][ T7333] smc: adding ib device syz! with port count 1 [ 161.621330][ T7333] smc: ib device syz! port 1 has pnetid [ 161.640555][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 161.640568][ T26] audit: type=1326 audit(1754153274.861:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.671598][ T26] audit: type=1326 audit(1754153274.861:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.694173][ T26] audit: type=1326 audit(1754153274.861:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.716834][ T26] audit: type=1326 audit(1754153274.861:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.739378][ T26] audit: type=1326 audit(1754153274.861:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.762290][ T26] audit: type=1326 audit(1754153274.861:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.799185][ T26] audit: type=1326 audit(1754153274.901:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.831344][ T26] audit: type=1326 audit(1754153274.901:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 161.866796][ T26] audit: type=1326 audit(1754153274.901:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 162.072074][ T7328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.087702][ T7328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.117959][ T7328] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 162.148378][ T7328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.164267][ T7328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.170360][ T7328] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 162.177770][ T7328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.185347][ T7328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.191900][ T7328] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 162.199265][ T7328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.205552][ T7328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.211791][ T7328] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 162.225010][ T7328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.231217][ T7328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.237359][ T7328] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 162.370263][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 162.497848][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 162.822737][ T7379] device syzkaller0 entered promiscuous mode [ 162.831417][ T7382] loop3: detected capacity change from 0 to 512 [ 162.851338][ T7379] device syzkaller0 left promiscuous mode [ 162.881983][ T7382] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 162.907002][ T7382] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.928404][ T7382] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 162.948943][ T7382] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.994096][ T7382] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 163.034023][ T7382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1200: bg 0: block 40: padding at end of block bitmap is not set [ 163.065379][ T7316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.080163][ T7316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.093093][ T7382] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 163.094003][ T7316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.115986][ T7316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.147323][ T7382] EXT4-fs (loop3): 1 truncate cleaned up [ 163.181226][ T7382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.273014][ T7382] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.1200: bad symlink. [ 163.362491][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1207'. [ 163.372620][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 163.461140][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.678944][ T7424] rdma_rxe: rxe_register_device failed with error -23 [ 163.693224][ T7424] rdma_rxe: failed to add team_slave_0 [ 163.701737][ T7423] device syzkaller0 entered promiscuous mode [ 163.712852][ T7423] device syzkaller0 left promiscuous mode [ 163.955872][ T7429] loop2: detected capacity change from 0 to 8192 [ 163.973422][ T7429] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.181397][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.187510][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.265214][ T7431] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.291792][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.299315][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.761395][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.767411][ T7419] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.781399][ T7419] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 164.789047][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.806545][ T7431] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.816912][ T7419] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.842533][ T7419] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 164.855360][ T7431] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.871313][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.878438][ T7419] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.891333][ T7419] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 164.908831][ T7419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.931149][ T7419] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.947742][ T7419] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 164.961344][ T7419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.977696][ T7419] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.988644][ T7419] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 165.005906][ T7431] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.115720][ T7431] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.146874][ T7431] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.155578][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1221'. [ 165.177742][ T7442] loop3: detected capacity change from 0 to 512 [ 165.190855][ T7431] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.205285][ T7431] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.295025][ T7442] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1222: invalid block [ 165.371575][ T7442] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1222: invalid indirect mapped block 4294967295 (level 1) [ 165.416481][ T7442] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1222: invalid indirect mapped block 4294967295 (level 1) [ 165.501792][ T7442] EXT4-fs (loop3): 2 truncates cleaned up [ 165.601185][ T7442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.871280][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.673898][ T7442] EXT4-fs (loop3): unmounting filesystem. [ 166.733802][ T7468] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 166.821351][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.852789][ T7473] rdma_rxe: rxe_register_device failed with error -23 [ 166.859700][ T7473] rdma_rxe: failed to add team_slave_0 [ 166.901292][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.963590][ T7477] loop2: detected capacity change from 0 to 8192 [ 166.975761][ T7477] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.986599][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.992844][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.322864][ T7482] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.410655][ T7482] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.533166][ T7482] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.629384][ T7470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.712556][ T7482] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.819085][ T7470] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.831283][ T7470] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 167.851498][ T7470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.860087][ T7470] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.874645][ T7470] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 167.891274][ T7470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.900664][ T7470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.918958][ T7470] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 167.942226][ T7470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.968470][ T7470] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.981558][ T7470] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 167.989282][ T7470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.009208][ T7470] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 168.015359][ T7470] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 168.901191][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.930390][ T7501] loop0: detected capacity change from 0 to 512 [ 169.074236][ T7501] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1246: invalid block [ 169.097704][ T7501] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1246: invalid indirect mapped block 4294967295 (level 1) [ 169.127652][ T7501] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1246: invalid indirect mapped block 4294967295 (level 1) [ 169.170482][ T7501] EXT4-fs (loop0): 2 truncates cleaned up [ 169.176715][ T7501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.335516][ T7501] EXT4-fs (loop0): unmounting filesystem. [ 169.416000][ T26] audit: type=1326 audit(1754153282.641:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.447613][ T7526] rdma_rxe: rxe_register_device failed with error -23 [ 169.471519][ T7526] rdma_rxe: failed to add team_slave_0 [ 169.481146][ T26] audit: type=1326 audit(1754153282.671:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.543310][ T26] audit: type=1326 audit(1754153282.671:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.600989][ T7522] loop0: detected capacity change from 0 to 8192 [ 169.607553][ T26] audit: type=1326 audit(1754153282.671:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.661570][ T26] audit: type=1326 audit(1754153282.671:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.714684][ T26] audit: type=1326 audit(1754153282.671:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.757883][ T26] audit: type=1326 audit(1754153282.671:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.780500][ T26] audit: type=1326 audit(1754153282.671:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.807377][ T26] audit: type=1326 audit(1754153282.671:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.829896][ T26] audit: type=1326 audit(1754153282.671:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f96c7d8eb69 code=0x7ffc0000 [ 169.835425][ T7536] device syzkaller0 entered promiscuous mode [ 169.861293][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.874139][ T7536] device syzkaller0 left promiscuous mode [ 169.941552][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.021353][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.027431][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.180554][ T7520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.196045][ T7520] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 170.205352][ T7520] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 170.213105][ T7520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.219085][ T7520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 170.225266][ T7520] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 170.232712][ T7520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.238693][ T7520] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 170.245492][ T7520] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 170.252855][ T7520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.258828][ T7520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 170.266131][ T7520] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 170.273405][ T7520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.279385][ T7520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.285526][ T7520] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 170.581637][ T7545] device veth3 entered promiscuous mode [ 170.595983][ T7547] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 170.911174][ T7545] geneve1 speed is unknown, defaulting to 1000 [ 171.286446][ T7550] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 171.541246][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.855245][ T7566] device syzkaller0 entered promiscuous mode [ 171.886310][ T7566] device syzkaller0 left promiscuous mode [ 172.073222][ T7576] loop4: detected capacity change from 0 to 512 [ 172.098166][ T7580] loop3: detected capacity change from 0 to 128 [ 172.113754][ T7576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.124099][ T7576] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.131227][ T7580] FAT-fs (loop3): Directory bread(block 32) failed [ 172.162472][ T7580] FAT-fs (loop3): Directory bread(block 33) failed [ 172.169321][ T7580] FAT-fs (loop3): Directory bread(block 34) failed [ 172.176033][ T7580] FAT-fs (loop3): Directory bread(block 35) failed [ 172.183324][ T7580] FAT-fs (loop3): Directory bread(block 36) failed [ 172.193892][ T7580] FAT-fs (loop3): Directory bread(block 37) failed [ 172.200760][ T7580] FAT-fs (loop3): Directory bread(block 38) failed [ 172.207741][ T7580] FAT-fs (loop3): Directory bread(block 39) failed [ 172.219373][ T7580] FAT-fs (loop3): Directory bread(block 40) failed [ 172.226138][ T7580] FAT-fs (loop3): Directory bread(block 41) failed [ 172.232803][ T7587] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.1281: corrupted xattr block 19 [ 172.268880][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.271392][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.275034][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.351257][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.448445][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 172.632890][ T7598] loop4: detected capacity change from 0 to 512 [ 172.671321][ T7598] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1287: invalid block [ 172.711659][ T7598] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1287: invalid indirect mapped block 4294967295 (level 1) [ 172.749606][ T7598] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1287: invalid indirect mapped block 4294967295 (level 1) [ 172.779559][ T7598] EXT4-fs (loop4): 2 truncates cleaned up [ 172.789446][ T7598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.949728][ T7482] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.963643][ T7482] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.977431][ T7482] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.992545][ T7482] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.021621][ T7609] device syzkaller0 entered promiscuous mode [ 173.087839][ T7609] device syzkaller0 left promiscuous mode [ 173.097791][ T7598] EXT4-fs (loop4): unmounting filesystem. [ 173.621457][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 173.964523][ T7642] loop4: detected capacity change from 0 to 8192 [ 173.989448][ T7642] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.192145][ T7650] loop2: detected capacity change from 0 to 512 [ 174.239001][ T7650] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1309: invalid block [ 174.315809][ T7656] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.341269][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 174.348231][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 174.354393][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 174.421442][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 174.433177][ T7650] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1309: invalid indirect mapped block 4294967295 (level 1) [ 174.516443][ T7656] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.614626][ T7650] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1309: invalid indirect mapped block 4294967295 (level 1) [ 174.651125][ T7656] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.791441][ T7656] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.824023][ T7650] EXT4-fs (loop2): 2 truncates cleaned up [ 174.829800][ T7650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.864364][ T7656] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.878340][ T7656] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.892119][ T7656] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.905960][ T7656] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.001837][ T7661] device syzkaller0 entered promiscuous mode [ 175.031872][ T7650] EXT4-fs (loop2): unmounting filesystem. [ 175.041207][ T7660] device syzkaller0 left promiscuous mode [ 175.175123][ T7669] loop2: detected capacity change from 0 to 512 [ 175.310813][ T7669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.351293][ T7669] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.532603][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 175.532617][ T26] audit: type=1326 audit(1754153288.761:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 175.574374][ T7684] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1317: corrupted xattr block 19 [ 175.627508][ T26] audit: type=1326 audit(1754153288.791:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 175.628576][ T7690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.709677][ T26] audit: type=1326 audit(1754153288.791:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 175.748702][ T26] audit: type=1326 audit(1754153288.841:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 175.781456][ T26] audit: type=1326 audit(1754153288.841:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 175.815386][ T7690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.851929][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 175.913585][ T7690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.125534][ T7697] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.590907][ T7701] device syzkaller0 entered promiscuous mode [ 176.597956][ T7700] device syzkaller0 left promiscuous mode [ 176.607925][ T7697] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.689688][ T7690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.726358][ T7697] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.736204][ T7710] loop2: detected capacity change from 0 to 512 [ 176.753126][ T7710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.810554][ T7690] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.812930][ T26] audit: type=1804 audit(1754153290.041:880): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1332" name="/newroot/241/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 176.843837][ T7697] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.866031][ T7690] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.880203][ T7690] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.896451][ T7690] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.961355][ T4256] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 177.121295][ T4256] usb 1-1: device descriptor read/64, error -71 [ 177.402175][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.508346][ T7723] device veth0_vlan left promiscuous mode [ 177.571211][ T4256] usb 1-1: device descriptor read/64, error -71 [ 177.673551][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 177.693018][ T4256] usb usb1-port1: attempt power cycle [ 177.808057][ T7732] loop3: detected capacity change from 0 to 512 [ 177.827530][ T7734] device syzkaller0 entered promiscuous mode [ 177.834950][ T7733] device syzkaller0 left promiscuous mode [ 177.859297][ T7732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.868989][ T7732] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.111286][ T4256] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.141951][ T4256] usb 1-1: device descriptor read/8, error -71 [ 178.160160][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 178.421580][ T4256] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.452430][ T4256] usb 1-1: device descriptor read/8, error -71 [ 178.571415][ T4256] usb usb1-port1: unable to enumerate USB device [ 178.603606][ T26] audit: type=1326 audit(1754153291.831:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 178.628684][ T7750] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.640743][ T26] audit: type=1326 audit(1754153291.831:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 178.688241][ T26] audit: type=1326 audit(1754153291.831:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 178.712413][ T26] audit: type=1326 audit(1754153291.831:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9998eb69 code=0x7ffc0000 [ 178.747764][ T7750] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.843462][ T7750] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.880646][ T7754] loop3: detected capacity change from 0 to 512 [ 178.906709][ T7750] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.930488][ T7754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.048720][ T7750] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.084552][ T7750] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.122065][ T7750] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.155421][ T7750] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.001926][ T7784] netlink: 'syz.0.1362': attribute type 13 has an invalid length. [ 180.057802][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 180.088996][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.131787][ T7784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.536478][ T7803] loop0: detected capacity change from 0 to 512 [ 180.560059][ T7803] EXT4-fs: Ignoring removed oldalloc option [ 180.594844][ T7803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.619557][ T7803] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.724297][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 180.741554][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 180.747789][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 180.753859][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 180.759866][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 180.766054][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 180.950076][ T7697] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.964821][ T7697] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.978517][ T7697] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.992274][ T7697] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.126227][ T7839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.133561][ T7839] IPv6: NLM_F_CREATE should be set when creating new route [ 182.140798][ T7839] IPv6: NLM_F_CREATE should be set when creating new route [ 182.169926][ T7841] loop3: detected capacity change from 0 to 512 [ 182.199777][ T7841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.221215][ T7841] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.342088][ T7841] bridge0: port 4(syz_tun) entered blocking state [ 182.391362][ T7841] bridge0: port 4(syz_tun) entered disabled state [ 182.398443][ T7847] loop4: detected capacity change from 0 to 512 [ 182.412199][ T7841] device syz_tun entered promiscuous mode [ 182.416838][ T7847] EXT4-fs: Ignoring removed oldalloc option [ 182.418296][ T7841] bridge0: port 4(syz_tun) entered blocking state [ 182.430392][ T7841] bridge0: port 4(syz_tun) entered forwarding state [ 182.473511][ T7848] device syz_tun left promiscuous mode [ 182.481656][ T7848] bridge0: port 4(syz_tun) entered disabled state [ 182.488824][ T7847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.515310][ T7848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.541807][ T7847] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.557473][ T7848] bond0: (slave dummy0): Releasing backup interface [ 182.605220][ T7848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.644370][ T7848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.685861][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.755885][ T7848] device bridge_slave_1 left promiscuous mode [ 182.764634][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 182.801400][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.872574][ T7848] bond0: (slave bond_slave_0): Releasing backup interface [ 183.042173][ T7848] bond0: (slave bond_slave_1): Releasing backup interface [ 183.604378][ T7848] team0: Port device team_slave_0 removed [ 183.636844][ T7848] team0: Port device team_slave_1 removed [ 183.651925][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.670527][ T7848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.685012][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.701121][ T7848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.725985][ T7848] device vlan2 left promiscuous mode [ 183.731581][ T7848] device bridge_slave_0 left promiscuous mode [ 183.737940][ T7848] bridge0: port 3(vlan2) entered disabled state [ 183.797160][ T7857] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.811948][ T7859] netlink: 'syz.4.1390': attribute type 13 has an invalid length. [ 183.822094][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 184.007437][ T7859] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.068236][ T7859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.144215][ T7857] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.855295][ T7857] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.986459][ T7857] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.069919][ T7857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.083832][ T7857] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.098769][ T7857] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.112588][ T7857] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.159591][ T7879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.166954][ T7879] IPv6: NLM_F_CREATE should be set when creating new route [ 185.174199][ T7879] IPv6: NLM_F_CREATE should be set when creating new route [ 185.228885][ T7882] device syzkaller0 entered promiscuous mode [ 185.285096][ T7885] loop1: detected capacity change from 0 to 512 [ 185.301776][ T7885] EXT4-fs: Ignoring removed oldalloc option [ 185.307916][ T7882] device syzkaller0 left promiscuous mode [ 185.335286][ T7885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.351390][ T7885] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.424338][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 185.650081][ T7897] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.697175][ T7895] loop4: detected capacity change from 0 to 512 [ 185.730236][ T7897] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.830533][ T7897] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.957486][ T7897] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.112585][ T7895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.132430][ T7895] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.175000][ T7895] bridge0: port 1(syz_tun) entered blocking state [ 186.191751][ T7895] bridge0: port 1(syz_tun) entered disabled state [ 186.205786][ T7895] device syz_tun entered promiscuous mode [ 186.212511][ T7895] bridge0: port 1(syz_tun) entered blocking state [ 186.219039][ T7895] bridge0: port 1(syz_tun) entered forwarding state [ 186.254605][ T7903] device syz_tun left promiscuous mode [ 186.260407][ T7903] bridge0: port 1(syz_tun) entered disabled state [ 186.274044][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.288445][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.302014][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.318969][ T7902] netlink: 'syz.1.1405': attribute type 13 has an invalid length. [ 186.365239][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.378061][ T7902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.425753][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 186.491692][ T7908] device syzkaller0 entered promiscuous mode [ 186.505599][ T7908] device syzkaller0 left promiscuous mode [ 186.540406][ T7910] loop4: detected capacity change from 0 to 512 [ 186.550408][ T7910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.571202][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 186.571214][ T26] audit: type=1804 audit(1754153299.801:888): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1407" name="/newroot/327/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 187.499441][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 187.702238][ T7924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.709525][ T7924] IPv6: NLM_F_CREATE should be set when creating new route [ 187.778006][ T26] audit: type=1326 audit(1754153300.971:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 187.864850][ T26] audit: type=1326 audit(1754153300.971:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.349442][ T26] audit: type=1326 audit(1754153301.051:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.494714][ T26] audit: type=1326 audit(1754153301.221:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.527081][ T26] audit: type=1326 audit(1754153301.221:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.625895][ T26] audit: type=1326 audit(1754153301.241:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.631413][ T7936] loop2: detected capacity change from 0 to 512 [ 188.651221][ T7934] geneve1 speed is unknown, defaulting to 1000 [ 188.655032][ T7940] device syzkaller0 entered promiscuous mode [ 188.683498][ T7940] device syzkaller0 left promiscuous mode [ 188.694546][ T26] audit: type=1326 audit(1754153301.251:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.754006][ T7936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.763139][ T26] audit: type=1326 audit(1754153301.251:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 188.794325][ T7936] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.835682][ T26] audit: type=1326 audit(1754153301.261:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.2.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c378eb69 code=0x7ffc0000 [ 189.025216][ T4271] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 189.070109][ T4271] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz-executor: corrupted xattr block 19 [ 189.115907][ T7948] netlink: 'syz.3.1424': attribute type 13 has an invalid length. [ 189.138913][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1426'. [ 189.148299][ T4271] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 189.180589][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 189.243669][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.266394][ T7956] loop2: detected capacity change from 0 to 512 [ 189.278099][ T7956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.287326][ T7956] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.371514][ T7948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.390284][ T7956] bridge0: port 3(syz_tun) entered blocking state [ 189.397205][ T7956] bridge0: port 3(syz_tun) entered disabled state [ 189.404804][ T7956] device syz_tun entered promiscuous mode [ 189.410908][ T7956] bridge0: port 3(syz_tun) entered blocking state [ 189.417443][ T7956] bridge0: port 3(syz_tun) entered forwarding state [ 189.429126][ T7960] device syz_tun left promiscuous mode [ 189.441518][ T7960] bridge0: port 3(syz_tun) entered disabled state [ 189.462748][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.473811][ T7960] device bridge_slave_0 left promiscuous mode [ 189.500407][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.535338][ T7960] device bridge_slave_1 left promiscuous mode [ 189.553149][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.580348][ T7960] bond0: (slave bond_slave_0): Releasing backup interface [ 189.606962][ T7960] bond0: (slave bond_slave_1): Releasing backup interface [ 189.653758][ T7960] infiniband syz!: set down [ 189.662077][ T7960] team0: Port device team_slave_0 removed [ 189.685364][ T7960] team0: Port device team_slave_1 removed [ 189.702933][ T7965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.710201][ T7965] IPv6: NLM_F_CREATE should be set when creating new route [ 189.830943][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 189.940408][ T7975] loop2: detected capacity change from 0 to 512 [ 189.989425][ T7975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.008739][ T7975] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.080905][ T7984] loop3: detected capacity change from 0 to 512 [ 190.118530][ T4271] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 190.152752][ T4271] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz-executor: corrupted xattr block 19 [ 190.154670][ T7984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.178207][ T4271] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 190.567207][ T7983] EXT4-fs (loop2): unmounting filesystem. [ 190.638366][ T9] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.722061][ T9] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.792774][ T9] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.877980][ T9] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.018455][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 191.118163][ T9] tipc: Left network mode [ 191.141818][ T7996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.351619][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.360708][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.368961][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.377936][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.405437][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.414667][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.441896][ T7897] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.455731][ T7897] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.469509][ T7897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.482255][ T7999] geneve1 speed is unknown, defaulting to 1000 [ 191.487445][ T7897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.666750][ T8007] loop0: detected capacity change from 0 to 512 [ 191.713288][ T8007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.732302][ T8007] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.845429][ T8012] loop4: detected capacity change from 0 to 512 [ 191.873890][ T8015] device syz_tun left promiscuous mode [ 191.879546][ T8015] bridge0: port 3(syz_tun) entered disabled state [ 191.918596][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.928085][ T8012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.947863][ T8012] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.961250][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.968694][ T8015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.978527][ T8015] device bridge_slave_0 left promiscuous mode [ 191.985615][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.994936][ T8015] device bridge_slave_1 left promiscuous mode [ 192.002269][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.012986][ T8015] bond0: (slave bond_slave_0): Releasing backup interface [ 192.028277][ T8015] bond0: (slave bond_slave_1): Releasing backup interface [ 192.087891][ T8015] team0: Port device team_slave_0 removed [ 192.115926][ T8015] team0: Port device team_slave_1 removed [ 192.122794][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.130277][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.155411][ T4274] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 192.174214][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.182593][ T4274] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2934: inode #15: comm syz-executor: corrupted xattr block 19 [ 192.187112][ T8025] loop1: detected capacity change from 0 to 512 [ 192.195304][ T4274] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 192.207237][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.228616][ T8015] infiniband syz1: set active [ 192.240799][ T8025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.296139][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 192.296154][ T26] audit: type=1804 audit(1754153305.531:937): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1455" name="/newroot/255/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 192.324243][ T26] audit: type=1804 audit(1754153305.531:938): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1455" name="/newroot/255/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 192.348908][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 192.397158][ T4385] geneve1 speed is unknown, defaulting to 1000 [ 192.533774][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 192.883305][ T8033] loop3: detected capacity change from 0 to 764 [ 193.369217][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 193.491240][ T7999] chnl_net:caif_netlink_parms(): no params data found [ 193.541269][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 193.566172][ T8046] loop1: detected capacity change from 0 to 512 [ 193.640788][ T8046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.672026][ T8046] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.804373][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.813906][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.821950][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.829822][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.845546][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.853090][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.868806][ T9] device hsr_slave_0 left promiscuous mode [ 193.881138][ T9] device hsr_slave_1 left promiscuous mode [ 193.907725][ T9] device veth1_macvtap left promiscuous mode [ 193.914410][ T9] device veth0_macvtap left promiscuous mode [ 193.920622][ T9] device veth1_vlan left promiscuous mode [ 193.926890][ T9] device veth0_vlan left promiscuous mode [ 194.027217][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.033572][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.120006][ T8067] loop0: detected capacity change from 0 to 512 [ 194.132188][ T8067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.141420][ T8067] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.334639][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 194.789173][ T56] smc: removing ib device syz! [ 195.516181][ T9] bond0 (unregistering): Released all slaves [ 195.606777][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.620103][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.627574][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 195.635253][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.656577][ T8067] bridge0: port 1(syz_tun) entered blocking state [ 195.673703][ T8067] bridge0: port 1(syz_tun) entered disabled state [ 195.691968][ T8067] device syz_tun entered promiscuous mode [ 195.698663][ T8067] bridge0: port 1(syz_tun) entered blocking state [ 195.705206][ T8067] bridge0: port 1(syz_tun) entered forwarding state [ 195.720761][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.742000][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.751845][ T7999] device bridge_slave_0 entered promiscuous mode [ 195.763842][ T8058] geneve1 speed is unknown, defaulting to 1000 [ 195.772005][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 195.778572][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.811848][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.839194][ T7999] device bridge_slave_1 entered promiscuous mode [ 195.934966][ T8080] loop0: detected capacity change from 0 to 512 [ 195.941594][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 195.965487][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.980358][ T8080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.989885][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.066688][ T26] audit: type=1804 audit(1754153309.291:939): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1474" name="/newroot/281/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 196.123384][ T26] audit: type=1804 audit(1754153309.351:940): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1474" name="/newroot/281/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 196.152103][ T7999] team0: Port device team_slave_0 added [ 196.249688][ T7999] team0: Port device team_slave_1 added [ 196.390246][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.400837][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.489482][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.523891][ T8095] loop3: detected capacity change from 0 to 512 [ 196.535634][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.553731][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.590005][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.635016][ T8095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.644793][ T8095] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.749435][ T7999] device hsr_slave_0 entered promiscuous mode [ 196.776399][ T7999] device hsr_slave_1 entered promiscuous mode [ 196.798355][ T7999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.811161][ T7999] Cannot create hsr debugfs directory [ 196.831786][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 196.893938][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.911719][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.919147][ T8101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.929145][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 196.993210][ T8103] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1483'. [ 197.014195][ T9] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.097171][ T9] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.192297][ T8110] loop1: detected capacity change from 0 to 512 [ 197.207859][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.216554][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.228846][ T8110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.252749][ T8058] device bridge_slave_0 entered promiscuous mode [ 197.261319][ T8110] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.283238][ T9] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.299475][ T8110] bridge0: port 1(syz_tun) entered blocking state [ 197.306370][ T8110] bridge0: port 1(syz_tun) entered disabled state [ 197.314391][ T8110] device syz_tun entered promiscuous mode [ 197.320903][ T8110] bridge0: port 1(syz_tun) entered blocking state [ 197.327442][ T8110] bridge0: port 1(syz_tun) entered forwarding state [ 197.340802][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.350970][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.359445][ T8058] device bridge_slave_1 entered promiscuous mode [ 197.385366][ T9] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.395000][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 197.435587][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.463259][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.498512][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 197.562928][ T8058] team0: Port device team_slave_0 added [ 197.592910][ T8058] team0: Port device team_slave_1 added [ 197.658858][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.676875][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.711500][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.718025][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 197.737198][ T8126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.744506][ T8126] IPv6: NLM_F_CREATE should be set when creating new route [ 197.751767][ T8126] IPv6: NLM_F_CREATE should be set when creating new route [ 197.780094][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.816611][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.843498][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.886764][ T7999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.899251][ T7999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.917428][ T7999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.935652][ T7999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.976148][ T8058] device hsr_slave_0 entered promiscuous mode [ 197.983611][ T8058] device hsr_slave_1 entered promiscuous mode [ 197.990770][ T8058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.998809][ T8058] Cannot create hsr debugfs directory [ 198.021141][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 198.230605][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.238006][ T8058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.247361][ T8058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.257174][ T8058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.268773][ T8058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.308162][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.320952][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.329488][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.372912][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.381978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.390463][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.397550][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.406258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.416039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.424622][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.432849][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.440623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.450649][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.479401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.507934][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.518621][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.527406][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.554849][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.565294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.599296][ T7999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.610405][ T7999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.632205][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.639740][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.662943][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.681820][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.690692][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.699652][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.758355][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.775103][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.787023][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.798555][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.829356][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.851913][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.859031][ T7246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.903605][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.916064][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.930333][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.945275][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.952411][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.960196][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.982602][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.998223][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.006412][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.029533][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.039158][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.049258][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.065478][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.075384][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.084504][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.197786][ T8058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.239921][ T8058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.283682][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.293028][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.312464][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.331439][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.370206][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.781918][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 199.866992][ T9] device hsr_slave_0 left promiscuous mode [ 199.889750][ T9] device hsr_slave_1 left promiscuous mode [ 199.916465][ T9] device veth1_macvtap left promiscuous mode [ 199.922955][ T9] device veth0_macvtap left promiscuous mode [ 199.929036][ T9] device veth1_vlan left promiscuous mode [ 199.934836][ T9] device veth0_vlan left promiscuous mode [ 200.106045][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 200.907404][ T9] bond0 (unregistering): Released all slaves [ 201.020252][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.029063][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.062653][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.082439][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.089881][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.116922][ T7999] device veth0_vlan entered promiscuous mode [ 201.139041][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.150829][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.176977][ T7999] device veth1_vlan entered promiscuous mode [ 201.194409][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.203279][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.211379][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.233650][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.242380][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.250931][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.263179][ T7999] device veth0_macvtap entered promiscuous mode [ 201.274833][ T7999] device veth1_macvtap entered promiscuous mode [ 201.306145][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.313771][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.323113][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.331599][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.340298][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.354285][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.371782][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.393898][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.406426][ T7999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.415666][ T7999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.424603][ T7999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.434488][ T7999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.562707][ T4681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.570896][ T4681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.590484][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.591664][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.615322][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.642607][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.669696][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.692356][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.715698][ T8058] device veth0_vlan entered promiscuous mode [ 201.752691][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.762876][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.812988][ T8058] device veth1_vlan entered promiscuous mode [ 201.830359][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.839190][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.847355][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.864634][ T8164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.930773][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.951790][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.960394][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.004241][ T8058] device veth0_macvtap entered promiscuous mode [ 202.004985][ T8171] loop5: detected capacity change from 0 to 512 [ 202.022977][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.049492][ T8058] device veth1_macvtap entered promiscuous mode [ 202.069083][ T8173] device syz_tun left promiscuous mode [ 202.076148][ T8173] bridge0: port 1(syz_tun) entered disabled state [ 202.087949][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.098414][ T8171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 202.104386][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.124568][ T26] audit: type=1804 audit(1754153315.351:941): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1492" name="/newroot/1/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 202.132066][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.159474][ T26] audit: type=1804 audit(1754153315.381:942): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1492" name="/newroot/1/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 202.181322][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 202.249189][ T8180] loop3: detected capacity change from 0 to 512 [ 202.265334][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.288622][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.313163][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.345227][ T8058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.356249][ T8058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.367415][ T8180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 202.381214][ T8180] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.408805][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.438635][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.469966][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.500903][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.525748][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.559976][ T8058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.585201][ T8058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.604899][ T8058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.613895][ T8058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.808938][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.831394][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.860406][ T8198] loop1: detected capacity change from 0 to 1024 [ 202.865068][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1505'. [ 202.884724][ T8198] EXT4-fs: Ignoring removed orlov option [ 202.905075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.917845][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.929206][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.941588][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.948884][ T8198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.023555][ T26] audit: type=1800 audit(1754153316.251:943): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1503" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 203.079095][ T7999] EXT4-fs (loop5): unmounting filesystem. [ 203.111625][ T26] audit: type=1804 audit(1754153316.251:944): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1503" name="/newroot/269/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 203.134962][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 203.262694][ T8211] loop5: detected capacity change from 0 to 128 [ 203.290163][ T8209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.298337][ T8211] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.364517][ T8211] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.392577][ T8215] loop6: detected capacity change from 0 to 164 [ 203.467646][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 203.483155][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.759730][ T8233] loop0: detected capacity change from 0 to 512 [ 203.785094][ T8235] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1518'. [ 203.807668][ T8235] unsupported nlmsg_type 40 [ 203.821151][ T8233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.830607][ T8233] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.940917][ T26] audit: type=1326 audit(1754153317.161:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 203.965090][ T26] audit: type=1326 audit(1754153317.171:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 203.987726][ T26] audit: type=1326 audit(1754153317.171:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 204.010382][ T26] audit: type=1326 audit(1754153317.171:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 204.033600][ T26] audit: type=1326 audit(1754153317.171:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 204.056490][ T26] audit: type=1326 audit(1754153317.171:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4931b8eb69 code=0x7ffc0000 [ 204.153915][ T8227] loop3: detected capacity change from 0 to 512 [ 204.179365][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 204.199210][ T8227] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 204.217817][ T8227] EXT4-fs (loop3): orphan cleanup on readonly fs [ 204.243440][ T8227] EXT4-fs (loop3): 1 orphan inode deleted [ 204.262997][ T4681] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1 [ 204.321477][ T8227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.642151][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 204.747947][ T8274] loop1: detected capacity change from 0 to 128 [ 204.792489][ T8274] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.801967][ T8280] loop6: detected capacity change from 0 to 512 [ 204.842360][ T8274] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.874923][ T8280] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 204.898164][ T8280] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.252269][ T8058] EXT4-fs (loop6): unmounting filesystem. [ 205.278543][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 205.581751][ T8323] loop1: detected capacity change from 0 to 1024 [ 205.604054][ T8323] [ 205.606417][ T8323] ====================================================== [ 205.613436][ T8323] WARNING: possible circular locking dependency detected [ 205.620465][ T8323] 6.1.147-syzkaller #0 Not tainted [ 205.625574][ T8323] ------------------------------------------------------ [ 205.632595][ T8323] syz.1.1558/8323 is trying to acquire lock: [ 205.638583][ T8323] ffff88805069a0a0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 205.648096][ T8323] [ 205.648096][ T8323] but task is already holding lock: [ 205.655453][ T8323] ffff888023d30208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 205.665006][ T8323] [ 205.665006][ T8323] which lock already depends on the new lock. [ 205.665006][ T8323] [ 205.676434][ T8323] [ 205.676434][ T8323] the existing dependency chain (in reverse order) is: [ 205.685437][ T8323] [ 205.685437][ T8323] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 205.693505][ T8323] down_read+0x42/0x2d0 [ 205.698171][ T8323] v2_read_dquot+0x4a/0x110 [ 205.703185][ T8323] dquot_acquire+0x152/0x520 [ 205.708278][ T8323] ext4_acquire_dquot+0x2d9/0x4a0 [ 205.713807][ T8323] dqget+0x778/0xeb0 [ 205.718205][ T8323] __dquot_initialize+0x3b6/0xcb0 [ 205.723733][ T8323] ext4_process_orphan+0x54/0x300 [ 205.729262][ T8323] ext4_orphan_cleanup+0xbd3/0x1400 [ 205.734966][ T8323] ext4_fill_super+0x7b78/0x8110 [ 205.740407][ T8323] get_tree_bdev+0x3f1/0x610 [ 205.745500][ T8323] vfs_get_tree+0x88/0x270 [ 205.750422][ T8323] do_new_mount+0x24a/0xa40 [ 205.755430][ T8323] __se_sys_mount+0x2d6/0x3c0 [ 205.760633][ T8323] do_syscall_64+0x4c/0xa0 [ 205.765554][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.771957][ T8323] [ 205.771957][ T8323] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 205.779585][ T8323] __mutex_lock+0x120/0xaf0 [ 205.784606][ T8323] dquot_commit+0x5a/0x410 [ 205.789528][ T8323] ext4_write_dquot+0x1f0/0x360 [ 205.794884][ T8323] mark_all_dquot_dirty+0x1e3/0x400 [ 205.800584][ T8323] __dquot_free_space+0x7ec/0xbc0 [ 205.806118][ T8323] ext4_free_blocks+0x1bab/0x2640 [ 205.811649][ T8323] ext4_ext_remove_space+0x1f0d/0x4490 [ 205.817612][ T8323] ext4_ext_truncate+0x211/0x370 [ 205.823052][ T8323] ext4_truncate+0xa0b/0x1230 [ 205.828246][ T8323] ext4_evict_inode+0xb35/0x1100 [ 205.833691][ T8323] evict+0x485/0x870 [ 205.838090][ T8323] ext4_orphan_cleanup+0xbd3/0x1400 [ 205.843797][ T8323] ext4_fill_super+0x7b78/0x8110 [ 205.849237][ T8323] get_tree_bdev+0x3f1/0x610 [ 205.854331][ T8323] vfs_get_tree+0x88/0x270 [ 205.859250][ T8323] do_new_mount+0x24a/0xa40 [ 205.864256][ T8323] __se_sys_mount+0x2d6/0x3c0 [ 205.869450][ T8323] do_syscall_64+0x4c/0xa0 [ 205.874388][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.880802][ T8323] [ 205.880802][ T8323] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 205.888616][ T8323] __lock_acquire+0x2cf8/0x7c50 [ 205.893981][ T8323] lock_acquire+0x1b4/0x490 [ 205.898995][ T8323] down_write+0x36/0x60 [ 205.903663][ T8323] ext4_map_blocks+0x903/0x1b60 [ 205.909026][ T8323] ext4_getblk+0x1ab/0x6d0 [ 205.913949][ T8323] ext4_bread+0x26/0x170 [ 205.918698][ T8323] ext4_quota_write+0x230/0x570 [ 205.924055][ T8323] find_free_dqentry+0x673/0xc20 [ 205.929499][ T8323] do_insert_tree+0x70d/0x1040 [ 205.934769][ T8323] do_insert_tree+0x9eb/0x1040 [ 205.940036][ T8323] do_insert_tree+0x9eb/0x1040 [ 205.945303][ T8323] do_insert_tree+0x9ae/0x1040 [ 205.950571][ T8323] qtree_write_dquot+0x48d/0x5b0 [ 205.956019][ T8323] v2_write_dquot+0x108/0x190 [ 205.961202][ T8323] dquot_acquire+0x2d5/0x520 [ 205.966309][ T8323] ext4_acquire_dquot+0x2d9/0x4a0 [ 205.971838][ T8323] dqget+0x778/0xeb0 [ 205.976234][ T8323] __dquot_initialize+0x3b6/0xcb0 [ 205.981761][ T8323] ext4_process_orphan+0x54/0x300 [ 205.987291][ T8323] ext4_orphan_cleanup+0xbd3/0x1400 [ 205.992996][ T8323] ext4_fill_super+0x7b78/0x8110 [ 205.998439][ T8323] get_tree_bdev+0x3f1/0x610 [ 206.003534][ T8323] vfs_get_tree+0x88/0x270 [ 206.008484][ T8323] do_new_mount+0x24a/0xa40 [ 206.013493][ T8323] __se_sys_mount+0x2d6/0x3c0 [ 206.018672][ T8323] do_syscall_64+0x4c/0xa0 [ 206.023596][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.030000][ T8323] [ 206.030000][ T8323] other info that might help us debug this: [ 206.030000][ T8323] [ 206.040207][ T8323] Chain exists of: [ 206.040207][ T8323] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 206.040207][ T8323] [ 206.053845][ T8323] Possible unsafe locking scenario: [ 206.053845][ T8323] [ 206.061279][ T8323] CPU0 CPU1 [ 206.066628][ T8323] ---- ---- [ 206.071974][ T8323] lock(&s->s_dquot.dqio_sem); [ 206.076814][ T8323] lock(&dquot->dq_lock); [ 206.083732][ T8323] lock(&s->s_dquot.dqio_sem); [ 206.091085][ T8323] lock(&ei->i_data_sem/2); [ 206.095661][ T8323] [ 206.095661][ T8323] *** DEADLOCK *** [ 206.095661][ T8323] [ 206.103798][ T8323] 3 locks held by syz.1.1558/8323: [ 206.108888][ T8323] #0: ffff888023d300e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 206.118973][ T8323] #1: ffff888073fbc428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 206.128369][ T8323] #2: ffff888023d30208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 206.138379][ T8323] [ 206.138379][ T8323] stack backtrace: [ 206.144266][ T8323] CPU: 1 PID: 8323 Comm: syz.1.1558 Not tainted 6.1.147-syzkaller #0 [ 206.152315][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.162396][ T8323] Call Trace: [ 206.165663][ T8323] [ 206.168580][ T8323] dump_stack_lvl+0x168/0x22e [ 206.173245][ T8323] ? load_image+0x3b0/0x3b0 [ 206.177745][ T8323] ? show_regs_print_info+0x12/0x12 [ 206.182927][ T8323] ? print_circular_bug+0x12b/0x1a0 [ 206.188112][ T8323] check_noncircular+0x274/0x310 [ 206.193036][ T8323] ? add_chain_block+0x940/0x940 [ 206.197960][ T8323] ? lockdep_lock+0xdc/0x1e0 [ 206.202536][ T8323] ? __lock_acquire+0x13c0/0x7c50 [ 206.207541][ T8323] ? _find_first_zero_bit+0xcf/0x100 [ 206.212815][ T8323] __lock_acquire+0x2cf8/0x7c50 [ 206.217656][ T8323] ? mark_lock+0x94/0x320 [ 206.221969][ T8323] ? verify_lock_unused+0x140/0x140 [ 206.227147][ T8323] ? mark_lock+0x94/0x320 [ 206.231458][ T8323] ? verify_lock_unused+0x140/0x140 [ 206.236643][ T8323] lock_acquire+0x1b4/0x490 [ 206.241129][ T8323] ? ext4_map_blocks+0x903/0x1b60 [ 206.246138][ T8323] ? __might_sleep+0xd0/0xd0 [ 206.250713][ T8323] ? read_lock_is_recursive+0x10/0x10 [ 206.256086][ T8323] ? percpu_counter_add_batch+0x13b/0x160 [ 206.261809][ T8323] ? rcu_is_watching+0x11/0xa0 [ 206.266568][ T8323] ? ext4_es_lookup_extent+0x443/0xb20 [ 206.272014][ T8323] down_write+0x36/0x60 [ 206.276155][ T8323] ? ext4_map_blocks+0x903/0x1b60 [ 206.281166][ T8323] ext4_map_blocks+0x903/0x1b60 [ 206.286004][ T8323] ? ext4_es_lookup_extent+0x443/0xb20 [ 206.291451][ T8323] ? ext4_issue_zeroout+0x250/0x250 [ 206.296637][ T8323] ? kasan_set_track+0x4b/0x70 [ 206.301384][ T8323] ? find_free_dqentry+0x55/0xc20 [ 206.306389][ T8323] ? do_insert_tree+0x70d/0x1040 [ 206.311307][ T8323] ? do_insert_tree+0x9eb/0x1040 [ 206.316225][ T8323] ? ext4_issue_zeroout+0x250/0x250 [ 206.321407][ T8323] ? v2_write_dquot+0x108/0x190 [ 206.326241][ T8323] ext4_getblk+0x1ab/0x6d0 [ 206.330661][ T8323] ? vfs_get_tree+0x88/0x270 [ 206.335229][ T8323] ? do_new_mount+0x24a/0xa40 [ 206.339883][ T8323] ? __se_sys_mount+0x2d6/0x3c0 [ 206.344717][ T8323] ? ext4_get_block_unwritten+0x100/0x100 [ 206.350418][ T8323] ? ext4_getblk+0x2a8/0x6d0 [ 206.354995][ T8323] ? ext4_get_block_unwritten+0x100/0x100 [ 206.360699][ T8323] ext4_bread+0x26/0x170 [ 206.364931][ T8323] ext4_quota_write+0x230/0x570 [ 206.369782][ T8323] ? ext4_quota_read+0x380/0x380 [ 206.374715][ T8323] ? ext4_quota_read+0x305/0x380 [ 206.379640][ T8323] ? check_dquot_block_header+0x212/0x2f0 [ 206.385346][ T8323] ? ext4_quota_read+0x380/0x380 [ 206.390266][ T8323] find_free_dqentry+0x673/0xc20 [ 206.395197][ T8323] do_insert_tree+0x70d/0x1040 [ 206.399969][ T8323] do_insert_tree+0x9eb/0x1040 [ 206.404724][ T8323] do_insert_tree+0x9eb/0x1040 [ 206.409474][ T8323] do_insert_tree+0x9ae/0x1040 [ 206.414228][ T8323] qtree_write_dquot+0x48d/0x5b0 [ 206.419156][ T8323] ? qtree_entry_unused+0xe0/0xe0 [ 206.424197][ T8323] ? rwsem_write_trylock+0x12f/0x1b0 [ 206.429489][ T8323] ? trace_contention_end+0x5f/0x170 [ 206.434901][ T8323] ? preempt_count_add+0x8d/0x190 [ 206.439934][ T8323] v2_write_dquot+0x108/0x190 [ 206.444653][ T8323] dquot_acquire+0x2d5/0x520 [ 206.449244][ T8323] ext4_acquire_dquot+0x2d9/0x4a0 [ 206.454270][ T8323] dqget+0x778/0xeb0 [ 206.458156][ T8323] __dquot_initialize+0x3b6/0xcb0 [ 206.463175][ T8323] ? dquot_initialize+0x20/0x20 [ 206.468013][ T8323] ? ext4_get_projid+0x140/0x140 [ 206.472945][ T8323] ext4_process_orphan+0x54/0x300 [ 206.477965][ T8323] ext4_orphan_cleanup+0xbd3/0x1400 [ 206.483158][ T8323] ? ext4_orphan_del+0xb90/0xb90 [ 206.488081][ T8323] ? errseq_check_and_advance+0x62/0x120 [ 206.493702][ T8323] ext4_fill_super+0x7b78/0x8110 [ 206.498634][ T8323] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 206.504856][ T8323] ? snprintf+0xd7/0x120 [ 206.509087][ T8323] ? preempt_count_add+0x8d/0x190 [ 206.514094][ T8323] ? vscnprintf+0x80/0x80 [ 206.518404][ T8323] ? set_blocksize+0x1d3/0x350 [ 206.523151][ T8323] ? sb_set_blocksize+0xa5/0xe0 [ 206.527988][ T8323] get_tree_bdev+0x3f1/0x610 [ 206.532560][ T8323] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 206.538783][ T8323] vfs_get_tree+0x88/0x270 [ 206.543180][ T8323] do_new_mount+0x24a/0xa40 [ 206.547665][ T8323] __se_sys_mount+0x2d6/0x3c0 [ 206.552322][ T8323] ? __x64_sys_mount+0xc0/0xc0 [ 206.557065][ T8323] ? lockdep_hardirqs_on+0x94/0x140 [ 206.562250][ T8323] ? __x64_sys_mount+0x1c/0xc0 [ 206.567000][ T8323] do_syscall_64+0x4c/0xa0 [ 206.571399][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 206.576054][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 206.580712][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.586593][ T8323] RIP: 0033:0x7fed9239030a [ 206.591003][ T8323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.610597][ T8323] RSP: 002b:00007fed9318ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.619001][ T8323] RAX: ffffffffffffffda RBX: 00007fed9318eef0 RCX: 00007fed9239030a [ 206.626954][ T8323] RDX: 0000200000000300 RSI: 00002000000005c0 RDI: 00007fed9318eeb0 [ 206.634940][ T8323] RBP: 0000200000000300 R08: 00007fed9318eef0 R09: 0000000001818e58 [ 206.642914][ T8323] R10: 0000000001818e58 R11: 0000000000000246 R12: 00002000000005c0 [ 206.650872][ T8323] R13: 00007fed9318eeb0 R14: 000000000000063f R15: 00002000000003c0 [ 206.658837][ T8323] [ 206.671329][ T8323] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1558: Invalid block bitmap block 0 in block_group 0 [ 206.685241][ T8323] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1558: Failed to acquire dquot type 0 [ 206.701369][ T8323] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1558: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.716173][ T8323] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1558: Invalid inode bitmap blk 0 in block_group 0 [ 206.728963][ T4402] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:9: Failed to release dquot type 0 [ 206.729029][ T8323] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 206.749204][ T8323] EXT4-fs (loop1): 1 orphan inode deleted [ 206.754978][ T8323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.776725][ T4276] EXT4-fs (loop1): unmounting filesystem.