last executing test programs: 20m12.13589879s ago: executing program 32 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x1500, &(0x7f0000003080)="$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") socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r4, 0x0, 0x8003}, 0x55) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 19m45.477020912s ago: executing program 33 (id=53): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xb, 0x8000, 0x4, 0xb, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x800002, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x502a, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0xff, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0xc415, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 16m21.55686374s ago: executing program 34 (id=581): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) socket(0x840000000002, 0x3, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x100000000) 16m21.07948491s ago: executing program 35 (id=582): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 16m20.650173314s ago: executing program 36 (id=584): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c0001040000000000000000020000", @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaabb000008000f0001000000ef8076fa0415e292c248c3a20ee3b3f8b5d5d4c119fc88190ed09871ded99e745cd6"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15m58.826546374s ago: executing program 37 (id=595): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x409, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 14m25.240087739s ago: executing program 38 (id=778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14m17.954301868s ago: executing program 39 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040086) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12m28.488583136s ago: executing program 2 (id=1159): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 12m27.98167274s ago: executing program 2 (id=1161): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, 0x0, 0x0) 12m27.412255453s ago: executing program 2 (id=1165): semop(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r3}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x80000000000725) 12m20.271156955s ago: executing program 40 (id=1140): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) eventfd2(0x5, 0x80801) io_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x20040001) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00", @ANYRES64, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 12m11.50204634s ago: executing program 41 (id=1165): semop(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r3}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x80000000000725) 10m29.887810495s ago: executing program 4 (id=1609): socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0), 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") setresgid(0x0, 0xee01, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 10m27.775203093s ago: executing program 42 (id=1607): creat(&(0x7f0000000040)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 10m27.753910225s ago: executing program 4 (id=1612): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 10m25.284684151s ago: executing program 4 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfcfd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002fbd7000fbdbdf2544000000", @ANYRES32=r1, @ANYBLOB="0400238004002380040008010400bf001c002380080017000004000006000c000c0000000600160007000000240023"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 10m23.758862105s ago: executing program 4 (id=1622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000040)=[{0x4, 0xf6, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x3, 0x4, @time={0x85, 0xa77f}, {0x2, 0x4}, {0x1, 0x2}, @ext={0x0, 0x0}}], 0x38) 10m23.105757116s ago: executing program 4 (id=1625): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 10m20.783842592s ago: executing program 43 (id=1624): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 10m20.728062762s ago: executing program 4 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0x7, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000"], &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffffc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f00000003c0)={0x5, 0xfe}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 10m19.041583081s ago: executing program 44 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0x7, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000"], &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffffc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f00000003c0)={0x5, 0xfe}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 9m22.348258211s ago: executing program 0 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") symlink(&(0x7f0000000440)='.\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 9m21.280617703s ago: executing program 0 (id=1834): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1, &(0x7f00000001c0), 0x1, 0x4cc, &(0x7f0000000f00)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) ioctl$VT_DISALLOCATE(r1, 0x5608) 9m20.239967769s ago: executing program 0 (id=1840): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 9m19.575818718s ago: executing program 0 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m19.243702701s ago: executing program 9 (id=1844): r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x88001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 9m18.926392402s ago: executing program 0 (id=1847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 9m18.675988984s ago: executing program 9 (id=1849): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xffffffb7}], 0x1}}], 0x2, 0x0) 9m18.391517211s ago: executing program 0 (id=1852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 9m18.267742179s ago: executing program 9 (id=1853): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 9m16.341797619s ago: executing program 45 (id=1852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 9m16.30569458s ago: executing program 9 (id=1857): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 9m15.341923116s ago: executing program 9 (id=1861): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) r1 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) geteuid() r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) close(r3) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d40)={'ip6tnl0\x00', 0x0}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) pwrite64(r9, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0x1ffe1}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x99, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x3, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x677f, 0x2, 0x7ffd, 0x10}, {0x0, 0x53, 0xa9, 0x2}]}}]}}]}, 0x74}}, 0x24040084) sendto$inet6(r5, &(0x7f0000000140)="659085f3a962f62e630da06ef69c9b210b58f4b3712f96fa9b05f3ed06c284ec7c2a438867e2b4f72c0ef70493eae7897fc9aee6a31c18528dd7fd1c79705f5228c228d5ccaa808a4986654a6b5c5a71df0e52fa0a212bb28706fe299da35076f8c7f05dad4cf92df14d14b5c86f96ca9c4f2ea6c3de911403f799b6a70ff144ecb75897c812b0440a03b19150fa69cc8e01506bfef339d489f2ac218bfc7a6c8dca0cc0476d37a0e64ebbe1194f66d0a864b84f81f4acad40942ef9715141673078612db5d9c115e7b106d28c6df13560b0e0e463640acbd530fa6710668f5a3650b1dae4fa033845e3b21aa158c352ccb87f", 0xf3, 0x80, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty, 0x5}, 0x1c) 9m13.051161304s ago: executing program 9 (id=1868): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 9m10.79144046s ago: executing program 46 (id=1868): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 8m22.620576844s ago: executing program 2 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x2002c2, 0x2) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 8m22.132796067s ago: executing program 2 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18011}]}}]}, 0x3c}}, 0x0) 8m21.475703512s ago: executing program 2 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0) 8m19.309707398s ago: executing program 47 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0) 3m58.860469332s ago: executing program 1 (id=3100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 3m58.400033073s ago: executing program 1 (id=3105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 3m57.892098135s ago: executing program 1 (id=3107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 3m55.642242936s ago: executing program 1 (id=3113): unshare(0x600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 3m53.458205426s ago: executing program 1 (id=3117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 3m52.659314751s ago: executing program 1 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r6, 0x7bfe, 0x3ffb, 0xd, 0x0, 0xffffffffffffff73) 3m37.539422085s ago: executing program 48 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r6, 0x7bfe, 0x3ffb, 0xd, 0x0, 0xffffffffffffff73) 6.961055079s ago: executing program 8 (id=4100): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[], 0x0) 5.676528778s ago: executing program 6 (id=4102): socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) socket(0x2a, 0x2, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 5.562041153s ago: executing program 8 (id=4103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002010}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 5.506862334s ago: executing program 3 (id=4104): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014) 5.271377792s ago: executing program 7 (id=4105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 4.984959358s ago: executing program 5 (id=4106): socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) 4.941524073s ago: executing program 3 (id=4107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r3, &(0x7f00000006c0)="3a0469860468", 0x6) write$bt_hci(r3, 0x0, 0x20000) 4.826687482s ago: executing program 6 (id=4108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x19, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36e", 0x0}, 0x50) 4.657665667s ago: executing program 8 (id=4109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 4.448651049s ago: executing program 5 (id=4110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.215994104s ago: executing program 6 (id=4111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 4.001731931s ago: executing program 7 (id=4112): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.759893673s ago: executing program 3 (id=4113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[], 0x0) 3.47644936s ago: executing program 5 (id=4114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3.038848022s ago: executing program 3 (id=4115): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4c, 0x0, @wg=@data={0x4, 0x8, 0x7, "1083a66e9ec7619976f435146154d92432d8b2225dc095fb945eb8ceb4352c6b23cf3540475be62f8999cf5ba7ec7a139dfee869"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000018c0)=""/132, 0x45}, {0x0}], 0x2}, 0x10}], 0x1, 0x10000, 0x0) 3.002394064s ago: executing program 7 (id=4116): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.77262008s ago: executing program 8 (id=4117): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140004f4f0000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a746fcb23a005c261ff6ee243593588421a14c60e61cb461dd3b1d9eca57e4a85ef1079379852dbbe097c4b8ac94a97c018b9073af5c34de93061068bc13943ba0205dee6718f790cf2d0c31b503ddf4775326ff9360d22d493ec3bdad757f960d960c672f850be0a21"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0x10000001}) close(r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000002, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x6}}]}, 0x90}}, 0x0) 2.770558621s ago: executing program 5 (id=4118): socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) socket(0x2a, 0x2, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.664033309s ago: executing program 6 (id=4119): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x91) pwrite64(r1, &(0x7f0000002380)="dbc907621deb38cc", 0x8, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.320656249s ago: executing program 7 (id=4120): socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) 1.73966143s ago: executing program 8 (id=4121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x19, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36e", 0x0}, 0x50) 1.489683194s ago: executing program 5 (id=4122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.470508538s ago: executing program 3 (id=4123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r3, &(0x7f00000006c0)="3a0469860468", 0x6) write$bt_hci(r3, 0x0, 0x20000) 1.293184103s ago: executing program 6 (id=4124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.145389764s ago: executing program 8 (id=4125): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[], 0x0) 1.019932713s ago: executing program 7 (id=4126): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 499.512665ms ago: executing program 3 (id=4127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 378.546069ms ago: executing program 7 (id=4128): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x4bd}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@uid}, {@part={'part', 0x3d, 0xffffffff}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x2}}, {@type={'type', 0x3d, "66dc3f23"}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x347, &(0x7f0000001400)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 107.36294ms ago: executing program 6 (id=4129): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840000001000030500000004000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e004400028006000200010000000800010001"], 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) 0s ago: executing program 5 (id=4130): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): (0x7fffffff) [ 1113.631371][T13892] hsr_slave_0: entered promiscuous mode [ 1113.641911][T13892] hsr_slave_1: entered promiscuous mode [ 1113.736195][T13892] debugfs: 'hsr0' already exists in 'hsr' [ 1113.743609][T13892] Cannot create hsr debugfs directory [ 1113.760117][T14030] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1113.809214][T10952] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1113.835919][T14034] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1113.894283][T10938] IPVS: starting estimator thread 0... [ 1113.998521][T14037] IPVS: using max 192 ests per chain, 9600 per kthread [ 1114.251286][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.423916][ T4121] IPVS: stop unused estimator thread 0... [ 1115.839945][T14052] loop8: detected capacity change from 0 to 512 [ 1115.849456][T14052] EXT4-fs: Ignoring removed bh option [ 1115.861792][T14052] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1115.871335][T14052] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1115.884588][T13892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1115.952226][T13892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1115.962644][T14052] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1115.976987][T13892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1116.007272][T13892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1116.019643][T14052] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1116.041620][T14052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.116106][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1116.116187][ T30] audit: type=1326 audit(1758303318.115:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.148517][ T30] audit: type=1326 audit(1758303318.115:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.172347][ T30] audit: type=1326 audit(1758303318.115:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.188427][T14052] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2659: bg 0: block 353: padding at end of block bitmap is not set [ 1116.196406][ T30] audit: type=1326 audit(1758303318.115:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.235032][ T30] audit: type=1326 audit(1758303318.115:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.258924][ T30] audit: type=1326 audit(1758303318.125:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.281817][ T30] audit: type=1326 audit(1758303318.125:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.304890][ T30] audit: type=1326 audit(1758303318.125:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.328108][ T30] audit: type=1326 audit(1758303318.125:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.353252][ T30] audit: type=1326 audit(1758303318.125:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.8.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1116.533648][ T7957] vhci_hcd: vhci_device speed not set [ 1116.679539][T14062] netlink: 'syz.7.2662': attribute type 10 has an invalid length. [ 1116.689312][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2662'. [ 1116.700516][T14062] dummy0: entered promiscuous mode [ 1116.802053][T14061] loop7: detected capacity change from 0 to 128 [ 1116.848301][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.894458][T14066] loop6: detected capacity change from 0 to 1024 [ 1116.924617][T14061] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1117.009259][T14066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.026354][T14061] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.124721][T13892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.250474][T13892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.273783][T14062] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2662'. [ 1117.336453][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.344250][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.461104][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.468902][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.073159][T11689] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1118.087655][T14080] netlink: 'syz.8.2667': attribute type 10 has an invalid length. [ 1118.108116][T14080] team0: Port device virt_wifi0 added [ 1118.213488][T14077] syz.1.2666 (14077) used greatest stack depth: 2440 bytes left [ 1118.224019][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.728539][T14089] tipc: New replicast peer: 255.255.255.255 [ 1118.738843][T14089] tipc: Enabled bearer , priority 10 [ 1119.486789][T14102] loop6: detected capacity change from 0 to 512 [ 1119.496427][T14101] loop7: detected capacity change from 0 to 512 [ 1119.524213][T14102] EXT4-fs: Ignoring removed bh option [ 1119.536187][T13892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.561388][T14102] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1119.571179][T14102] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1119.641864][T14101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.655273][T14101] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.726142][T14102] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1119.773952][T14102] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1119.793629][T14102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.835715][T14101] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1119.889955][T13892] veth0_vlan: entered promiscuous mode [ 1119.975696][T14102] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2674: bg 0: block 353: padding at end of block bitmap is not set [ 1119.981458][T13892] veth1_vlan: entered promiscuous mode [ 1120.170616][T14110] netlink: 'syz.8.2677': attribute type 10 has an invalid length. [ 1120.178958][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2677'. [ 1120.261818][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.295190][T14110] loop8: detected capacity change from 0 to 128 [ 1120.364916][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.412274][T14110] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1120.436626][T13892] veth0_macvtap: entered promiscuous mode [ 1120.509711][T13892] veth1_macvtap: entered promiscuous mode [ 1120.524047][T14110] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.594447][T13892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.680685][T13892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.772951][T14112] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2677'. [ 1120.805158][T10434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.820842][T10434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.873229][ T3844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.971547][ T3844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.402375][T10952] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.187022][T14138] loop6: detected capacity change from 0 to 512 [ 1122.318396][T14141] loop8: detected capacity change from 0 to 512 [ 1122.382171][T14141] EXT4-fs: Ignoring removed bh option [ 1122.396532][T14138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.413546][T14138] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.437069][T14141] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1122.446895][T14141] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1122.496020][T14141] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1122.546851][T14138] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1122.558717][T14141] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1122.607393][T14141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.638923][T14145] loop7: detected capacity change from 0 to 1024 [ 1122.744843][T14145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.832952][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1122.833030][ T30] audit: type=1326 audit(1758304863.847:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1122.860553][T14141] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2689: bg 0: block 353: padding at end of block bitmap is not set [ 1122.862694][ T30] audit: type=1326 audit(1758304863.847:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1122.904673][ T30] audit: type=1326 audit(1758304863.847:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1122.930095][ T30] audit: type=1326 audit(1758304863.857:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1122.956747][ T30] audit: type=1326 audit(1758304863.857:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1122.985410][ T30] audit: type=1326 audit(1758304863.857:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1123.010778][ T30] audit: type=1326 audit(1758304863.857:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1123.034692][ T30] audit: type=1326 audit(1758304863.857:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1123.057546][ T30] audit: type=1326 audit(1758304864.027:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1123.081169][ T30] audit: type=1326 audit(1758304864.027:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.8.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1123.126678][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.501440][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.541056][T14160] netlink: 'syz.1.2693': attribute type 10 has an invalid length. [ 1123.552177][T14160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2693'. [ 1123.759218][T14164] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2693'. [ 1123.778368][T14167] loop8: detected capacity change from 0 to 128 [ 1123.853491][T14167] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1123.882233][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.129843][T14167] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.460009][T10952] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1126.204967][T14203] loop8: detected capacity change from 0 to 1024 [ 1126.336144][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.344459][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.376017][T14203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.448609][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.456801][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.589475][T14212] netlink: 'syz.6.2708': attribute type 10 has an invalid length. [ 1126.597510][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2708'. [ 1126.724804][T14212] loop6: detected capacity change from 0 to 128 [ 1126.844264][T14212] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1126.923847][T14212] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.159741][T14214] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2708'. [ 1127.254690][T14222] lo speed is unknown, defaulting to 1000 [ 1127.383155][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.097200][T10910] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1128.478644][T14240] loop7: detected capacity change from 0 to 512 [ 1128.510812][T14240] EXT4-fs: Ignoring removed bh option [ 1128.541597][T14240] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1128.554135][T14240] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1128.588997][T14240] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1128.606325][T14240] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1128.626693][T14240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.861883][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1128.861962][ T30] audit: type=1326 audit(1758306921.876:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.7.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1128.918923][T14240] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2716: bg 0: block 353: padding at end of block bitmap is not set [ 1128.998378][ T30] audit: type=1326 audit(1758306921.946:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.7.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1129.256347][T14253] syzkaller0: entered promiscuous mode [ 1129.262236][T14253] syzkaller0: entered allmulticast mode [ 1129.305880][T14255] loop8: detected capacity change from 0 to 1024 [ 1129.369848][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.428657][T14255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.993490][T14267] netlink: 'syz.7.2724': attribute type 10 has an invalid length. [ 1130.002041][T14267] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2724'. [ 1130.184438][T14267] loop7: detected capacity change from 0 to 128 [ 1130.198144][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.254432][T14267] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1130.290336][T14267] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.490741][T14269] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2724'. [ 1130.802241][ T30] audit: type=1326 audit(1758306923.806:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1130.887572][ T30] audit: type=1326 audit(1758306923.846:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1130.911032][ T30] audit: type=1326 audit(1758307436.858:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1130.933969][ T30] audit: type=1326 audit(1758307436.858:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1130.957554][ T30] audit: type=1326 audit(1758307436.858:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1130.984197][ T30] audit: type=1326 audit(1758307436.858:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1131.008390][ T30] audit: type=1326 audit(1758307436.858:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1131.031369][ T30] audit: type=1326 audit(1758307436.858:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.6.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7ffc0000 [ 1131.263810][T11689] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.135819][T14299] loop8: detected capacity change from 0 to 1024 [ 1132.331147][T14299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.582815][T14317] netlink: 'syz.6.2744': attribute type 10 has an invalid length. [ 1132.591615][T14317] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2744'. [ 1132.743205][T14317] loop6: detected capacity change from 0 to 128 [ 1132.812952][T14317] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1132.847634][T14317] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.003492][T14321] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2744'. [ 1133.247877][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.718378][T14334] vlan2: entered allmulticast mode [ 1133.723735][T14334] dummy0: entered allmulticast mode [ 1133.811478][T10910] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1134.100423][T14336] loop7: detected capacity change from 0 to 128 [ 1134.199895][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1134.199974][ T30] audit: type=1800 audit(1758307953.221:3541): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2752" name="file2" dev="loop7" ino=1048732 res=0 errno=0 [ 1134.257393][T14336] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1134.266330][T14336] FAT-fs (loop7): Filesystem has been set read-only [ 1134.273313][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.273313][T14336] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1134.287456][T14336] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1134.295663][T14336] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1134.386091][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.386091][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.401687][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.401687][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.449504][T14341] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.499045][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.499045][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.551486][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.551486][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.615094][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.615094][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.656610][T14341] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.687107][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.687107][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.714293][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.714293][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.757151][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.757151][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1134.917463][T14341] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.945161][T14336] syz.7.2752: attempt to access beyond end of device [ 1134.945161][T14336] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1135.127388][T14341] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.444578][T10439] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.537455][T10439] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.561874][T10439] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.569410][ T30] audit: type=1326 audit(1758307954.581:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.635440][T10439] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.660711][ T30] audit: type=1326 audit(1758307954.651:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.692064][ T30] audit: type=1326 audit(1758307954.651:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.713821][T14355] netlink: 'syz.3.2761': attribute type 10 has an invalid length. [ 1135.720367][ T30] audit: type=1326 audit(1758307954.661:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.722920][T14355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1135.745424][ T30] audit: type=1326 audit(1758307954.661:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.745678][ T30] audit: type=1326 audit(1758307954.661:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.745924][ T30] audit: type=1326 audit(1758307954.661:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.746180][ T30] audit: type=1326 audit(1758307954.691:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1135.755395][T14355] dummy0: entered promiscuous mode [ 1135.871436][ T30] audit: type=1326 audit(1758307954.691:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1136.034970][T14360] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1136.336788][T14363] loop6: detected capacity change from 0 to 512 [ 1136.460647][T14363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.474123][T14363] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.659133][T14365] tipc: Enabled bearer , priority 0 [ 1136.722209][T14365] syzkaller0: entered promiscuous mode [ 1136.728393][T14365] syzkaller0: entered allmulticast mode [ 1136.830971][T14369] tipc: Resetting bearer [ 1136.963856][T14364] tipc: Resetting bearer [ 1137.020094][T14364] tipc: Disabling bearer [ 1137.339616][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.721398][T14383] loop7: detected capacity change from 0 to 128 [ 1137.775708][T14383] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1137.784166][T14383] FAT-fs (loop7): Filesystem has been set read-only [ 1137.794107][T14383] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1137.802310][T14383] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1138.441637][T14397] netlink: 'syz.8.2777': attribute type 10 has an invalid length. [ 1138.452935][T14397] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2777'. [ 1138.588559][T14397] loop8: detected capacity change from 0 to 128 [ 1138.690618][T14397] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1138.800481][T14397] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.008578][T14398] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2777'. [ 1141.287950][T10952] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1142.027537][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1142.027623][ T30] audit: type=1326 audit(1758307961.001:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.064125][ T30] audit: type=1326 audit(1758307961.021:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.088502][ T30] audit: type=1326 audit(1758307961.031:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.114418][ T30] audit: type=1326 audit(1758307961.031:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.142368][ T30] audit: type=1326 audit(1758307961.041:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.477121][ T30] audit: type=1326 audit(1758307961.211:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.500463][ T30] audit: type=1326 audit(1758307961.231:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.523506][ T30] audit: type=1326 audit(1758307961.231:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.550257][ T30] audit: type=1326 audit(1758307961.241:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1142.581317][ T30] audit: type=1326 audit(1758307961.271:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4112b8ec63 code=0x7ffc0000 [ 1143.986407][T14453] netlink: 'syz.8.2799': attribute type 10 has an invalid length. [ 1143.995027][T14453] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2799'. [ 1144.062863][T14453] loop8: detected capacity change from 0 to 128 [ 1144.354317][T14453] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1144.452542][T14453] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.508482][T14463] loop6: detected capacity change from 0 to 2048 [ 1144.573625][T14463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.620659][T14457] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2799'. [ 1145.077277][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.371432][T10952] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.036426][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1147.026451][T14499] loop7: detected capacity change from 0 to 2048 [ 1147.513396][T14498] lo speed is unknown, defaulting to 1000 [ 1148.477925][T14510] syzkaller0: entered promiscuous mode [ 1148.487593][T14510] syzkaller0: entered allmulticast mode [ 1149.545944][T14499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.662660][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1149.662742][ T30] audit: type=1800 audit(1758307968.681:3612): pid=14499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2818" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1150.015011][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.768335][T14530] macvtap0: refused to change device tx_queue_len [ 1150.789428][T14532] smc: net device bond0 applied user defined pnetid SYZ0 [ 1151.220232][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.226931][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.857100][T14556] loop8: detected capacity change from 0 to 2048 [ 1152.992675][T14556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.155470][ T30] audit: type=1800 audit(1758307972.171:3613): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2838" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1153.365936][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.382026][T14568] program syz.1.2841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.099279][T14576] loop8: detected capacity change from 0 to 1024 [ 1154.207577][T14576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.564807][ T30] audit: type=1326 audit(1758307973.571:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.590963][ T30] audit: type=1326 audit(1758307973.571:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.613986][ T30] audit: type=1326 audit(1758307973.591:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.644587][ T30] audit: type=1326 audit(1758307973.591:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.669158][ T30] audit: type=1326 audit(1758307973.591:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.765201][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.791948][ T30] audit: type=1326 audit(1758307973.711:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.818494][ T30] audit: type=1326 audit(1758307973.741:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.849996][ T30] audit: type=1326 audit(1758307973.741:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.877863][ T30] audit: type=1326 audit(1758307973.761:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.905277][ T30] audit: type=1326 audit(1758307973.771:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.931944][ T30] audit: type=1326 audit(1758307973.771:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.959421][ T30] audit: type=1326 audit(1758307973.811:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1154.986762][ T30] audit: type=1326 audit(1758307973.811:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1155.012325][ T30] audit: type=1326 audit(1758307973.831:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4112b8ec29 code=0x7ffc0000 [ 1158.168599][T14626] loop8: detected capacity change from 0 to 1024 [ 1158.296219][T14626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.488601][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.324117][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1161.324195][ T30] audit: type=1326 audit(1758307980.331:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14651 comm="syz.8.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1161.394600][ T30] audit: type=1326 audit(1758307980.401:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14651 comm="syz.8.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1161.420813][ T30] audit: type=1326 audit(1758307980.411:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14651 comm="syz.8.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7ffc0000 [ 1161.606561][T14660] Invalid ELF header magic: != ELF [ 1161.648438][T14659] loop6: detected capacity change from 0 to 512 [ 1161.684825][T14659] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1161.815613][T14659] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2869: bad orphan inode 131083 [ 1161.831166][T14661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2868'. [ 1161.842758][T14664] netlink: 'syz.8.2871': attribute type 27 has an invalid length. [ 1161.891084][T14659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.981903][ T30] audit: type=1326 audit(1758307980.991:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14652 comm="syz.7.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7fc00000 [ 1162.151145][T14668] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1162.261719][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.270340][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.298315][T14664] tipc: Resetting bearer [ 1162.323272][T14664] dummy0: left promiscuous mode [ 1162.475360][T14664] veth0_to_team: left promiscuous mode [ 1162.531906][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.569508][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.666620][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.003131][T14664] geneve2: left promiscuous mode [ 1163.018151][ T7957] lo speed is unknown, defaulting to 1000 [ 1163.026710][ T7957] syz0: Port: 1 Link DOWN [ 1163.032968][T10439] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.065525][T10439] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.314347][T14667] 8021q: adding VLAN 0 to HW filter on device .` [ 1163.337451][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.351517][T14667] tipc: Resetting bearer [ 1163.361629][T14683] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2876'. [ 1163.408798][T14667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.471329][T10434] tipc: Resetting bearer [ 1163.481787][T10439] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.495630][T14673] lo speed is unknown, defaulting to 1000 [ 1163.502984][T14673] syz0: Port: 1 Link ACTIVE [ 1163.697394][ T3844] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.211058][T14692] macvtap0: refused to change device tx_queue_len [ 1165.946067][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2889'. [ 1166.703752][T14721] syzkaller0: entered promiscuous mode [ 1166.709744][T14721] syzkaller0: entered allmulticast mode [ 1166.770304][T14721] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1166.978807][T14725] loop7: detected capacity change from 0 to 1024 [ 1167.172839][T14727] syzkaller0: entered promiscuous mode [ 1167.179654][T14727] syzkaller0: entered allmulticast mode [ 1167.243782][T14725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.657484][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.893125][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2902'. [ 1169.288965][T14746] loop6: detected capacity change from 0 to 8192 [ 1169.402080][T14746] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1169.464556][T14753] sctp: failed to load transform for md5: -2 [ 1170.344109][T14772] warning: `syz.1.2905' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1170.494551][T14774] loop7: detected capacity change from 0 to 1024 [ 1170.663846][T14774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.949977][T14782] syzkaller0: entered promiscuous mode [ 1170.955791][T14782] syzkaller0: entered allmulticast mode [ 1171.074685][T14782] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1171.144277][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.039037][T14796] syzkaller0: entered promiscuous mode [ 1172.044838][T14796] syzkaller0: entered allmulticast mode [ 1172.129155][T14801] netlink: 'syz.8.2915': attribute type 1 has an invalid length. [ 1172.139230][T14801] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2915'. [ 1172.396117][T14806] lo speed is unknown, defaulting to 1000 [ 1174.046304][T14825] loop7: detected capacity change from 0 to 1024 [ 1174.101711][T14825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.317624][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.448019][T14844] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2929'. [ 1176.107231][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2933'. [ 1176.379088][T14854] loop7: detected capacity change from 0 to 1024 [ 1176.560581][T14854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.879535][T14864] bridge_slave_0: left allmulticast mode [ 1176.885512][T14864] bridge_slave_0: left promiscuous mode [ 1176.895519][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.002714][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.044992][T14864] bridge_slave_1: left allmulticast mode [ 1177.055340][T14864] bridge_slave_1: left promiscuous mode [ 1177.062552][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.176109][T14873] smc: net device bond0 erased user defined pnetid SYZ0 [ 1177.256435][T14864] bond0: (slave bond_slave_0): Releasing backup interface [ 1177.521377][T14864] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.713642][T14864] team0: Failed to send options change via netlink (err -105) [ 1177.727102][T14864] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1177.738914][T14864] team0: Port device team_slave_0 removed [ 1177.911497][T14864] team0: Failed to send options change via netlink (err -105) [ 1177.921811][T14864] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1177.935872][T14864] team0: Port device team_slave_1 removed [ 1177.947351][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.955119][T14864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.194110][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.201907][T14864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.583283][T14869] team0: Mode changed to "activebackup" [ 1178.844076][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2944'. [ 1182.764776][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1183.630716][T14960] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1183.640924][T14960] ip6gretap0: entered promiscuous mode [ 1183.860306][T14960] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1183.874904][T14963] loop7: detected capacity change from 0 to 1024 [ 1184.180191][T14963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.003985][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.373158][T14981] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2972'. [ 1185.381801][T14976] lo speed is unknown, defaulting to 1000 [ 1186.657391][T15000] loop8: detected capacity change from 0 to 1024 [ 1186.754277][T15000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.560588][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.100311][T15022] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2986'. [ 1189.365136][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 1189.395664][T15050] vlan3: entered promiscuous mode [ 1189.401139][T15050] batadv0: entered promiscuous mode [ 1189.932860][T15046] sctp: failed to load transform for md5: -2 [ 1192.121952][T15077] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3007'. [ 1192.486388][T15081] erspan0: entered promiscuous mode [ 1192.495112][T15081] vlan3: entered promiscuous mode [ 1193.121270][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1193.133117][T15089] 8021q: VLANs not supported on gre0 [ 1194.502440][T15100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.629136][T15113] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3020'. [ 1194.671384][T15113] team0: Port device virt_wifi0 removed [ 1197.615026][T15142] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1198.979666][T15167] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3042'. [ 1201.073795][T15198] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1202.077562][T15215] lo speed is unknown, defaulting to 1000 [ 1202.257941][ T30] audit: type=1326 audit(1758310073.246:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.7.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7fc00000 [ 1203.831629][T15238] syzkaller0: entered promiscuous mode [ 1203.841492][T15238] syzkaller0: entered allmulticast mode [ 1203.936247][T15234] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1205.638105][ T30] audit: type=1326 audit(1758310076.646:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15247 comm="syz.7.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7fc00000 [ 1208.035236][T15275] syzkaller0: entered promiscuous mode [ 1208.044234][T15275] syzkaller0: entered allmulticast mode [ 1208.292234][T15275] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1209.733402][T15292] lo speed is unknown, defaulting to 1000 [ 1210.362426][T15304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1210.369092][T15304] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1210.380400][T15304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1210.386739][T15304] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1210.420943][T15304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1210.429873][T15304] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1210.447350][T15304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1210.453977][T15304] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1210.521217][T15304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1210.528899][T15304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1210.552607][T15304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1212.239011][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1212.499159][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 1212.518084][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1212.524674][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1212.548899][ T5113] Bluetooth: hci5: command 0x0c1a tx timeout [ 1212.668584][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.676016][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.254119][T15322] syzkaller0: entered promiscuous mode [ 1213.259976][T15322] syzkaller0: entered allmulticast mode [ 1213.300338][T15322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1213.957456][T15332] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1214.312435][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1214.552829][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1214.560257][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1214.566487][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 1214.629313][T15342] Bluetooth: hci5: command 0x0c1a tx timeout [ 1215.190445][T15352] tipc: Enabling of bearer rejected, failed to enable media [ 1216.158816][T15367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1216.165641][T15367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1216.177381][T15367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1216.184256][T15367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1216.191096][T15367] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1216.932009][T15359] syzkaller0: entered promiscuous mode [ 1216.940057][T15359] syzkaller0: entered allmulticast mode [ 1217.279812][T15368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1218.368153][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1218.374938][T15342] Bluetooth: hci5: command 0x0c1a tx timeout [ 1218.386334][T15342] Bluetooth: hci3: command 0x0406 tx timeout [ 1218.393720][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1218.400841][T15342] Bluetooth: hci4: command 0x0406 tx timeout [ 1221.220397][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3123'. [ 1221.449269][T15398] sctp: failed to load transform for md5: -2 [ 1222.447247][T15418] netlink: 67 bytes leftover after parsing attributes in process `syz.6.3128'. [ 1222.491219][T15418] tipc: Resetting bearer [ 1222.546687][T15421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1222.553689][T15421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1222.560525][T15421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1222.567177][T15421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1222.574182][T15421] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1222.641624][T15418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1223.936218][T15426] syzkaller0: entered promiscuous mode [ 1223.945835][T15426] syzkaller0: entered allmulticast mode [ 1224.209813][T15426] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1224.471284][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 1224.631388][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 1224.638326][T15380] Bluetooth: hci2: command 0x0406 tx timeout [ 1224.644538][T15380] Bluetooth: hci4: command 0x0406 tx timeout [ 1224.708311][T15380] Bluetooth: hci5: command 0x0c1a tx timeout [ 1229.192426][T15464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1229.199369][T15464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1229.206165][T15464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1229.213020][T15464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1229.220038][T15464] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1229.436388][T15465] syzkaller0: entered promiscuous mode [ 1229.442432][T15465] syzkaller0: entered allmulticast mode [ 1229.601098][T15465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1230.538682][T15474] Bluetooth: MGMT ver 1.23 [ 1231.109989][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 1231.268953][ T5113] Bluetooth: hci5: command 0x0c1a tx timeout [ 1231.275977][T15380] Bluetooth: hci3: command 0x0406 tx timeout [ 1231.282778][T15380] Bluetooth: hci2: command 0x0406 tx timeout [ 1231.289803][T15380] Bluetooth: hci4: command 0x0406 tx timeout [ 1232.731676][T15500] syzkaller0: entered promiscuous mode [ 1232.737901][T15500] syzkaller0: entered allmulticast mode [ 1232.826412][T15500] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1233.608939][T15509] lo speed is unknown, defaulting to 1000 [ 1234.342334][T15517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1234.349291][T15517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1234.355993][T15517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1234.362911][T15517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1234.369811][T15517] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1237.108109][T15380] Bluetooth: hci5: command 0x0c1a tx timeout [ 1237.114548][T15380] Bluetooth: hci3: command 0x0406 tx timeout [ 1237.116150][T15342] Bluetooth: hci2: command 0x0406 tx timeout [ 1237.121753][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 1237.128583][T15342] Bluetooth: hci0: command 0x0406 tx timeout [ 1237.266250][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1237.279271][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.288688][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.305520][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1237.317022][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1237.614396][T15540] lo speed is unknown, defaulting to 1000 [ 1237.962080][T15546] syzkaller0: entered promiscuous mode [ 1237.969624][T15546] syzkaller0: entered allmulticast mode [ 1238.051190][T15546] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1239.418268][T15536] Bluetooth: hci1: command tx timeout [ 1239.683757][T15567] lo speed is unknown, defaulting to 1000 [ 1240.160101][T15573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1240.166887][T15573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1240.173768][T15573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1240.180639][T15573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1240.187334][T15573] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1240.194178][T15573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1240.200614][T15573] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1240.285593][T15573] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1240.461632][T15540] chnl_net:caif_netlink_parms(): no params data found [ 1240.646719][T15569] lo speed is unknown, defaulting to 1000 [ 1242.092245][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1242.277120][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1242.287392][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 1242.294406][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 1242.301220][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1242.308054][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1242.903655][T15540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.911471][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.919542][T15540] bridge_slave_0: entered allmulticast mode [ 1242.929544][T15540] bridge_slave_0: entered promiscuous mode [ 1243.700550][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.709810][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.721785][T15540] bridge_slave_1: entered allmulticast mode [ 1243.731943][T15540] bridge_slave_1: entered promiscuous mode [ 1244.230894][T15540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.340618][T15540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.390945][T15342] Bluetooth: hci1: command 0x040f tx timeout [ 1244.815292][T15540] team0: Port device team_slave_0 added [ 1244.879127][T15601] syzkaller0: entered promiscuous mode [ 1244.884837][T15601] syzkaller0: entered allmulticast mode [ 1244.911633][T15540] team0: Port device team_slave_1 added [ 1244.971703][T15602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1245.382725][T15540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.391331][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.418768][T15540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.603210][T15540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.610554][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.639789][T15540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.205032][T15540] hsr_slave_0: entered promiscuous mode [ 1246.218596][T15540] hsr_slave_1: entered promiscuous mode [ 1246.227848][T15540] debugfs: 'hsr0' already exists in 'hsr' [ 1246.233786][T15540] Cannot create hsr debugfs directory [ 1246.468893][T15342] Bluetooth: hci1: command 0x040f tx timeout [ 1248.321287][T15629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1248.331209][T15629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1248.339214][T15629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1248.345906][T15629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1248.352697][T15629] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1248.359483][T15629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1249.285851][T15636] lo speed is unknown, defaulting to 1000 [ 1250.286979][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1250.483736][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1250.490953][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 1250.497554][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 1250.504683][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1250.511558][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1251.113083][T15540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1251.255181][T15646] syzkaller0: entered promiscuous mode [ 1251.261399][T15646] syzkaller0: entered allmulticast mode [ 1251.276443][T15540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1251.432921][T15540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1251.539036][T15646] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1251.773205][T15540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1252.553898][T15342] Bluetooth: hci1: command 0x040f tx timeout [ 1254.021860][T15540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.227107][T15540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.344900][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.352618][T10434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.460904][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.468607][T10434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.320615][T15689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1256.327442][T15689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1256.334410][T15689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1256.344145][T15689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1256.350980][T15689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1257.273181][T15693] syzkaller0: entered promiscuous mode [ 1257.283085][T15693] syzkaller0: entered allmulticast mode [ 1257.478154][T15697] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1257.904535][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3212'. [ 1258.181567][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1258.195300][T15690] sctp: failed to load transform for md5: -2 [ 1258.390324][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1258.396600][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 1258.404905][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1258.415557][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1258.789437][T15540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.866053][T15722] lo speed is unknown, defaulting to 1000 [ 1262.487452][T15540] veth0_vlan: entered promiscuous mode [ 1262.551022][T15751] syzkaller0: entered promiscuous mode [ 1262.558949][T15751] syzkaller0: entered allmulticast mode [ 1262.806583][T15753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1262.813662][T15753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1262.823660][T15753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1262.830450][T15753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1262.837113][T15753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1262.950460][T15540] veth1_vlan: entered promiscuous mode [ 1263.017542][T15754] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1263.714448][T15540] veth0_macvtap: entered promiscuous mode [ 1263.901245][T15540] veth1_macvtap: entered promiscuous mode [ 1264.274542][T15540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.539001][T15540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.637379][T15536] Bluetooth: hci0: command 0x0406 tx timeout [ 1264.761822][ T4557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.839485][T15760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1264.855067][ T4557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.872478][T15536] Bluetooth: hci1: command 0x040f tx timeout [ 1264.879061][T15536] Bluetooth: hci5: command 0x0c1a tx timeout [ 1264.879148][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1264.885237][T15536] Bluetooth: hci4: command 0x0406 tx timeout [ 1264.956460][ T4557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.019961][ T4557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.932975][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3232'. [ 1266.989827][T15791] syz_tun: entered allmulticast mode [ 1267.055633][T15791] dvmrp8: entered allmulticast mode [ 1267.173831][T15782] sctp: failed to load transform for md5: -2 [ 1267.262344][T15789] syz_tun: left allmulticast mode [ 1267.760869][T15799] syzkaller0: entered promiscuous mode [ 1267.768256][T15799] syzkaller0: entered allmulticast mode [ 1267.860560][T15799] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1268.200734][T15806] lo speed is unknown, defaulting to 1000 [ 1269.981981][T15814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1269.988984][T15814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1269.995662][T15814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1270.002522][T15814] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1270.009380][T15814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1270.599169][T15816] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3238'. [ 1271.908085][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1272.078829][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1272.099526][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 1272.106465][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1272.114104][T15536] Bluetooth: hci4: command 0x0406 tx timeout [ 1272.533526][T15826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3240'. [ 1274.119397][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.126072][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.558952][ T7848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.567037][ T7848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.648163][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.656221][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.759689][T15847] syz_tun: entered allmulticast mode [ 1274.812301][T15847] dvmrp8: entered allmulticast mode [ 1274.970688][T15846] syz_tun: left allmulticast mode [ 1275.302934][T15858] 8021q: VLANs not supported on caif0 [ 1275.510721][T15862] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3248'. [ 1275.542295][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3247'. [ 1275.939568][T15853] sctp: failed to load transform for md5: -2 [ 1276.508833][T15868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.515707][T15868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1276.522734][T15868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1276.532901][T15868] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1276.541092][T15868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.115273][T15893] lo speed is unknown, defaulting to 1000 [ 1278.408139][T15536] Bluetooth: hci0: command 0x0406 tx timeout [ 1278.551726][T15536] Bluetooth: hci1: command 0x040f tx timeout [ 1278.558490][T15342] Bluetooth: hci5: command 0x0c1a tx timeout [ 1278.564719][T15342] Bluetooth: hci2: command 0x0406 tx timeout [ 1278.571587][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1278.718843][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 1279.422049][T15903] syz_tun: entered allmulticast mode [ 1279.465476][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3260'. [ 1279.478282][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3260'. [ 1279.595440][T15902] syz_tun: left allmulticast mode [ 1280.001859][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1280.535507][T15913] 8021q: VLANs not supported on caif0 [ 1282.383202][T15941] lo: entered allmulticast mode [ 1282.449118][T15941] dvmrp8: entered allmulticast mode [ 1282.555222][T15938] lo: left allmulticast mode [ 1282.808719][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3275'. [ 1282.941827][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1283.265808][T15945] sctp: failed to load transform for md5: -2 [ 1283.770963][T15966] 8021q: VLANs not supported on caif0 [ 1285.616467][T15988] syz_tun: entered allmulticast mode [ 1285.718778][T15988] dvmrp8: entered allmulticast mode [ 1285.843966][T15987] syz_tun: left allmulticast mode [ 1286.835036][T16011] 8021q: VLANs not supported on caif0 [ 1287.813653][T16025] lo: entered allmulticast mode [ 1287.862688][T16024] lo: left allmulticast mode [ 1287.960810][T16030] netlink: 'syz.5.3307': attribute type 11 has an invalid length. [ 1288.211774][T16031] nbd7: detected capacity change from 0 to 63 [ 1288.220392][T16034] block nbd7: NBD_DISCONNECT [ 1288.225666][T16034] block nbd7: Disconnected due to user request. [ 1288.237250][T16034] block nbd7: shutting down sockets [ 1289.440037][T16057] 8021q: VLANs not supported on caif0 [ 1289.738945][T16064] lo: entered allmulticast mode [ 1289.764979][T16060] lo: left allmulticast mode [ 1289.970238][T16066] netlink: 'syz.7.3321': attribute type 11 has an invalid length. [ 1290.508740][T16070] nbd6: detected capacity change from 0 to 63 [ 1290.527870][T16079] block nbd6: NBD_DISCONNECT [ 1290.533086][T16079] block nbd6: Disconnected due to user request. [ 1290.542771][T16079] block nbd6: shutting down sockets [ 1291.267461][T16094] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1291.764900][T16100] syz_tun: entered allmulticast mode [ 1291.787273][T16099] syz_tun: left allmulticast mode [ 1291.942736][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3335'. [ 1292.087502][T16106] 8021q: VLANs not supported on caif0 [ 1292.403381][T16110] netlink: 'syz.6.3338': attribute type 11 has an invalid length. [ 1294.102360][T16141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1294.111825][T16141] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3350'. [ 1294.118085][T16143] syz_tun: entered allmulticast mode [ 1294.163922][T16134] syz_tun: left allmulticast mode [ 1294.951983][T16154] 8021q: VLANs not supported on caif0 [ 1297.092428][T16180] syz_tun: entered allmulticast mode [ 1297.231838][T16178] syz_tun: left allmulticast mode [ 1297.678100][T16185] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1297.738368][ T30] audit: type=1326 audit(1758310681.748:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.844797][ T30] audit: type=1326 audit(1758310681.788:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.871543][ T30] audit: type=1326 audit(1758310681.818:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.897974][ T30] audit: type=1326 audit(1758310681.818:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.924967][ T30] audit: type=1326 audit(1758310681.828:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.951512][ T30] audit: type=1326 audit(1758310681.828:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1297.975577][ T30] audit: type=1326 audit(1758310681.828:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1298.004552][ T30] audit: type=1326 audit(1758310681.828:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1298.028537][ T30] audit: type=1326 audit(1758310681.838:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1298.055551][ T30] audit: type=1326 audit(1758310681.848:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1299.242882][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1299.601069][T16219] lo: entered allmulticast mode [ 1299.767344][T16215] lo: left allmulticast mode [ 1299.952708][T16221] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1300.464212][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3385'. [ 1300.546217][T16234] team0: No ports can be present during mode change [ 1300.621873][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 1300.638883][T16239] vlan0: entered promiscuous mode [ 1300.710373][T16234] tipc: Started in network mode [ 1300.715818][T16234] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1300.727102][T16234] tipc: Enabled bearer , priority 0 [ 1300.810865][T16241] loop7: detected capacity change from 0 to 512 [ 1301.056629][T16241] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3383: iget: bad i_size value: 38620345925642 [ 1301.096114][T16241] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3383: couldn't read orphan inode 15 (err -117) [ 1301.180961][T16241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.853796][ T42] tipc: Node number set to 11578026 [ 1302.020926][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1302.073129][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3391'. [ 1302.619711][T16269] lo: entered allmulticast mode [ 1302.724916][T16264] lo: left allmulticast mode [ 1303.098419][T16270] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1304.723807][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.731438][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3406'. [ 1305.588464][T16317] lo: entered allmulticast mode [ 1305.792341][T16311] lo: left allmulticast mode [ 1307.117274][T16339] loop5: detected capacity change from 0 to 512 [ 1307.271616][T16341] ipvlan0: entered promiscuous mode [ 1307.375295][T16339] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3418: iget: bad i_size value: 38620345925642 [ 1307.423127][T16339] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3418: couldn't read orphan inode 15 (err -117) [ 1307.536918][T16339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.771636][T16348] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3418: bg 0: block 5: invalid block bitmap [ 1307.848069][T16348] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 1307.864102][T16348] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1307.864102][T16348] [ 1307.874174][T16348] EXT4-fs (loop5): Total free blocks count 0 [ 1307.880555][T16348] EXT4-fs (loop5): Free/Dirty block details [ 1307.886648][T16348] EXT4-fs (loop5): free_blocks=0 [ 1307.894762][T16348] EXT4-fs (loop5): dirty_blocks=120 [ 1307.900345][T16348] EXT4-fs (loop5): Block reservation details [ 1307.907849][T16348] EXT4-fs (loop5): i_reserved_data_blocks=120 [ 1308.900098][T16359] syz_tun: entered allmulticast mode [ 1308.963412][T16357] syz_tun: left allmulticast mode [ 1310.812770][T16384] tipc: Enabled bearer , priority 0 [ 1310.863053][T16387] syzkaller0: entered promiscuous mode [ 1310.869119][T16387] syzkaller0: entered allmulticast mode [ 1310.950261][T16384] tipc: Resetting bearer [ 1311.091758][T15540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.128945][T16382] tipc: Resetting bearer [ 1311.211210][T16382] tipc: Disabling bearer [ 1311.520585][T16394] lo: entered allmulticast mode [ 1311.575442][T16394] dvmrp8: entered allmulticast mode [ 1311.646287][T16393] lo: left allmulticast mode [ 1312.638865][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1312.638950][ T30] audit: type=1326 audit(1758310696.648:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.674286][ T30] audit: type=1326 audit(1758310696.688:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.865934][ T30] audit: type=1326 audit(1758310696.748:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.892155][ T30] audit: type=1326 audit(1758310696.748:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.915755][ T30] audit: type=1326 audit(1758310696.758:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.945427][ T30] audit: type=1326 audit(1758310696.758:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.972464][ T30] audit: type=1326 audit(1758310696.788:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1312.995298][ T30] audit: type=1326 audit(1758310696.788:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1313.021072][ T30] audit: type=1326 audit(1758310696.798:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1313.048200][ T30] audit: type=1326 audit(1758310696.828:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16415 comm="syz.5.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445bd8ec29 code=0x7ffc0000 [ 1313.885625][T16434] lo speed is unknown, defaulting to 1000 [ 1315.013589][T16448] syz_tun: entered allmulticast mode [ 1315.186968][T16445] syz_tun: left allmulticast mode [ 1317.604548][T16482] lo speed is unknown, defaulting to 1000 [ 1318.605449][T16491] bond2 (unregistering): Released all slaves [ 1318.793591][T16495] lo: entered allmulticast mode [ 1319.077052][T16492] lo: left allmulticast mode [ 1320.348037][T16521] loop5: detected capacity change from 0 to 512 [ 1320.504262][T16529] lo speed is unknown, defaulting to 1000 [ 1320.808373][T16521] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3479: iget: bad i_size value: 38620345925642 [ 1320.900895][T16521] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3479: couldn't read orphan inode 15 (err -117) [ 1321.031721][T16521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.464151][T16542] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3479: bg 0: block 5: invalid block bitmap [ 1321.565910][T16542] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 156 with error 28 [ 1321.582610][T16542] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1321.582610][T16542] [ 1321.593198][T16542] EXT4-fs (loop5): Total free blocks count 0 [ 1321.599574][T16542] EXT4-fs (loop5): Free/Dirty block details [ 1321.605675][T16542] EXT4-fs (loop5): free_blocks=0 [ 1321.613796][T16542] EXT4-fs (loop5): dirty_blocks=160 [ 1321.620179][T16542] EXT4-fs (loop5): Block reservation details [ 1321.626393][T16542] EXT4-fs (loop5): i_reserved_data_blocks=160 [ 1321.774963][T16548] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1322.456704][T16552] lo: entered allmulticast mode [ 1322.560017][T16550] lo: left allmulticast mode [ 1324.765030][ T4121] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 156 with max blocks 4 with error 28 [ 1325.012433][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3501'. [ 1325.599260][T16598] lo: entered allmulticast mode [ 1325.613903][T16596] lo: left allmulticast mode [ 1326.945962][T16620] tipc: Enabled bearer , priority 0 [ 1326.971872][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3511'. [ 1326.982904][T16620] syzkaller0: entered promiscuous mode [ 1326.983008][T16620] syzkaller0: entered allmulticast mode [ 1327.215759][T16626] loop5: detected capacity change from 0 to 512 [ 1327.233039][T16627] tipc: Resetting bearer [ 1327.309676][T16626] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3512: iget: bad i_size value: 38620345925642 [ 1327.340185][T16626] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3512: couldn't read orphan inode 15 (err -117) [ 1327.351992][T16617] tipc: Resetting bearer [ 1327.385910][T16626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.449503][T16617] tipc: Disabling bearer [ 1327.551555][T16630] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3512: bg 0: block 5: invalid block bitmap [ 1327.609751][T16630] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28 [ 1327.622968][T16630] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1327.622968][T16630] [ 1327.635917][T16630] EXT4-fs (loop5): Total free blocks count 0 [ 1327.642359][T16630] EXT4-fs (loop5): Free/Dirty block details [ 1327.648613][T16630] EXT4-fs (loop5): free_blocks=0 [ 1327.653749][T16630] EXT4-fs (loop5): dirty_blocks=781 [ 1327.662126][T16630] EXT4-fs (loop5): Block reservation details [ 1327.668548][T16630] EXT4-fs (loop5): i_reserved_data_blocks=781 [ 1328.121969][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1329.012829][T16649] lo: entered allmulticast mode [ 1329.138740][T16646] lo: left allmulticast mode [ 1329.213910][T16656] 8021q: VLANs not supported on caif0 [ 1329.779540][T16662] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1330.571464][T16672] tipc: Enabled bearer , priority 0 [ 1330.582277][T16672] syzkaller0: entered promiscuous mode [ 1330.591379][T16672] syzkaller0: entered allmulticast mode [ 1330.696624][T16672] tipc: Resetting bearer [ 1330.806390][T16670] tipc: Resetting bearer [ 1330.842065][T16670] tipc: Disabling bearer [ 1331.221820][T10430] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 732 with max blocks 48 with error 28 [ 1331.975565][T16689] lo: entered allmulticast mode [ 1332.012791][T16684] lo: left allmulticast mode [ 1332.468212][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3536'. [ 1332.755297][T16702] 8021q: VLANs not supported on caif0 [ 1333.085559][T16708] tipc: Started in network mode [ 1333.094302][T16708] tipc: Node identity 960111a59716, cluster identity 4711 [ 1333.104084][T16708] tipc: Enabled bearer , priority 0 [ 1333.125635][T16708] syzkaller0: entered promiscuous mode [ 1333.131612][T16708] syzkaller0: entered allmulticast mode [ 1333.170067][T16708] tipc: Resetting bearer [ 1333.198234][T16707] tipc: Resetting bearer [ 1333.230342][T16707] tipc: Disabling bearer [ 1333.644837][T16714] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1333.935413][T16715] bridge0: port 3(syz_tun) entered blocking state [ 1333.945303][T16715] bridge0: port 3(syz_tun) entered disabled state [ 1333.954139][T16715] syz_tun: entered allmulticast mode [ 1333.966429][T16715] syz_tun: entered promiscuous mode [ 1333.974231][T16715] bridge0: port 3(syz_tun) entered blocking state [ 1333.981397][T16715] bridge0: port 3(syz_tun) entered forwarding state [ 1334.015649][T16714] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1334.173666][T16723] syz_tun: entered allmulticast mode [ 1334.271955][T16720] syz_tun: left allmulticast mode [ 1334.907105][T16735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3551'. [ 1335.536465][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.546430][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.553702][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3561'. [ 1336.657080][T16762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1336.679474][T16764] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.820061][T16764] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.043206][T16764] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.195767][T16764] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.365507][T16775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3564'. [ 1337.527191][T10437] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.592463][ T4121] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.845226][ T4121] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.912608][ T4121] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.077494][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1338.084696][ T30] audit: type=1326 audit(1758310722.088:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.195223][ T30] audit: type=1326 audit(1758310722.138:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.222342][ T30] audit: type=1326 audit(1758310722.178:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.249496][ T30] audit: type=1326 audit(1758310722.178:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.276469][ T30] audit: type=1326 audit(1758310722.188:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.302344][ T30] audit: type=1326 audit(1758310722.198:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.326184][ T30] audit: type=1326 audit(1758310722.198:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.356136][ T30] audit: type=1326 audit(1758310722.198:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.382946][ T30] audit: type=1326 audit(1758310722.198:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1338.591363][ T30] audit: type=1326 audit(1758310722.448:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.7.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7ffc0000 [ 1339.290704][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1339.361885][T16804] syz_tun: entered allmulticast mode [ 1339.504036][T16798] syz_tun: left allmulticast mode [ 1339.930893][T16812] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3579'. [ 1341.536108][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1342.338621][T16853] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1344.469360][T16885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3605'. [ 1344.972979][T16893] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3609'. [ 1345.009273][T16894] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1346.468712][T16915] tipc: Enabled bearer , priority 0 [ 1346.480204][T16915] syzkaller0: entered promiscuous mode [ 1346.485915][T16915] syzkaller0: entered allmulticast mode [ 1346.562442][T16915] tipc: Resetting bearer [ 1346.585146][T16920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1346.602530][T16914] tipc: Resetting bearer [ 1346.641415][T16914] tipc: Disabling bearer [ 1347.186960][T16926] netlink: 'syz.7.3621': attribute type 1 has an invalid length. [ 1347.729543][T16932] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1348.014457][T16934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1348.607051][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1348.796479][T16952] lo speed is unknown, defaulting to 1000 [ 1350.380797][T16978] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 1350.666380][T16982] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3642'. [ 1350.703181][T16976] loop8: detected capacity change from 0 to 512 [ 1350.846208][T16976] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3640: iget: bad i_size value: 38620345925642 [ 1350.892468][T16976] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3640: couldn't read orphan inode 15 (err -117) [ 1350.940176][T16976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.041225][T16984] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3640: bg 0: block 5: invalid block bitmap [ 1351.064500][T16984] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 1351.078137][T16984] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1351.078137][T16984] [ 1351.088238][T16984] EXT4-fs (loop8): Total free blocks count 0 [ 1351.094562][T16984] EXT4-fs (loop8): Free/Dirty block details [ 1351.100998][T16984] EXT4-fs (loop8): free_blocks=0 [ 1351.106157][T16984] EXT4-fs (loop8): dirty_blocks=236 [ 1351.111940][T16984] EXT4-fs (loop8): Block reservation details [ 1351.118320][T16984] EXT4-fs (loop8): i_reserved_data_blocks=236 [ 1351.363587][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3645'. [ 1351.500883][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.678921][T16997] tipc: Enabled bearer , priority 0 [ 1351.723341][T16997] syzkaller0: entered promiscuous mode [ 1351.729274][T16997] syzkaller0: entered allmulticast mode [ 1351.766675][T16997] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1351.822909][T16997] tipc: Resetting bearer [ 1351.914041][T16996] tipc: Resetting bearer [ 1351.983945][T16996] tipc: Disabling bearer [ 1352.418891][T17010] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 1352.844550][T17018] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1353.833229][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1353.869704][T17031] loop7: detected capacity change from 0 to 512 [ 1353.957012][T17031] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3658: iget: bad i_size value: 38620345925642 [ 1354.015268][T17031] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3658: couldn't read orphan inode 15 (err -117) [ 1354.039238][T17031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.259944][T17040] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3658: bg 0: block 5: invalid block bitmap [ 1354.314084][T17040] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 1354.327041][T17040] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1354.327041][T17040] [ 1354.337340][T17040] EXT4-fs (loop7): Total free blocks count 0 [ 1354.346731][T17040] EXT4-fs (loop7): Free/Dirty block details [ 1354.353008][T17040] EXT4-fs (loop7): free_blocks=0 [ 1354.358468][T17040] EXT4-fs (loop7): dirty_blocks=204 [ 1354.363887][T17040] EXT4-fs (loop7): Block reservation details [ 1354.373259][T17040] EXT4-fs (loop7): i_reserved_data_blocks=204 [ 1354.519134][T17042] lo speed is unknown, defaulting to 1000 [ 1354.739159][T17047] tipc: Enabled bearer , priority 0 [ 1354.749436][T17047] syzkaller0: entered promiscuous mode [ 1354.755145][T17047] syzkaller0: entered allmulticast mode [ 1354.781425][T17047] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1354.986237][T17050] tipc: Resetting bearer [ 1355.059791][T11689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.113964][T17044] tipc: Resetting bearer [ 1355.186587][T17044] tipc: Disabling bearer [ 1355.602660][T17058] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1356.232222][T17069] sch_fq: defrate 0 ignored. [ 1357.558801][T17087] lo speed is unknown, defaulting to 1000 [ 1357.711073][T17086] loop8: detected capacity change from 0 to 512 [ 1357.795237][T17086] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3677: iget: bad i_size value: 38620345925642 [ 1357.826183][T17078] sctp: failed to load transform for md5: -2 [ 1357.851505][T17086] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3677: couldn't read orphan inode 15 (err -117) [ 1357.921836][T17086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.078680][T17036] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1358.435283][T17096] tipc: Enabled bearer , priority 0 [ 1358.483054][T17096] syzkaller0: entered promiscuous mode [ 1358.490990][T17096] syzkaller0: entered allmulticast mode [ 1358.530821][T10952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.535655][T17096] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1358.563909][T17096] tipc: Resetting bearer [ 1358.664057][T17095] tipc: Resetting bearer [ 1358.757198][T17095] tipc: Disabling bearer [ 1358.983538][T17101] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1359.610600][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3688'. [ 1359.646693][T17112] syz_tun: entered promiscuous mode [ 1359.665277][T17112] syz_tun: left promiscuous mode [ 1360.092544][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1361.020625][T17137] tipc: Enabled bearer , priority 0 [ 1361.082806][T17142] syzkaller0: entered promiscuous mode [ 1361.089342][T17142] syzkaller0: entered allmulticast mode [ 1361.176352][T17137] tipc: Resetting bearer [ 1361.245549][T17135] tipc: Resetting bearer [ 1361.302628][T17135] tipc: Disabling bearer [ 1362.177390][T17151] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 1362.965750][T17170] lo speed is unknown, defaulting to 1000 [ 1363.019932][T17164] nbd7: detected capacity change from 0 to 63 [ 1363.149379][T17171] block nbd7: NBD_DISCONNECT [ 1363.154678][T17171] block nbd7: Disconnected due to user request. [ 1363.161534][T17171] block nbd7: shutting down sockets [ 1363.806584][T17182] tipc: Enabled bearer , priority 0 [ 1364.146194][T17182] syzkaller0: entered promiscuous mode [ 1364.152414][T17182] syzkaller0: entered allmulticast mode [ 1364.231894][T17182] tipc: Resetting bearer [ 1364.302523][T17181] tipc: Resetting bearer [ 1364.338600][T17181] tipc: Disabling bearer [ 1364.424216][T17186] loop8: detected capacity change from 0 to 512 [ 1364.634267][T17186] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3713: iget: bad i_size value: 38620345925642 [ 1364.770261][T17186] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3713: couldn't read orphan inode 15 (err -117) [ 1364.831274][T17186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.017893][T17189] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3713: bg 0: block 5: invalid block bitmap [ 1365.032294][T17197] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3716'. [ 1365.078749][T17189] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 1365.091919][T17189] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1365.091919][T17189] [ 1365.102366][T17189] EXT4-fs (loop8): Total free blocks count 0 [ 1365.111936][T17189] EXT4-fs (loop8): Free/Dirty block details [ 1365.118568][T17189] EXT4-fs (loop8): free_blocks=0 [ 1365.123726][T17189] EXT4-fs (loop8): dirty_blocks=132 [ 1365.129478][T17189] EXT4-fs (loop8): Block reservation details [ 1365.135655][T17189] EXT4-fs (loop8): i_reserved_data_blocks=132 [ 1365.657376][ T4557] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 4 with error 28 [ 1365.749115][T17207] tipc: Enabled bearer , priority 0 [ 1365.764297][T17207] syzkaller0: entered promiscuous mode [ 1365.770207][T17207] syzkaller0: entered allmulticast mode [ 1365.857273][T17207] tipc: Resetting bearer [ 1365.942503][T17206] tipc: Resetting bearer [ 1365.998293][T17206] tipc: Disabling bearer [ 1366.163016][T17212] nbd7: detected capacity change from 0 to 63 [ 1366.188987][T17214] block nbd7: NBD_DISCONNECT [ 1366.194450][T17214] block nbd7: Disconnected due to user request. [ 1366.204295][T17214] block nbd7: shutting down sockets [ 1366.796190][T17225] tipc: Enabled bearer , priority 0 [ 1366.831033][T17225] syzkaller0: entered promiscuous mode [ 1366.836755][T17225] syzkaller0: entered allmulticast mode [ 1366.942891][T17225] tipc: Resetting bearer [ 1367.042035][T17222] tipc: Resetting bearer [ 1367.134251][T17222] tipc: Disabling bearer [ 1367.408672][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3729'. [ 1368.038102][T17246] tipc: Enabled bearer , priority 0 [ 1368.070367][T17246] syzkaller0: entered promiscuous mode [ 1368.076201][T17246] syzkaller0: entered allmulticast mode [ 1368.137814][T17246] tipc: Resetting bearer [ 1368.179934][T17248] nbd7: detected capacity change from 0 to 63 [ 1368.238651][T17249] block nbd7: NBD_DISCONNECT [ 1368.244082][T17249] block nbd7: Disconnected due to user request. [ 1368.254220][T17249] block nbd7: shutting down sockets [ 1368.265979][T17243] tipc: Resetting bearer [ 1368.289945][T17243] tipc: Disabling bearer [ 1369.513884][T17271] sch_fq: defrate 0 ignored. [ 1369.593686][T17274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1370.099436][T17283] nbd3: detected capacity change from 0 to 63 [ 1370.171858][T15536] block nbd3: Receive control failed (result -32) [ 1372.093016][T17315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1372.142346][T17313] 9pnet_fd: Insufficient options for proto=fd [ 1373.224624][T17327] nbd: nbd3 already in use [ 1374.655392][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1374.655476][ T30] audit: type=1326 audit(1758310758.668:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7fc00000 [ 1374.870094][T17345] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1374.975073][T17344] 9pnet_fd: Insufficient options for proto=fd [ 1375.649967][T17358] nbd: nbd3 already in use [ 1377.128790][T17377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3783'. [ 1377.305235][T17379] 9pnet_fd: Insufficient options for proto=fd [ 1377.971505][ T30] audit: type=1326 audit(1758310761.958:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17374 comm="syz.3.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4112b8ec29 code=0x7fc00000 [ 1378.437113][T17392] block nbd3: NBD_DISCONNECT [ 1378.442302][T17392] block nbd3: Send disconnect failed -32 [ 1378.448532][T17392] block nbd3: shutting down sockets [ 1379.211874][T17410] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3795'. [ 1380.206783][T17426] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 1380.578231][ T30] audit: type=1326 audit(1758310764.558:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.7.3799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ff18ec29 code=0x7fc00000 [ 1381.686547][T17443] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3808'. [ 1382.449068][T17451] netlink: 'syz.6.3811': attribute type 12 has an invalid length. [ 1382.640341][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1382.728295][T17456] macvtap1: entered promiscuous mode [ 1382.734847][T17456] macvtap1: entered allmulticast mode [ 1383.956317][ T30] audit: type=1326 audit(1758310767.968:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.8.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7fc00000 [ 1384.030546][T17475] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3822'. [ 1384.974079][T17482] netlink: 'syz.8.3825': attribute type 12 has an invalid length. [ 1385.174564][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3826'. [ 1386.764154][T17502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1387.193321][T17506] tipc: Enabled bearer , priority 0 [ 1387.227101][T17506] syzkaller0: entered promiscuous mode [ 1387.236810][T17506] syzkaller0: entered allmulticast mode [ 1387.323218][T17506] tipc: Resetting bearer [ 1387.427808][T17503] tipc: Resetting bearer [ 1387.453801][ T30] audit: type=1326 audit(1758310771.468:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17499 comm="syz.6.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a958ec29 code=0x7fc00000 [ 1387.502511][T17503] tipc: Disabling bearer [ 1388.032980][T17518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3839'. [ 1388.053263][T17519] 9pnet_fd: Insufficient options for proto=fd [ 1388.512989][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3843'. [ 1389.271230][T17536] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.378802][T17536] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.541749][T17536] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.698127][T17536] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.986512][ T4950] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.049690][T10437] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.078513][ T30] audit: type=1326 audit(1758310774.068:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17539 comm="syz.8.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8ec29 code=0x7fc00000 [ 1390.184423][T10437] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.234759][ T4121] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.491748][T17550] tipc: Enabled bearer , priority 0 [ 1390.535229][T17550] syzkaller0: entered promiscuous mode [ 1390.541523][T17550] syzkaller0: entered allmulticast mode [ 1390.651715][T17549] tipc: Resetting bearer [ 1390.769931][T17549] tipc: Disabling bearer [ 1390.968522][T17556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3853'. [ 1390.985694][T17557] 9pnet_fd: Insufficient options for proto=fd [ 1391.695034][T17569] lo speed is unknown, defaulting to 1000 [ 1392.691974][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3862'. [ 1392.724598][T17577] erspan0: entered promiscuous mode [ 1392.741823][T17577] erspan0: left promiscuous mode [ 1393.389921][T17587] loop7: detected capacity change from 0 to 512 [ 1393.601545][T17587] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3866: iget: bad i_size value: 38620345925642 [ 1393.746309][T17587] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3866: couldn't read orphan inode 15 (err -117) [ 1393.788378][T17587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.924054][T17599] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3866: bg 0: block 5: invalid block bitmap [ 1394.084171][T17599] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 52 with error 28 [ 1394.097839][T17599] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1394.097839][T17599] [ 1394.108164][T17599] EXT4-fs (loop7): Total free blocks count 0 [ 1394.114375][T17599] EXT4-fs (loop7): Free/Dirty block details [ 1394.120775][T17599] EXT4-fs (loop7): free_blocks=0 [ 1394.125920][T17599] EXT4-fs (loop7): dirty_blocks=56 [ 1394.132407][T17599] EXT4-fs (loop7): Block reservation details [ 1394.139118][T17599] EXT4-fs (loop7): i_reserved_data_blocks=56 [ 1395.671042][T17621] 9pnet_fd: Insufficient options for proto=fd [ 1397.014310][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.021130][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.143147][T10430] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 52 with max blocks 4 with error 28 [ 1398.108172][T17647] netlink: 'syz.6.3893': attribute type 12 has an invalid length. [ 1398.201760][T17651] 9pnet_fd: Insufficient options for proto=fd [ 1398.867806][T17662] loop6: detected capacity change from 0 to 512 [ 1398.893349][T17662] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3899: iget: bad i_size value: 38620345925642 [ 1398.972287][T17662] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3899: couldn't read orphan inode 15 (err -117) [ 1399.095735][T17662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.489475][T17669] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3899: bg 0: block 5: invalid block bitmap [ 1399.619585][T17669] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 1399.632680][T17669] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1399.632680][T17669] [ 1399.642961][T17669] EXT4-fs (loop6): Total free blocks count 0 [ 1399.649774][T17669] EXT4-fs (loop6): Free/Dirty block details [ 1399.655901][T17669] EXT4-fs (loop6): free_blocks=0 [ 1399.662292][T17669] EXT4-fs (loop6): dirty_blocks=124 [ 1399.668323][T17669] EXT4-fs (loop6): Block reservation details [ 1399.677226][T17669] EXT4-fs (loop6): i_reserved_data_blocks=124 [ 1400.230596][T17658] loop8: detected capacity change from 0 to 16384 [ 1400.441275][T17658] bcachefs (loop8): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,wide_macs,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl,read_only [ 1400.441447][T17658] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1400.480530][T17658] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 1400.491211][T17658] bcachefs (loop8): recovering from clean shutdown, journal seq 18 [ 1400.503052][T17658] bcachefs (loop8): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 1400.503052][T17658] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1400.775919][T17658] bcachefs (loop8): btree node read error at btree backpointers level 0/0 [ 1400.776052][T17658] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq dd412662cf0a3cdb written 24 min_key POS_MIN durability: 1 ptr: 0:177:0 gen 0 [ 1400.776183][T17658] loop8 node offset 0/24 bset u64s 112: checksum error, type chacha20_poly1305_128: got e99487dc6ff03b72d07bb56fc9a63a04 should be abaebe03944065cbfc0dac162e25c079 [ 1400.776319][T17658] loop8 btree validate error [ 1400.776396][T17658] flagging btree backpointers lost data [ 1400.776479][T17658] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1400.776579][T17658] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 1400.776681][T17658] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 1400.776788][T17658] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 1400.776888][T17658] ret fsck_errors_not_fixed [ 1400.892848][T17658] bcachefs (loop8): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 1400.942702][T17658] bcachefs (loop8): btree node read error at btree bucket_gens level 0/0 [ 1400.942823][T17658] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2621d2c769dd3faf written 16 min_key POS_MIN durability: 1 ptr: 0:138:0 gen 1 [ 1400.942942][T17658] loop8 node offset 0/16: got wrong btree node: got [ 1400.943036][T17658] btree=(unknown btree 1029464) level=12 seq 2600000000000000 2813929176 [ 1400.943135][T17658] min: 827563850985460117:17014827092881581510:3608693433 [ 1400.943236][T17658] max: 5993366444993810055:2430208988770184116:4078845280 [ 1400.943326][T17658] loop8 btree validate error [ 1400.943400][T17658] flagging btree bucket_gens lost data [ 1400.943492][T17658] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 1400.943592][T17658] ret btree_node_read_err_bad_node [ 1401.043267][T17658] bcachefs (loop8): error reading btree root btree=bucket_gens level=0: btree_node_read_error, fixing [ 1401.106259][T17658] bcachefs (loop8): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 1401.125572][T17658] bcachefs (loop8): check_topology... [ 1401.140983][ T54] bcachefs (loop8): btree node read error at btree alloc level 0/1 [ 1401.141104][ T54] u64s 11 type btree_ptr_v2 0:82:0 len 0 ver 0: seq 4dc858ad08044b41 written 16 min_key POS_MIN durability: 1 ptr: 0:141:0 gen 0 [ 1401.141228][ T54] loop8 node offset 0/16 bset u64s 747: checksum error, type chacha20_poly1305_128: got fe9865a82be123f04cd1d8733f2756e4 should be 81bf44af94baccd7a732a9e044e74da1 [ 1401.141346][ T54] loop8 btree validate error [ 1401.141417][ T54] flagging btree alloc lost data [ 1401.141494][ T54] ret fsck_errors_not_fixed [ 1401.218175][ T54] bcachefs (loop8): btree node read error at btree alloc level 0/1 [ 1401.218277][ T54] u64s 11 type btree_ptr_v2 0:457:0 len 0 ver 0: seq 4d46f54fbc35593d written 24 min_key 0:82:1 durability: 1 ptr: 0:146:0 gen 0 [ 1401.218401][ T54] loop8 node offset 0/24 bset u64s 783: checksum error, type chacha20_poly1305_128: got 0e9b01d1e048a47caafd24032664b51f should be 3665697475389a8cb5013229cbfab69b [ 1401.218524][ T54] loop8 btree validate error [ 1401.218600][ T54] ret fsck_errors_not_fixed [ 1401.277428][T17673] bcachefs (loop8): btree node read error at btree alloc level 0/1 [ 1401.277714][T17673] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 96d95157b8f08fd6 written 16 min_key 0:457:1 durability: 1 ptr: 0:171:0 gen 0 [ 1401.277845][T17673] loop8 node offset 0/16 bset u64s 594: checksum error, type chacha20_poly1305_128: got 60c4aa5b818ebbb3de2bc344a84e90ee should be beee080eb0e1e57af476ea0fcc323e5e [ 1401.277983][T17673] loop8 btree validate error [ 1401.278057][T17673] ret fsck_errors_not_fixed [ 1401.339919][T17658] bcachefs (loop8): empty interior btree node at btree=alloc level=1 [ 1401.340034][T17658] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6418e625a07b578f written 24 min_key POS_MIN durability: 1 ptr: 0:147:0 gen 0, fixing [ 1401.363847][T17658] bcachefs (loop8): bch2_btree_repair_topology_recurse(): error ECHILD [ 1401.417897][T17658] bcachefs (loop8): btree root alloc unreadable, must recover from scan [ 1401.427074][T17658] bcachefs (loop8): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 1401.439796][T17658] bcachefs (loop8): bch2_check_root(): error restart_recovery [ 1401.447701][T17658] bcachefs (loop8): scan_for_btree_nodes... [ 1401.772158][T17658] bcachefs (loop8): btree node scan found 1 nodes after overwrites [ 1401.791949][T17658] done [ 1401.794968][T17658] bcachefs (loop8): check_topology... [ 1401.876445][T17658] bcachefs (loop8): btree root alloc unreadable, must recover from scan [ 1401.894617][T17658] bcachefs (loop8): no nodes found for btree alloc, continuing [ 1401.986553][T17658] done [ 1401.989806][T17658] bcachefs (loop8): accounting_read... done [ 1402.031557][T17658] bcachefs (loop8): alloc_read... done [ 1402.060591][T17658] bcachefs (loop8): snapshots_read... done [ 1402.094524][T17658] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean [ 1402.106802][T17658] bcachefs (loop8): done starting filesystem [ 1402.445472][T10952] bcachefs (loop8): shutting down [ 1402.564971][T10952] bcachefs (loop8): shutdown complete [ 1402.771792][ T4950] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 120 with max blocks 4 with error 28 [ 1403.233364][T17690] 9pnet_fd: Insufficient options for proto=fd [ 1405.854015][T17721] loop5: detected capacity change from 0 to 4096 [ 1405.885601][T17721] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1406.029800][T17724] 9pnet_fd: Insufficient options for proto=fd [ 1408.127253][T17746] 9pnet_fd: Insufficient options for proto=fd [ 1408.157333][T17747] loop6: detected capacity change from 0 to 1024 [ 1408.412962][T17747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.162415][T10910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.124358][T17779] loop6: detected capacity change from 0 to 512 [ 1410.279391][T17779] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3947: iget: bad i_size value: 38620345925642 [ 1410.306128][T17779] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3947: couldn't read orphan inode 15 (err -117) [ 1410.370218][T17779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.516530][T17785] 9pnet_fd: Insufficient options for proto=fd [ 1410.659636][T17789] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3947: bg 0: block 5: invalid block bitmap [ 1410.779195][T17789] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 1410.793076][T17789] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1410.793076][T17789] [ 1410.806004][T17789] EXT4-fs (loop6): Total free blocks count 0 [ 1410.812361][T17789] EXT4-fs (loop6): Free/Dirty block details [ 1410.819576][T17789] EXT4-fs (loop6): free_blocks=0 [ 1410.824723][T17789] EXT4-fs (loop6): dirty_blocks=60 [ 1410.836858][T17789] EXT4-fs (loop6): Block reservation details [ 1410.844331][T17789] EXT4-fs (loop6): i_reserved_data_blocks=60 [ 1414.044848][T10437] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 56 with max blocks 4 with error 28 [ 1414.451035][T17816] 9pnet_fd: Insufficient options for proto=fd [ 1414.902057][T17821] netlink: 'syz.3.3964': attribute type 1 has an invalid length. [ 1416.643976][T17839] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3971'. [ 1416.880063][T17842] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.014309][T17842] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.193565][T17842] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.319535][T17842] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.878116][ T3491] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.909943][ T3491] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.942459][ T3491] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.033812][ T3491] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.265700][T17850] 9pnet_fd: Insufficient options for proto=fd [ 1418.851962][T17852] syzkaller0: entered promiscuous mode [ 1418.860993][T17852] syzkaller0: entered allmulticast mode [ 1418.876857][T17855] 8021q: VLANs not supported on nlmon0 [ 1420.291345][T17868] loop5: detected capacity change from 0 to 2048 [ 1420.449997][T17874] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3983'. [ 1420.483844][T17868] loop5: p1 p2 p3 [ 1421.423022][T17886] 9pnet_fd: Insufficient options for proto=fd [ 1422.032172][T17893] syzkaller0: entered promiscuous mode [ 1422.038062][T17893] syzkaller0: entered allmulticast mode [ 1422.355202][T17896] 8021q: VLANs not supported on caif0 [ 1423.408816][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1424.603282][T17908] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1425.983157][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1425.996049][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1426.284693][T17917] 9pnet_fd: Insufficient options for proto=fd [ 1427.161711][T17924] syzkaller0: entered promiscuous mode [ 1427.167427][T17924] syzkaller0: entered allmulticast mode [ 1427.607065][T17928] 8021q: VLANs not supported on caif0 [ 1427.845197][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4006'. [ 1428.182810][T17934] syzkaller0: entered promiscuous mode [ 1428.188820][T17934] syzkaller0: entered allmulticast mode [ 1428.965697][T17943] loop7: detected capacity change from 0 to 64 [ 1429.208412][ T30] audit: type=1804 audit(1758310813.218:3758): pid=17943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4011" name="/newroot/407/file1/file1" dev="loop7" ino=21 res=1 errno=0 [ 1429.546270][T17951] 9pnet_fd: Insufficient options for proto=fd [ 1430.066991][T17958] syzkaller0: entered promiscuous mode [ 1430.074177][T17958] syzkaller0: entered allmulticast mode [ 1430.367209][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4019'. [ 1430.651511][T17967] 8021q: VLANs not supported on caif0 [ 1431.049376][T17969] syzkaller0: entered promiscuous mode [ 1431.055230][T17969] syzkaller0: entered allmulticast mode [ 1432.176122][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1432.607314][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4031'. [ 1432.823508][T18002] syzkaller0: entered promiscuous mode [ 1432.832401][T18002] syzkaller0: entered allmulticast mode [ 1433.375879][T18009] loop5: detected capacity change from 0 to 1024 [ 1433.428798][T18008] syzkaller0: entered promiscuous mode [ 1433.434678][T18008] syzkaller0: entered allmulticast mode [ 1433.452410][T18009] EXT4-fs: Ignoring removed nobh option [ 1433.494739][T18009] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1433.652485][T18009] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.4035: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1433.778335][T18009] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4035: couldn't read orphan inode 11 (err -117) [ 1433.795595][T18009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.941863][T18009] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4035: Invalid block bitmap block 0 in block_group 0 [ 1434.039232][T18009] Quota error (device loop5): write_blk: dquota write failed [ 1434.046944][T18009] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1434.060566][T18009] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4035: Failed to acquire dquot type 0 [ 1434.442726][T15540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.161666][T18034] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4044'. [ 1435.750792][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4046'. [ 1435.972123][T18040] syzkaller0: entered promiscuous mode [ 1435.978174][T18040] syzkaller0: entered allmulticast mode [ 1436.384924][T18050] loop6: detected capacity change from 0 to 8 [ 1436.480614][T18050] squashfs image failed sanity check [ 1436.487269][T18047] syzkaller0: entered promiscuous mode [ 1436.496465][T18047] syzkaller0: entered allmulticast mode [ 1437.492069][T18066] 8021q: VLANs not supported on caif0 [ 1438.665155][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4060'. [ 1439.073750][T18087] syzkaller0: entered promiscuous mode [ 1439.079977][T18087] syzkaller0: entered allmulticast mode [ 1441.080982][T18128] 8021q: VLANs not supported on caif0 [ 1442.109957][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4076'. [ 1442.597235][T18144] syzkaller0: entered promiscuous mode [ 1442.605947][T18144] syzkaller0: entered allmulticast mode [ 1443.989392][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4088'. [ 1444.446842][T18174] 8021q: VLANs not supported on nlmon0 [ 1445.637414][T18185] syzkaller0: entered promiscuous mode [ 1445.650179][T18185] syzkaller0: entered allmulticast mode [ 1447.315875][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4102'. [ 1447.422373][T18216] macvtap1: entered promiscuous mode [ 1447.428190][T18216] team0: entered promiscuous mode [ 1447.434387][T18216] macvtap1: entered allmulticast mode [ 1447.440134][T18216] team0: entered allmulticast mode [ 1447.447137][T18216] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1447.508392][T18221] team0: left allmulticast mode [ 1447.513627][T18221] team0: left promiscuous mode [ 1448.489892][T18230] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1449.900009][T18258] vlan1: entered promiscuous mode [ 1449.905287][T18258] batadv0: entered promiscuous mode [ 1450.114771][T18265] loop6: detected capacity change from 0 to 128 [ 1450.269972][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4118'. [ 1450.337013][T18265] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1450.373646][T18267] team_slave_0: entered promiscuous mode [ 1450.379820][T18267] team_slave_1: entered promiscuous mode [ 1450.386135][T18267] macvtap1: entered promiscuous mode [ 1450.395496][T18267] team0: entered promiscuous mode [ 1450.404706][T18267] macvtap1: entered allmulticast mode [ 1450.410599][T18267] team0: entered allmulticast mode [ 1450.415925][T18267] team_slave_0: entered allmulticast mode [ 1450.422044][T18267] team_slave_1: entered allmulticast mode [ 1450.426724][T18265] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.434343][T18267] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1450.621793][T18270] team0: left allmulticast mode [ 1450.627211][T18270] team_slave_0: left allmulticast mode [ 1450.633320][T18270] team_slave_1: left allmulticast mode [ 1450.639268][T18270] team0: left promiscuous mode [ 1450.647407][T18270] team_slave_0: left promiscuous mode [ 1450.653218][T18270] team_slave_1: left promiscuous mode [ 1451.411929][T10910] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1451.814145][T18283] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1452.491363][T18303] loop7: detected capacity change from 0 to 64 [ 1452.670485][T18303] ===================================================== [ 1452.680783][T18303] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 1452.688901][T18303] hfs_find_set_zero_bits+0x74d/0xb60 [ 1452.694490][T18303] hfs_vbm_search_free+0x13c/0x5b0 [ 1452.699983][T18303] hfs_extend_file+0x6a5/0x1b00 [ 1452.706292][T18303] hfs_bmap_reserve+0x11c/0x5a0 [ 1452.718415][T18303] hfs_cat_create+0x22e/0xc40 [ 1452.723359][T18303] hfs_mkdir+0xd5/0x250 [ 1452.729783][T18303] vfs_mkdir+0x4e7/0x850 [ 1452.734270][T18303] do_mkdirat+0x41a/0xf30 [ 1452.741843][T18303] __x64_sys_mkdirat+0xc1/0x140 [ 1452.746915][T18303] x64_sys_call+0x338/0x3e20 [ 1452.751905][T18303] do_syscall_64+0xd9/0x210 [ 1452.756586][T18303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.762925][T18303] [ 1452.765346][T18303] Uninit was created at: [ 1452.772648][T18303] __kmalloc_cache_noprof+0x7f7/0xed0 [ 1452.778414][T18303] hfs_mdb_get+0x1cc8/0x2a90 [ 1452.783199][T18303] hfs_fill_super+0x3d0/0xb70 [ 1452.788384][T18303] get_tree_bdev_flags+0x6e3/0x920 [ 1452.793717][T18303] get_tree_bdev+0x38/0x50 [ 1452.801334][T18303] hfs_get_tree+0x35/0x40 [ 1452.806918][T18303] vfs_get_tree+0xb0/0x5c0 [ 1452.812077][T18303] do_new_mount+0x733/0x1420 [ 1452.820588][T18303] path_mount+0x6db/0x1e90 [ 1452.825228][T18303] __se_sys_mount+0x6eb/0x7d0 [ 1452.834155][T18303] __x64_sys_mount+0xe4/0x150 [ 1452.839297][T18303] x64_sys_call+0x3604/0x3e20 [ 1452.844216][T18303] do_syscall_64+0xd9/0x210 [ 1452.849028][T18303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.855209][T18303] [ 1452.860603][T18303] CPU: 1 UID: 0 PID: 18303 Comm: syz.7.4128 Not tainted syzkaller #0 PREEMPT(none) [ 1452.871098][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1452.881454][T18303] ===================================================== [ 1452.891514][T18303] Disabling lock debugging due to kernel taint [ 1452.897982][T18303] Kernel panic - not syncing: kmsan.panic set ... [ 1452.904571][T18303] CPU: 1 UID: 0 PID: 18303 Comm: syz.7.4128 Tainted: G B syzkaller #0 PREEMPT(none) [ 1452.915739][T18303] Tainted: [B]=BAD_PAGE [ 1452.920040][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1452.930269][T18303] Call Trace: [ 1452.933699][T18303] [ 1452.936838][T18303] __dump_stack+0x26/0x30 [ 1452.941394][T18303] dump_stack_lvl+0x53/0x270 [ 1452.946214][T18303] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1452.952270][T18303] dump_stack+0x1e/0x25 [ 1452.956658][T18303] vpanic+0x361/0xc50 [ 1452.960881][T18303] panic+0x15d/0x160 [ 1452.965053][T18303] kmsan_report+0x31c/0x320 [ 1452.969777][T18303] ? __msan_warning+0x1b/0x30 [ 1452.974657][T18303] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 1452.980426][T18303] ? hfs_vbm_search_free+0x13c/0x5b0 [ 1452.985926][T18303] ? hfs_extend_file+0x6a5/0x1b00 [ 1452.991211][T18303] ? hfs_bmap_reserve+0x11c/0x5a0 [ 1452.996478][T18303] ? hfs_cat_create+0x22e/0xc40 [ 1453.001558][T18303] ? hfs_mkdir+0xd5/0x250 [ 1453.006116][T18303] ? vfs_mkdir+0x4e7/0x850 [ 1453.010744][T18303] ? do_mkdirat+0x41a/0xf30 [ 1453.015461][T18303] ? __x64_sys_mkdirat+0xc1/0x140 [ 1453.020708][T18303] ? x64_sys_call+0x338/0x3e20 [ 1453.025727][T18303] ? do_syscall_64+0xd9/0x210 [ 1453.030597][T18303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.036887][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.042417][T18303] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1453.048975][T18303] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1453.055271][T18303] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1453.061357][T18303] ? stack_depot_save_flags+0x615/0x7b0 [ 1453.067122][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.072517][T18303] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1453.079077][T18303] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 1453.085187][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.090547][T18303] __msan_warning+0x1b/0x30 [ 1453.095266][T18303] hfs_find_set_zero_bits+0x74d/0xb60 [ 1453.100868][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.106246][T18303] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1453.112413][T18303] hfs_vbm_search_free+0x13c/0x5b0 [ 1453.117775][T18303] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1453.123810][T18303] hfs_extend_file+0x6a5/0x1b00 [ 1453.128920][T18303] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1453.135490][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.140869][T18303] hfs_bmap_reserve+0x11c/0x5a0 [ 1453.145986][T18303] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1453.152043][T18303] hfs_cat_create+0x22e/0xc40 [ 1453.156975][T18303] ? _raw_spin_unlock+0x30/0x50 [ 1453.162068][T18303] ? hfs_mark_mdb_dirty+0x11d/0x2c0 [ 1453.167511][T18303] ? hfs_new_inode+0xd4a/0x10f0 [ 1453.172633][T18303] ? kmsan_get_metadata+0xfb/0x160 [ 1453.177987][T18303] hfs_mkdir+0xd5/0x250 [ 1453.182386][T18303] ? __pfx_hfs_mkdir+0x10/0x10 [ 1453.187402][T18303] vfs_mkdir+0x4e7/0x850 [ 1453.191885][T18303] do_mkdirat+0x41a/0xf30 [ 1453.196470][T18303] __x64_sys_mkdirat+0xc1/0x140 [ 1453.201564][T18303] x64_sys_call+0x338/0x3e20 [ 1453.206401][T18303] do_syscall_64+0xd9/0x210 [ 1453.211102][T18303] ? irqentry_exit+0x16/0x60 [ 1453.215933][T18303] ? clear_bhb_loop+0x40/0x90 [ 1453.220821][T18303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.226940][T18303] RIP: 0033:0x7f15ff18d497 [ 1453.231514][T18303] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.251340][T18303] RSP: 002b:00007f15fd3ede68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1453.259979][T18303] RAX: ffffffffffffffda RBX: 00007f15fd3edef0 RCX: 00007f15ff18d497 [ 1453.268130][T18303] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 1453.276271][T18303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1453.284566][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 1453.292706][T18303] R13: 00007f15fd3edeb0 R14: 0000000000000000 R15: 0000000000000000 [ 1453.300890][T18303] [ 1453.304341][T18303] Kernel Offset: disabled [ 1453.308744][T18303] Rebooting in 86400 seconds..