last executing test programs: 43.571308388s ago: executing program 4 (id=1985): clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0xe12c, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x0, 0x2000}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000a80)) prlimit64(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x80, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfc, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000080)={r0}) 40.861990312s ago: executing program 2 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x70}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 40.704712212s ago: executing program 2 (id=2009): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100000000", @ANYRES32], 0x20) 39.902032496s ago: executing program 2 (id=2010): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10410}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 39.712008037s ago: executing program 2 (id=2012): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 39.537497128s ago: executing program 2 (id=2014): mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 39.2069201s ago: executing program 4 (id=2016): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x200}) r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x88442) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="ea000000090000"]) 39.116110731s ago: executing program 2 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, 0x18000, 0x3) 38.766944842s ago: executing program 32 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="e9", 0x1}], 0x1, 0x18000, 0x3) 38.742273023s ago: executing program 4 (id=2021): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x40046f41, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0xffffffff80000001, 0x2001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 37.753062627s ago: executing program 4 (id=2024): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 37.534028578s ago: executing program 4 (id=2026): clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0xe12c, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x0, 0x2000}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000a80)) prlimit64(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x80, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfc, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000080)={r0}) 37.148849621s ago: executing program 4 (id=2034): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x40046f41, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0xffffffff80000001, 0x2001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 36.908593132s ago: executing program 33 (id=2034): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x40046f41, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0xffffffff80000001, 0x2001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 21.456096201s ago: executing program 6 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000000)='./file0\x00', 0xa) 21.350241861s ago: executing program 6 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) mmap$usbmon(&(0x7f000099e000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0xff, 0x0, 0x800, 0x1dd3, 0xc}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="010000000000000000000f0000000500330001868bc9000000af0ff7afd96805b36b16d9f4f00d17e4c4fdcfb010ee57649a0a13f0b0c0652a6a99a899402a87927fcebcc09440f697505f0dd8b951f9efbf7be89e1e14daa842f7af1c0cf69db09149b98034115ba54e07a2936af23a7c70bd18dbbf04500018d6ed35ce845ab92809878d96c733a73f8239d3022a8269023540d98af8", @ANYRES32, @ANYBLOB="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"], 0x2c}}, 0x0) 20.437581296s ago: executing program 6 (id=2135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0xd8, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000052000000000000000000000000e300"/28], 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000015c0)='kfree\x00', r4}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x10, 0x0, &(0x7f00000000c0)={0xa1, 0xa, 0x0, 0x599}, 0x8, 0x0, 0x0, 0x48000000, 0x1, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x111802, 0x44) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) read(r5, &(0x7f0000000100)=""/206, 0xce) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 20.062856878s ago: executing program 34 (id=2135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0xd8, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000052000000000000000000000000e300"/28], 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000015c0)='kfree\x00', r4}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x10, 0x0, &(0x7f00000000c0)={0xa1, 0xa, 0x0, 0x599}, 0x8, 0x0, 0x0, 0x48000000, 0x1, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x111802, 0x44) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) read(r5, &(0x7f0000000100)=""/206, 0xce) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 3.813168601s ago: executing program 7 (id=2297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.612301502s ago: executing program 7 (id=2301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 3.489054612s ago: executing program 7 (id=2305): bpf$MAP_CREATE(0x0, 0x0, 0x15) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='percpu_free_percpu\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300), 0x0) 2.330071009s ago: executing program 5 (id=2314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.285433979s ago: executing program 7 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = getpid() timer_gettime(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.243496539s ago: executing program 0 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7800000000010189ee575a000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005"], 0x78}}, 0x0) 2.162017469s ago: executing program 5 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_vlan={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x5, 0x100, 0x3, 0x4, 0x4}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x7}}]}, {0x5, 0x6, "fe5c5a49185047b9826b783710114ec81ba29349a5357a09b54e059f438154294f5ac2b7436fee1caa4ce227a2d13dbe93cb895b151d994cfdce424b000000000000000048ad354d4fbd75282c31d7effbb92743667c"}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0xd2}}, 0x0) 2.08657291s ago: executing program 5 (id=2320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_uring_enter(0xffffffffffffffff, 0x1d32, 0x1, 0xd, 0x0, 0x43) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200030000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 2.04658429s ago: executing program 0 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.910306701s ago: executing program 5 (id=2323): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd0f, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xea) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 1.862547271s ago: executing program 0 (id=2324): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f00000000c0)=0x50000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40002000}) shutdown(r1, 0x0) 1.677981652s ago: executing program 0 (id=2325): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000014c0)={[{@noblock_validity}, {@grpjquota}, {@sysvgroups}, {@norecovery}, {@noacl}, {@noinit_itable}, {@nouser_xattr}, {@data_journal}, {@nomblk_io_submit}], [{@uid_eq}, {@euid_eq}, {@audit}, {@smackfshat}, {@obj_user={'obj_user', 0x3d, '*'}}, {@measure}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x3b, 0x38, 0x35, 0x62, 0x8, 0x31, 0x31, 0x31], 0x2d, [0x33, 0x61, 0x33, 0x36], 0x2d, [0x31, 0x38, 0x67, 0x32], 0x2d, [0x32, 0x64, 0x33, 0x33], 0x2d, [0x32, 0x35, 0x35, 0x31, 0x34, 0x38, 0x65, 0x2]}}}, {@euid_eq}, {@euid_eq}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'euid'}}]}, 0x3, 0x56a, &(0x7f0000000a80)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 1.566547013s ago: executing program 0 (id=2327): bpf$MAP_CREATE(0x0, 0x0, 0x15) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='percpu_free_percpu\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300), 0x0) 1.258829264s ago: executing program 1 (id=2330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.081856755s ago: executing program 7 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7800000000010189ee575a000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500"], 0x78}}, 0x0) 1.034065845s ago: executing program 3 (id=2332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 868.703436ms ago: executing program 3 (id=2333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a010300000000000000000700fc000900020073797a31000000000900010073797a300000000048000380440001800a000100717582746100000010000280"], 0xf8}}, 0x0) 848.453216ms ago: executing program 1 (id=2334): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000000)=[{0x60, 0x0, 0x0, 0x8}, {0x16, 0x0, 0x0, 0xfffffffc}]}) 807.036956ms ago: executing program 7 (id=2335): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000000)) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 755.821517ms ago: executing program 5 (id=2336): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xb6de, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x27b8c0, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x40602, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) accept$unix(r3, &(0x7f0000000bc0), &(0x7f0000000ac0)=0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="0806f9574a7f"}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'syz_tun\x00'}) 571.815458ms ago: executing program 3 (id=2337): setreuid(0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 571.685238ms ago: executing program 1 (id=2338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) 487.102818ms ago: executing program 3 (id=2339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @broadcast, 0x9}]}}}}}}}}, 0x0) 369.043419ms ago: executing program 1 (id=2340): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1084060, 0x0, 0x0, 0x0, &(0x7f0000000000)) unshare(0x20000400) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000480)='./file0\x00', 0x50007a2) write$binfmt_script(r1, &(0x7f0000000000), 0x4) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 345.948769ms ago: executing program 0 (id=2341): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000001c0)=[{0x6, 0x8, 0xde, 0xc1}]}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0x3000c46, &(0x7f0000000340)={[{@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x143042, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="16cf3a83a9ccda10719bcb2024f4325f10d945f8660259c07937e77d33383d057e9ccf0c824a5d0580fc8e89c6c2af2f3d45aabc1a6314a60193f6992003fb25f9bf5492bb092302edb3f4979e48eb0d623ed297a6110f4070bd21b34766de199f286c2250913005d8c43d974a1ada938f9a4485df8055736e4851be530b1ecf61c4275f8f61b7999a1c38d651c78a7805b64f8a5dbc4bd0557303432ff54320f6940d258aa8d401412173e0d17f53e7e5fb4f479a9d4a574ea881a3ff2ec52d374135ba1a", @ANYRESOCT=r2], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000000c0)={0x0, 0x6930, 0x4, 0x1}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000006c0)={0x1, &(0x7f00000000c0)=[{0x40, 0xfe, 0x0, 0xce33}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1810714, &(0x7f0000000900)={[{@auto_da_alloc}, {@noblock_validity}, {@usrquota}, {@resuid}, {@sb={'sb', 0x3d, 0xfff}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffe}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@context={'context', 0x3d, 'root'}}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 262.057759ms ago: executing program 1 (id=2342): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x12}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 209.559679ms ago: executing program 3 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 205.745529ms ago: executing program 5 (id=2344): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r2, @ANYBLOB="c5c876d700000000240012800b00010067726574617000001400028008000100", @ANYRES64=r1], 0x44}}, 0x0) 15.14193ms ago: executing program 1 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7800000000010189ee575a000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500"], 0x78}}, 0x0) 0s ago: executing program 3 (id=2346): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd0f, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xea) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="50020206e53018"], 0x7) kernel console output (not intermixed with test programs): ctors = 8 limit=128 [ 282.725812][ T26] audit: type=1326 audit(1732926452.117:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 282.748907][ T8293] syz.3.1457: attempt to access beyond end of device [ 282.748907][ T8293] loop3: rw=2049, sector=204, nr_sectors = 8 limit=128 [ 282.817252][ T26] audit: type=1326 audit(1732926452.117:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 282.881128][ T51] kworker/u4:3: attempt to access beyond end of device [ 282.881128][ T51] loop3: rw=1, sector=164, nr_sectors = 8 limit=128 [ 282.904811][ T26] audit: type=1326 audit(1732926452.117:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 282.941998][ T51] kworker/u4:3: attempt to access beyond end of device [ 282.941998][ T51] loop3: rw=1, sector=180, nr_sectors = 8 limit=128 [ 282.960602][ T8307] hub 6-0:1.0: USB hub found [ 282.975813][ T26] audit: type=1326 audit(1732926452.117:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 282.986713][ T51] kworker/u4:3: attempt to access beyond end of device [ 282.986713][ T51] loop3: rw=1, sector=196, nr_sectors = 8 limit=128 [ 283.018760][ T8307] hub 6-0:1.0: 1 port detected [ 283.277473][ T8318] hub 9-0:1.0: USB hub found [ 283.288840][ T8318] hub 9-0:1.0: 1 port detected [ 283.679092][ T8331] Process accounting resumed [ 283.711534][ T8331] loop3: detected capacity change from 0 to 256 [ 284.281390][ T8331] FAT-fs (loop3): Unrecognized mount option "¡Ô$íÅFZ“+w§N€*Æ¿%Ø¢B¼`™­#" or missing value [ 284.522818][ T8340] loop1: detected capacity change from 0 to 8192 [ 285.903538][ T8365] xt_l2tp: wrong L2TP version: 0 [ 285.978657][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'. [ 286.003110][ T8368] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1486'. [ 286.031937][ T8368] tc_dump_action: action bad kind [ 286.195979][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 287.900830][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'. [ 288.793835][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 288.793850][ T26] audit: type=1326 audit(1732926459.167:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.850673][ T26] audit: type=1326 audit(1732926459.197:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.873084][ T26] audit: type=1326 audit(1732926459.197:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.895328][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.902052][ T26] audit: type=1326 audit(1732926459.197:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.924535][ T26] audit: type=1326 audit(1732926459.197:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.946784][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.954988][ T26] audit: type=1326 audit(1732926459.197:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 288.989993][ T26] audit: type=1326 audit(1732926459.197:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 289.012267][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.022654][ T26] audit: type=1326 audit(1732926459.277:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 289.044943][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.132270][ T26] audit: type=1326 audit(1732926459.277:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 289.201175][ T26] audit: type=1326 audit(1732926459.277:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 289.484588][ T8453] loop4: detected capacity change from 0 to 512 [ 289.496337][ T8453] EXT4-fs: Ignoring removed orlov option [ 289.504256][ T8453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.528805][ T8453] EXT4-fs (loop4): 1 orphan inode deleted [ 289.534831][ T8453] EXT4-fs (loop4): 1 truncate cleaned up [ 289.540930][ T8453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.077173][ T8453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 290.516467][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 290.949071][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 291.004494][ T8493] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1533'. [ 293.720325][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 293.962161][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 293.962180][ T26] audit: type=1326 audit(1732926464.327:853): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 293.992302][ T26] audit: type=1326 audit(1732926464.327:854): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 294.103984][ T8570] loop4: detected capacity change from 0 to 256 [ 294.176471][ T8570] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 294.216934][ T8570] FAT-fs (loop4): Filesystem has been set read-only [ 295.255300][ T26] audit: type=1326 audit(1732926465.627:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 295.316341][ T26] audit: type=1326 audit(1732926465.627:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 295.381913][ T26] audit: type=1326 audit(1732926465.627:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 295.443230][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 295.459032][ T26] audit: type=1326 audit(1732926465.627:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 295.465981][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.481318][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.662852][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.670476][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.686794][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.694938][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.705073][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 295.712581][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.720099][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.729666][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.738551][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.748263][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.757005][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.766632][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.775929][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.788706][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.797515][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.808714][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.823989][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.839609][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.859627][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.869304][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.880834][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.895637][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.908121][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.920031][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.928858][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.936537][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.944234][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.951783][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.959301][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.966997][ T952] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 295.980157][ T952] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 298.379787][ T8640] loop4: detected capacity change from 0 to 512 [ 298.426335][ T8642] loop3: detected capacity change from 0 to 512 [ 298.452472][ T8640] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1588: casefold flag without casefold feature [ 298.492313][ T8640] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1588: couldn't read orphan inode 15 (err -117) [ 298.501714][ T26] audit: type=1326 audit(1732926468.867:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 298.513384][ T8642] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.541401][ T8648] syz.2.1592[8648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.541510][ T8648] syz.2.1592[8648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.568593][ T8640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.596051][ T8642] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 298.611963][ T26] audit: type=1326 audit(1732926468.907:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 298.628482][ T8642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 298.642799][ T8642] System zones: 1-12 [ 298.650281][ T8642] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1589: corrupted in-inode xattr [ 298.664035][ T8642] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1589: couldn't read orphan inode 15 (err -117) [ 298.678156][ T8642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.687874][ T26] audit: type=1326 audit(1732926468.907:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 298.712657][ T26] audit: type=1326 audit(1732926468.907:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 299.106542][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 299.591025][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 299.759220][ T8666] loop4: detected capacity change from 0 to 4096 [ 299.822241][ T8666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 300.718583][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 300.831140][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 301.053166][ T8700] random: crng reseeded on system resumption [ 301.723921][ T8705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.869693][ T8705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.945821][ T8709] capability: warning: `syz.0.1613' uses 32-bit capabilities (legacy support in use) [ 301.995668][ T8709] program syz.0.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.034973][ T8705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.129736][ T8705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.471207][ T8705] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.702102][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 302.702122][ T26] audit: type=1326 audit(1732926472.997:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 303.132795][ T26] audit: type=1326 audit(1732926473.017:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 303.249247][ T8705] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.253769][ T26] audit: type=1326 audit(1732926473.027:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 303.279670][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.296441][ T8705] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.307731][ T26] audit: type=1326 audit(1732926473.027:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 303.329998][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.380624][ T8705] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.432602][ T26] audit: type=1326 audit(1732926473.047:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 303.800526][ T26] audit: type=1326 audit(1732926474.167:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 303.839175][ T26] audit: type=1326 audit(1732926474.197:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 303.861616][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.902208][ T26] audit: type=1326 audit(1732926474.197:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 303.957373][ T26] audit: type=1326 audit(1732926474.257:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 304.063815][ T8749] netlink: 'syz.0.1629': attribute type 3 has an invalid length. [ 304.196053][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'. [ 304.971756][ T8751] loop4: detected capacity change from 0 to 4096 [ 305.391665][ T8751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.042599][ T26] audit: type=1326 audit(1732926476.387:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.3.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 306.065011][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.470534][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 306.588855][ T8778] ipt_CLUSTERIP: Please specify destination IP [ 307.508398][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 307.531960][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 307.553987][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 307.698293][ T8807] loop4: detected capacity change from 0 to 128 [ 307.716374][ T26] kauditd_printk_skb: 240 callbacks suppressed [ 307.716391][ T26] audit: type=1326 audit(1732926478.087:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 307.831939][ T26] audit: type=1326 audit(1732926478.087:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 307.885959][ T26] audit: type=1326 audit(1732926478.087:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 307.957493][ T26] audit: type=1326 audit(1732926478.097:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 308.013300][ T26] audit: type=1326 audit(1732926478.097:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 308.036653][ T26] audit: type=1326 audit(1732926478.097:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 308.059673][ T26] audit: type=1326 audit(1732926478.127:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 308.119556][ T26] audit: type=1326 audit(1732926478.127:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 308.171594][ T26] audit: type=1326 audit(1732926478.137:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 308.709822][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1661'. [ 308.710040][ T26] audit: type=1326 audit(1732926478.137:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 309.066077][ T8850] loop1: detected capacity change from 0 to 764 [ 309.095874][ T8850] Symlink component flag not implemented [ 309.112039][ T8850] Symlink component flag not implemented (101) [ 309.128897][ T8854] usb usb1: usbfs: process 8854 (syz.3.1670) did not claim interface 0 before use [ 309.259988][ T8860] loop3: detected capacity change from 0 to 128 [ 309.288869][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'. [ 309.429998][ T8870] binfmt_misc: register: failed to install interpreter file ./file0 [ 310.904543][ T8895] program syz.3.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.925244][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1687'. [ 311.167268][ T8903] loop3: detected capacity change from 0 to 512 [ 311.191353][ T8903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 311.220897][ T8905] loop1: detected capacity change from 0 to 1024 [ 311.234888][ T8903] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1690: bad orphan inode 131083 [ 311.249658][ T8903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.280586][ T8905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.306816][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 311.461156][ T8905] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.1.1691: corrupted in-inode xattr [ 311.531959][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 311.638730][ T8920] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.601326][ T8920] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.625644][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1699'. [ 312.657077][ T8920] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.707975][ T8933] program syz.0.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.726167][ T8920] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.792915][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 312.792932][ T26] audit: type=1326 audit(1732926483.167:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 312.848817][ T8936] loop4: detected capacity change from 0 to 2048 [ 312.867231][ T26] audit: type=1326 audit(1732926483.167:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 312.893327][ T8920] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.932249][ T26] audit: type=1326 audit(1732926483.197:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 312.933348][ T8920] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.968184][ T8936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.981299][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 312.988361][ T8920] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.010657][ T26] audit: type=1326 audit(1732926483.197:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 313.015705][ T8920] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.043916][ T26] audit: type=1326 audit(1732926483.197:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 313.067994][ T26] audit: type=1326 audit(1732926483.197:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 313.090683][ T26] audit: type=1326 audit(1732926483.197:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 313.114882][ T26] audit: type=1326 audit(1732926483.197:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 313.221130][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 313.335712][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 313.415231][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 313.514740][ T8964] program syz.1.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.634457][ T26] audit: type=1326 audit(1732926484.007:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 314.125501][ T26] audit: type=1326 audit(1732926484.007:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55aa980809 code=0x7ffc0000 [ 314.148614][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.734090][ T8982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.866269][ T8982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.984933][ T8996] program syz.1.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.031168][ T8982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.075894][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 315.530116][ T8982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.326992][ T8982] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.365579][ T8982] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.390730][ T8982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.423200][ T8982] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.711188][ T9026] program syz.4.1739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.742313][ T9027] syz.0.1737[9027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.742413][ T9027] syz.0.1737[9027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.002759][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.027669][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.926222][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 317.926271][ T26] audit: type=1326 audit(1732926488.297:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.384279][ T26] audit: type=1326 audit(1732926488.357:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.501481][ T26] audit: type=1326 audit(1732926488.367:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.582309][ T26] audit: type=1326 audit(1732926488.367:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.649627][ T26] audit: type=1326 audit(1732926488.377:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.715458][ T26] audit: type=1326 audit(1732926488.377:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.750340][ T9055] loop1: detected capacity change from 0 to 2048 [ 318.759060][ T26] audit: type=1326 audit(1732926488.387:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.801277][ T26] audit: type=1326 audit(1732926488.397:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 318.815482][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'. [ 318.831519][ T26] audit: type=1326 audit(1732926488.407:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f025297f170 code=0x7ffc0000 [ 318.861675][ T9055] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.877365][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 318.877551][ T9064] program syz.2.1752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.925887][ T26] audit: type=1326 audit(1732926488.427:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0252982037 code=0x7ffc0000 [ 318.951662][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 320.399419][ T9096] loop4: detected capacity change from 0 to 512 [ 320.487419][ T9096] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1766: casefold flag without casefold feature [ 320.540516][ T9096] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1766: couldn't read orphan inode 15 (err -117) [ 320.588834][ T9096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 320.617294][ T9105] program syz.3.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.631707][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 320.685292][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 321.933123][ T9126] syz.4.1777[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.933228][ T9126] syz.4.1777[9126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.290164][ T9141] program syz.4.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.974842][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 322.974856][ T26] audit: type=1326 audit(1732926493.347:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.050200][ T26] audit: type=1326 audit(1732926493.387:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.096851][ T26] audit: type=1326 audit(1732926493.387:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.129141][ T26] audit: type=1326 audit(1732926493.387:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.183501][ T26] audit: type=1326 audit(1732926493.387:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.210613][ T26] audit: type=1326 audit(1732926493.387:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.241582][ T26] audit: type=1326 audit(1732926493.397:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.263949][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.318392][ T4240] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 323.333414][ T26] audit: type=1326 audit(1732926493.397:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.338735][ T9166] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 323.365215][ T26] audit: type=1326 audit(1732926493.397:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9159 comm="syz.4.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 323.513821][ T4240] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 323.528523][ T26] audit: type=1326 audit(1732926493.897:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 323.551255][ T4240] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 323.581863][ T4240] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.603544][ T4240] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.622130][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.630197][ T4240] usb 2-1: Product: syz [ 323.661840][ T4240] usb 2-1: Manufacturer: syz [ 323.666942][ T4240] usb 2-1: SerialNumber: syz [ 323.784299][ T9183] program syz.0.1802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.351406][ T9227] syz.0.1822[9227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.351516][ T9227] syz.0.1822[9227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.138860][ T4240] usb 2-1: 0:2 : does not exist [ 326.175409][ T4240] usb 2-1: USB disconnect, device number 3 [ 326.284846][ T9237] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.478891][ T9249] loop4: detected capacity change from 0 to 128 [ 326.514219][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 326.539019][ T9249] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.622822][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 327.174340][ T4240] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 327.427994][ T4240] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 327.491408][ T4240] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 327.608318][ T4240] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.705379][ T4240] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.716692][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.725730][ T4240] usb 2-1: Product: syz [ 327.729944][ T4240] usb 2-1: Manufacturer: syz [ 327.736605][ T4240] usb 2-1: SerialNumber: syz [ 328.098526][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'. [ 328.619805][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 328.619824][ T26] audit: type=1326 audit(1732926494.450:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 328.687968][ T26] audit: type=1326 audit(1732926494.490:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 328.730225][ T9301] loop4: detected capacity change from 0 to 1024 [ 328.757160][ T26] audit: type=1326 audit(1732926494.490:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 328.823480][ T26] audit: type=1326 audit(1732926494.490:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 328.849609][ T9301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 328.977164][ T26] audit: type=1326 audit(1732926494.490:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.030989][ T9300] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2739: inode #14: comm syz.4.1852: corrupted in-inode xattr [ 329.071568][ T26] audit: type=1326 audit(1732926494.490:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.117016][ T9300] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.1852: attempt to clear invalid blocks 1634560256 len 1 [ 329.137602][ T26] audit: type=1326 audit(1732926494.490:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.197325][ T26] audit: type=1326 audit(1732926494.490:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.248535][ T26] audit: type=1326 audit(1732926494.490:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.324989][ T26] audit: type=1326 audit(1732926494.490:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9299 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8263180809 code=0x7ffc0000 [ 329.342862][ T9311] program syz.0.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.374957][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 329.732527][ T4240] usb 2-1: 0:2 : does not exist [ 329.761981][ T4240] usb 2-1: USB disconnect, device number 4 [ 330.385250][ T9335] program syz.1.1867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.666076][ T9341] loop1: detected capacity change from 0 to 1024 [ 330.705307][ T9341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 330.990574][ T9339] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2739: inode #14: comm syz.1.1868: corrupted in-inode xattr [ 331.071578][ T9339] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.1868: attempt to clear invalid blocks 1634560256 len 1 [ 331.178672][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 331.314624][ T9359] program syz.4.1878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.432026][ T952] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 331.626857][ T952] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 331.644859][ T952] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 331.666265][ T952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.694505][ T952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.721878][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.740135][ T952] usb 4-1: Product: syz [ 331.740157][ T952] usb 4-1: Manufacturer: syz [ 331.740174][ T952] usb 4-1: SerialNumber: syz [ 331.964799][ T9391] program syz.0.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.231653][ T9401] IPVS: stopping master sync thread 9402 ... [ 332.239963][ T9402] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 333.249782][ T9419] program syz.0.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.638364][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 333.638379][ T26] audit: type=1326 audit(1732926497.470:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 333.681543][ T26] audit: type=1326 audit(1732926497.510:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 333.752025][ T26] audit: type=1326 audit(1732926497.550:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 333.821936][ T26] audit: type=1326 audit(1732926497.550:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 333.858605][ T952] usb 4-1: 0:2 : does not exist [ 333.877027][ T952] usb 4-1: USB disconnect, device number 7 [ 334.012645][ T9456] program syz.0.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.304293][ T26] audit: type=1326 audit(1732926498.140:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 334.372059][ T26] audit: type=1326 audit(1732926498.180:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 334.424795][ T26] audit: type=1326 audit(1732926498.180:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 334.451305][ T26] audit: type=1326 audit(1732926498.180:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 334.528849][ T26] audit: type=1326 audit(1732926498.180:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 334.610410][ T26] audit: type=1326 audit(1732926498.260:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9474 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 334.760547][ T9487] loop3: detected capacity change from 0 to 4096 [ 334.771775][ T9491] program syz.0.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.779032][ T9485] block device autoloading is deprecated and will be removed. [ 334.792358][ T952] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 334.812131][ T9487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 334.816637][ T9485] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 334.919825][ T9487] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.1931: corrupted inode contents [ 334.983926][ T952] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 335.015262][ T9487] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #15: comm syz.3.1931: mark_inode_dirty error [ 335.028376][ T952] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 335.054904][ T9487] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.1931: corrupted inode contents [ 335.069093][ T952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.105036][ T952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.134517][ T9487] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1931: mark_inode_dirty error [ 335.134967][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.174574][ T9487] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.1931: corrupted inode contents [ 335.198029][ T952] usb 5-1: Product: syz [ 335.202968][ T9487] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1931: mark_inode_dirty error [ 335.224859][ T952] usb 5-1: Manufacturer: syz [ 335.229531][ T952] usb 5-1: SerialNumber: syz [ 335.262531][ T9487] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #15: comm syz.3.1931: corrupted inode contents [ 335.326233][ T9487] EXT4-fs error (device loop3): ext4_truncate:4311: inode #15: comm syz.3.1931: mark_inode_dirty error [ 335.339695][ T9487] EXT4-fs error (device loop3) in ext4_setattr:5628: Corrupt filesystem [ 335.520849][ T9510] loop1: detected capacity change from 0 to 128 [ 335.558923][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 335.673572][ T9510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.695823][ T9510] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.953847][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 335.987509][ T9523] program syz.0.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.490367][ T9543] loop0: detected capacity change from 0 to 164 [ 336.508676][ T9543] rock: directory entry would overflow storage [ 336.515038][ T9543] rock: sig=0x66, size=4, remaining=3 [ 336.546697][ T9543] rock: directory entry would overflow storage [ 336.569019][ T9543] rock: sig=0x66, size=4, remaining=3 [ 336.605153][ T9547] netlink: 'syz.2.1959': attribute type 10 has an invalid length. [ 336.608673][ T9543] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 336.813260][ T9553] random: crng reseeded on system resumption [ 336.858827][ T9555] program syz.0.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.928661][ T9557] ALSA: seq fatal error: cannot create timer (-16) [ 337.334609][ T9566] loop1: detected capacity change from 0 to 256 [ 337.390529][ T9566] FAT-fs (loop1): Directory bread(block 64) failed [ 337.403349][ T9566] FAT-fs (loop1): Directory bread(block 65) failed [ 337.430263][ T9566] FAT-fs (loop1): Directory bread(block 66) failed [ 337.468611][ T9566] FAT-fs (loop1): Directory bread(block 67) failed [ 337.486442][ T9566] FAT-fs (loop1): Directory bread(block 68) failed [ 337.500891][ T9566] FAT-fs (loop1): Directory bread(block 69) failed [ 337.535598][ T9566] FAT-fs (loop1): Directory bread(block 70) failed [ 337.568959][ T9566] FAT-fs (loop1): Directory bread(block 71) failed [ 337.588946][ T9566] FAT-fs (loop1): Directory bread(block 72) failed [ 337.606091][ T9566] FAT-fs (loop1): Directory bread(block 73) failed [ 337.743242][ T9566] syz.1.1966: attempt to access beyond end of device [ 337.743242][ T9566] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 337.819623][ T9566] syz.1.1966: attempt to access beyond end of device [ 337.819623][ T9566] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 337.993448][ T9578] netlink: 'syz.2.1968': attribute type 4 has an invalid length. [ 338.058882][ T952] usb 5-1: 0:2 : does not exist [ 338.109205][ T952] usb 5-1: USB disconnect, device number 4 [ 338.170302][ T9586] program syz.3.1974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.323722][ T9590] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.569011][ T9618] loop3: detected capacity change from 0 to 1024 [ 339.631248][ T9622] program syz.1.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.642646][ T9618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 339.692431][ T4297] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 339.883385][ T4297] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 339.899993][ T4297] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 339.931258][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.964568][ T4297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.991060][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.014575][ T4297] usb 5-1: Product: syz [ 340.027139][ T4297] usb 5-1: Manufacturer: syz [ 340.047122][ T4297] usb 5-1: SerialNumber: syz [ 340.787162][ T9640] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 340.989091][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 341.169880][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 341.169897][ T26] audit: type=1326 audit(1732926501.680:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.198426][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.239666][ T26] audit: type=1326 audit(1732926501.730:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.262408][ T26] audit: type=1326 audit(1732926501.730:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.288554][ T26] audit: type=1326 audit(1732926501.730:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.311465][ T26] audit: type=1326 audit(1732926501.730:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.333984][ T26] audit: type=1326 audit(1732926501.730:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.441969][ T26] audit: type=1326 audit(1732926501.730:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.555854][ T26] audit: type=1326 audit(1732926502.070:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.622212][ T26] audit: type=1326 audit(1732926502.070:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.694089][ T26] audit: type=1326 audit(1732926502.090:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0252980809 code=0x7ffc0000 [ 341.748078][ T9655] program syz.3.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.010806][ T9656] loop0: detected capacity change from 0 to 8192 [ 342.018426][ T9662] loop3: detected capacity change from 0 to 512 [ 342.077023][ T9662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.105268][ T9662] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.028850][ T9677] netlink: 'syz.3.2006': attribute type 4 has an invalid length. [ 343.398636][ T9683] loop1: detected capacity change from 0 to 2048 [ 343.492718][ T9683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 343.546265][ T9683] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.2013: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 343.597889][ T4297] usb 5-1: 0:2 : does not exist [ 343.620139][ T9683] EXT4-fs (loop1): Remounting filesystem read-only [ 343.628905][ T4297] usb 5-1: USB disconnect, device number 5 [ 343.664977][ T9688] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.2013: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 343.713191][ T9690] program syz.4.2016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.782824][ T4439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.802805][ T9688] EXT4-fs (loop1): Remounting filesystem read-only [ 343.906265][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 343.909640][ T4439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.069695][ T4439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.162148][ T4439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.163180][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 345.172583][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.183525][ T4439] tipc: Left network mode [ 345.198227][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.208302][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.218842][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.227756][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.235323][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.540157][ T9719] program syz.3.2031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.948985][ T9703] chnl_net:caif_netlink_parms(): no params data found [ 346.336531][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.347269][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.380458][ T9703] device bridge_slave_0 entered promiscuous mode [ 346.437059][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.450387][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.483395][ T9703] device bridge_slave_1 entered promiscuous mode [ 346.517971][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.534783][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.549392][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.557775][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.565493][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.580290][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.646027][ T9746] program syz.1.2041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.767596][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.824529][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.117928][ T4439] device hsr_slave_0 left promiscuous mode [ 347.129652][ T4439] device hsr_slave_1 left promiscuous mode [ 347.146088][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.161958][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.171522][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.179030][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.192141][ T4439] device bridge_slave_1 left promiscuous mode [ 347.200126][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.249456][ T4439] device bridge_slave_0 left promiscuous mode [ 347.262003][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.281978][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 347.348004][ T4439] device veth1_macvtap left promiscuous mode [ 347.367086][ T4439] device veth0_macvtap left promiscuous mode [ 347.381097][ T4439] device veth1_vlan left promiscuous mode [ 347.399472][ T4439] device veth0_vlan left promiscuous mode [ 347.412951][ T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 347.423564][ T9763] program syz.1.2050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.625133][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 347.635441][ T7] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 347.645913][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.691477][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.711400][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.720625][ T7] usb 4-1: Product: syz [ 347.731991][ T7] usb 4-1: Manufacturer: syz [ 347.747794][ T7] usb 4-1: SerialNumber: syz [ 348.099946][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 348.149648][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 348.176458][ T7] usb 4-1: 0:2 : does not exist [ 348.200941][ T7] usb 4-1: USB disconnect, device number 8 [ 348.201106][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.254136][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.433572][ T4439] team0 (unregistering): Port device batadv0 removed [ 348.469001][ T4439] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 348.647717][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 348.723337][ T4439] bond0 (unregistering): Released all slaves [ 348.806935][ T9779] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2057'. [ 348.816048][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 348.836273][ T9703] team0: Port device team_slave_0 added [ 348.861921][ T9775] netlink: 'syz.0.2055': attribute type 27 has an invalid length. [ 349.003538][ T9785] program syz.3.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.178965][ T9787] loop1: detected capacity change from 0 to 8192 [ 349.352123][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 349.728231][ T9775] device wg1 left promiscuous mode [ 350.056679][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.096955][ T9775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.223500][ T9775] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.249576][ T9775] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.258192][ T9775] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.266632][ T9775] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.341987][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 350.376969][ T9703] team0: Port device team_slave_1 added [ 350.465493][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'. [ 350.482713][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.500441][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.528025][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.538386][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 350.553089][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.560763][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.571692][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 350.593964][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.606727][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.607946][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2066'. [ 350.627568][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.629272][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 350.648909][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.658225][ T7] usb 2-1: Product: syz [ 350.665730][ T7] usb 2-1: Manufacturer: syz [ 350.670348][ T7] usb 2-1: SerialNumber: syz [ 350.712275][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 350.829954][ T9703] device hsr_slave_0 entered promiscuous mode [ 350.881430][ T9703] device hsr_slave_1 entered promiscuous mode [ 350.889892][ T9811] program syz.0.2070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.901335][ T9703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.909125][ T9703] Cannot create hsr debugfs directory [ 350.918644][ T9743] chnl_net:caif_netlink_parms(): no params data found [ 351.082083][ T7] usb 2-1: 0:2 : does not exist [ 351.199402][ T7] usb 2-1: USB disconnect, device number 5 [ 351.433002][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 351.980367][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 351.980383][ T26] audit: type=1326 audit(1732926508.890:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.031318][ T9743] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.041948][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.060372][ T9743] device bridge_slave_0 entered promiscuous mode [ 352.069379][ T9743] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.076805][ T26] audit: type=1326 audit(1732926508.940:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.099450][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.107825][ T9743] device bridge_slave_1 entered promiscuous mode [ 352.124535][ T26] audit: type=1326 audit(1732926508.960:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.157939][ T26] audit: type=1326 audit(1732926508.960:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.212737][ T26] audit: type=1326 audit(1732926508.960:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.261967][ T26] audit: type=1326 audit(1732926508.960:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.307390][ T26] audit: type=1326 audit(1732926508.960:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.330046][ T26] audit: type=1326 audit(1732926508.960:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.358106][ T26] audit: type=1326 audit(1732926508.960:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.407956][ T26] audit: type=1326 audit(1732926508.970:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 352.430752][ T9826] loop1: detected capacity change from 0 to 512 [ 352.449565][ T9743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.514182][ T9826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 352.518172][ T9743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.531924][ T9826] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.638885][ T4439] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.685471][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2076'. [ 352.723997][ T9703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.731560][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2076'. [ 352.769691][ T9703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.823136][ T4439] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.837534][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 352.896430][ T9743] team0: Port device team_slave_0 added [ 352.918042][ T9837] netlink: 'syz.1.2074': attribute type 4 has an invalid length. [ 352.927518][ T9703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.950195][ T9743] team0: Port device team_slave_1 added [ 352.990938][ T9703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.018879][ T4439] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.144853][ T4439] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.186213][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.223268][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.249640][ T9743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.278609][ T9743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.289735][ T9743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.324935][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 353.360704][ T9743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.462835][ T9743] device hsr_slave_0 entered promiscuous mode [ 353.478345][ T9743] device hsr_slave_1 entered promiscuous mode [ 353.493031][ T9743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.511929][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 353.518136][ T9743] Cannot create hsr debugfs directory [ 353.641949][ T4671] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 353.719444][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.751277][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.758665][ T4439] tipc: Left network mode [ 353.791537][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.805770][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.827733][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.837884][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.843780][ T4671] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 353.853738][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.861670][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.869198][ T4671] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 353.879728][ T4671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.891510][ T4671] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.901035][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.908633][ T4671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.917655][ T4671] usb 4-1: Product: syz [ 353.936369][ T4671] usb 4-1: Manufacturer: syz [ 353.941374][ T4671] usb 4-1: SerialNumber: syz [ 354.005818][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.015448][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.024548][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.033025][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.055573][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.066803][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.079119][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.090608][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.100049][ T9868] loop0: detected capacity change from 0 to 512 [ 354.117373][ T9868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 354.127021][ T9868] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.232302][ T9743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.334409][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.346064][ T9743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.355638][ T4671] usb 4-1: 0:2 : does not exist [ 354.364013][ T9743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.376392][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.389037][ T4671] usb 4-1: USB disconnect, device number 9 [ 354.397554][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.729314][ T9876] loop1: detected capacity change from 0 to 2048 [ 354.765409][ T9743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.774962][ T9873] netlink: 'syz.0.2091': attribute type 4 has an invalid length. [ 354.779254][ T9876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 354.808435][ T9876] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 354.811903][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.832687][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.835036][ T9876] EXT4-fs (loop1): Remounting filesystem read-only [ 354.847730][ T9703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.859648][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.895804][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 354.948412][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 355.007885][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.024733][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 355.040300][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.345528][ T4439] IPVS: stopping master sync thread 5324 ... [ 355.369632][ T9891] loop1: detected capacity change from 0 to 512 [ 355.419209][ T9891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 355.428267][ T9891] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.539667][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.551122][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.567770][ T9743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.584567][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.708820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.720263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.738573][ T9903] loop3: detected capacity change from 0 to 512 [ 355.738753][ T9743] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.775346][ T4439] device hsr_slave_0 left promiscuous mode [ 355.783820][ T4439] device hsr_slave_1 left promiscuous mode [ 355.790510][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.791004][ T9903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2099: invalid indirect mapped block 256 (level 2) [ 355.799404][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.824989][ T9903] EXT4-fs (loop3): Remounting filesystem read-only [ 355.841350][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.851123][ T9903] EXT4-fs (loop3): 2 truncates cleaned up [ 355.857071][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.864481][ T9903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 355.874191][ T4439] device bridge_slave_1 left promiscuous mode [ 355.881181][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.895369][ T4439] device bridge_slave_0 left promiscuous mode [ 355.901627][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.943090][ T4439] device veth1_macvtap left promiscuous mode [ 355.949187][ T4439] device veth0_macvtap left promiscuous mode [ 355.957062][ T4439] device veth1_vlan left promiscuous mode [ 355.957228][ T4439] device veth0_vlan left promiscuous mode [ 356.080910][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 356.121215][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 356.286315][ T9915] loop0: detected capacity change from 0 to 512 [ 356.430414][ T9915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 356.464414][ T9915] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.667049][ T4292] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 356.864253][ T4292] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 356.886657][ T4292] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 356.907160][ T4292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.941177][ T4292] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.973977][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.983571][ T4292] usb 2-1: Product: syz [ 356.987769][ T4292] usb 2-1: Manufacturer: syz [ 357.001813][ T4292] usb 2-1: SerialNumber: syz [ 357.106343][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 357.150275][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 357.250376][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.334307][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.881558][ T4439] bond0 (unregistering): Released all slaves [ 357.967021][ T9929] netlink: 'syz.0.2103': attribute type 4 has an invalid length. [ 358.029047][ T9743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.057702][ T9743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.107611][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 358.120644][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.150131][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.191466][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.198684][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.234378][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.251232][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.260477][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.267658][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.301102][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.323318][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.342627][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.359607][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.368676][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.378742][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.398338][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.416836][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.430211][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.447668][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.463022][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.478657][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.493864][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.630810][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.648125][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.673794][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.698813][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.717198][ T9703] device veth0_vlan entered promiscuous mode [ 358.736880][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.753991][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.764619][ T9703] device veth1_vlan entered promiscuous mode [ 358.821701][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.830625][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.840563][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.849309][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.860731][ T9954] loop0: detected capacity change from 0 to 128 [ 358.887277][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.894791][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.902876][ T9954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.915312][ T9954] ext4 filesystem being mounted at /453/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.916002][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.937494][ T9703] device veth0_macvtap entered promiscuous mode [ 358.949848][ T9703] device veth1_macvtap entered promiscuous mode [ 358.973791][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.999072][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.036448][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.054155][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.070490][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 359.085566][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.111214][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.127863][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.147511][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.170515][ T9961] loop0: detected capacity change from 0 to 512 [ 359.176814][ T9703] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.177882][ T9703] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.205237][ T9703] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.215532][ T9703] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.290794][ T4292] usb 2-1: 0:2 : does not exist [ 359.329576][ T9961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.332100][ T4292] usb 2-1: USB disconnect, device number 6 [ 359.344686][ T9961] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.471354][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.479776][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.505865][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.655679][ T9971] netlink: 'syz.0.2114': attribute type 4 has an invalid length. [ 359.691079][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.714281][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.723047][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2116'. [ 359.726479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.742328][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 359.761938][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 359.770882][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 359.843969][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.868905][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.891719][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'. [ 359.934056][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.947434][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.969004][ T9743] device veth0_vlan entered promiscuous mode [ 359.980254][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.074590][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.095188][ T9743] device veth1_vlan entered promiscuous mode [ 360.103756][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 360.212764][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.227221][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.249505][ T9743] device veth0_macvtap entered promiscuous mode [ 360.269360][ T9743] device veth1_macvtap entered promiscuous mode [ 360.326549][ T9743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.351624][ T9743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.368878][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.384094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.394994][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.422279][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.446820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.471181][ T9743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.520058][ T9743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.564339][ T9743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.603702][ T9989] loop0: detected capacity change from 0 to 8192 [ 360.630505][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.666532][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.688649][ T9743] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.708336][ T9989] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.720189][ T9743] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.749030][ T9743] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.785277][ T9743] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.902335][ T4671] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 361.031342][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2125'. [ 361.052110][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 361.067210][ T4706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.091832][ T4706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.105158][ T4671] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 361.127226][ T4671] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 361.148292][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.169581][ T4671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.172152][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.197759][ T4671] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.208585][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2127'. [ 361.222615][ T4671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.226982][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.245844][ T4671] usb 4-1: Product: syz [ 361.256902][ T4671] usb 4-1: Manufacturer: syz [ 361.266976][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.289163][ T4671] usb 4-1: SerialNumber: syz [ 361.436326][T10005] loop5: detected capacity change from 0 to 512 [ 361.548365][T10005] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 361.572964][T10005] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.131091][T10005] netlink: 'syz.5.2128': attribute type 4 has an invalid length. [ 362.457325][ T4398] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.510960][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2134'. [ 362.546261][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2134'. [ 362.579004][ T9703] EXT4-fs (loop5): unmounting filesystem. [ 363.306552][T10024] @ÿ: renamed from bond_slave_0 [ 363.505995][ T4398] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.539961][ T4671] usb 4-1: 0:2 : does not exist [ 363.588285][ T4671] usb 4-1: USB disconnect, device number 10 [ 363.652664][T10036] Cannot find add_set index 0 as target [ 363.663347][T10034] usb usb1: usbfs: process 10034 (syz.3.2142) did not claim interface 0 before use [ 363.699424][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 363.699439][ T26] audit: type=1326 audit(1732926515.960:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 363.802022][ T26] audit: type=1326 audit(1732926516.000:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 363.834423][ T4398] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.871567][ T26] audit: type=1326 audit(1732926516.010:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 363.895153][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.906658][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.915062][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.923072][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.932243][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 363.939580][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.968069][ T26] audit: type=1326 audit(1732926516.010:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.018005][ T4398] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.091264][ T26] audit: type=1326 audit(1732926516.010:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.139438][ T26] audit: type=1326 audit(1732926516.020:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.181892][ T26] audit: type=1326 audit(1732926516.020:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.251349][ T26] audit: type=1326 audit(1732926516.020:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.289926][ T26] audit: type=1326 audit(1732926516.020:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.315199][ T26] audit: type=1326 audit(1732926516.020:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.1.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9534d80809 code=0x7ffc0000 [ 364.449403][T10060] syz.1.2154[10060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.449509][T10060] syz.1.2154[10060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.605325][T10068] loop5: detected capacity change from 0 to 256 [ 364.702483][T10068] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.796968][ T4293] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 364.841274][T10040] chnl_net:caif_netlink_parms(): no params data found [ 364.969545][T10079] __nla_validate_parse: 2 callbacks suppressed [ 364.969565][T10079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 364.983660][ T4293] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 365.018599][ T4293] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 365.048762][ T4293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.080689][ T4293] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.110369][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.133052][ T4293] usb 4-1: Product: syz [ 365.137318][ T4293] usb 4-1: Manufacturer: syz [ 365.176484][ T4293] usb 4-1: SerialNumber: syz [ 365.230356][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.240403][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.259560][T10040] device bridge_slave_0 entered promiscuous mode [ 365.277178][T10087] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.327921][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.347205][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.366422][T10040] device bridge_slave_1 entered promiscuous mode [ 365.455193][T10089] autofs4:pid:10089:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294966781), cmd(0xc018937e) [ 365.485591][T10089] autofs4:pid:10089:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 365.489826][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.558260][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.708480][T10040] team0: Port device team_slave_0 added [ 365.778681][T10040] team0: Port device team_slave_1 added [ 365.965973][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.976412][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.003813][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 366.082238][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.122889][T10098] syz.0.2167[10098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.123072][T10098] syz.0.2167[10098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.285164][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.323468][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.376867][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.445905][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2170'. [ 366.561235][T10110] loop0: detected capacity change from 0 to 164 [ 366.588657][T10110] Unable to read rock-ridge attributes [ 366.607014][T10110] Unable to read rock-ridge attributes [ 366.628534][T10040] device hsr_slave_0 entered promiscuous mode [ 366.654491][T10040] device hsr_slave_1 entered promiscuous mode [ 366.669285][T10040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.679470][T10040] Cannot create hsr debugfs directory [ 366.715143][ T4398] device hsr_slave_0 left promiscuous mode [ 366.733101][ T4398] device hsr_slave_1 left promiscuous mode [ 366.742557][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.771883][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.800323][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.821838][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.829743][ T4398] device bridge_slave_1 left promiscuous mode [ 366.849458][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.863579][ T4398] device bridge_slave_0 left promiscuous mode [ 366.869847][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.946156][ T4398] device veth1_macvtap left promiscuous mode [ 366.956869][ T4398] device veth0_macvtap left promiscuous mode [ 366.966937][ T4398] device veth1_vlan left promiscuous mode [ 366.976935][ T4398] device veth0_vlan left promiscuous mode [ 367.260471][ T4293] usb 4-1: 0:2 : does not exist [ 367.308713][ T4293] usb 4-1: USB disconnect, device number 11 [ 367.802976][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 367.875525][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 367.944273][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.999308][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.071958][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 368.728108][ T4398] bond0 (unregistering): Released all slaves [ 369.053035][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 369.228671][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 369.320181][T10138] loop5: detected capacity change from 0 to 512 [ 369.323883][T10040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.362917][T10040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.379591][T10138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 369.392413][T10138] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.419248][T10040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.485524][T10040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.594678][ T9703] EXT4-fs (loop5): unmounting filesystem. [ 369.693672][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 369.711876][ T9859] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 369.785054][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.827197][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.850585][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.870073][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.895395][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.902065][T10152] xt_hashlimit: max too large, truncated to 1048576 [ 369.912128][ T9859] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 369.929056][ T9859] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 369.932857][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.941092][ T9859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.963692][ T9859] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.974755][ T9859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.976280][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.982998][ T9859] usb 1-1: Product: syz [ 369.989832][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.001490][ T9859] usb 1-1: Manufacturer: syz [ 370.005499][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.013602][ T9859] usb 1-1: SerialNumber: syz [ 370.043749][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.062682][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.097675][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.104929][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.122502][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.156320][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 370.162566][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.188243][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.229187][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.276212][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.297046][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.335397][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 370.335413][ T26] audit: type=1326 audit(1732926520.700:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.339859][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.342832][ T26] audit: type=1326 audit(1732926520.700:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.414761][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.430075][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 370.451875][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.465437][ T26] audit: type=1326 audit(1732926520.780:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.3.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.480702][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.518713][ T26] audit: type=1326 audit(1732926520.780:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.534908][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.584257][ T26] audit: type=1326 audit(1732926520.780:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.588545][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.658601][ T26] audit: type=1326 audit(1732926520.790:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.741697][ T26] audit: type=1326 audit(1732926520.790:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.792798][ T26] audit: type=1326 audit(1732926520.790:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.841887][ T26] audit: type=1326 audit(1732926520.790:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.892043][ T26] audit: type=1326 audit(1732926520.790:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 370.964351][T10172] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.059673][T10172] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.157137][T10172] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.249038][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.262176][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.281259][T10172] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.322887][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.437998][T10172] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.482104][T10172] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.538922][T10172] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.584910][T10172] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.877801][T10188] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 371.926465][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.946409][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.999102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.019795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.040745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.056869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.070317][T10040] device veth0_vlan entered promiscuous mode [ 372.098510][T10040] device veth1_vlan entered promiscuous mode [ 372.146859][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.158998][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 372.168522][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.178419][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.186895][T10196] 9pnet: Could not find request transport: 18446744073709551615 [ 372.198535][T10040] device veth0_macvtap entered promiscuous mode [ 372.222965][T10040] device veth1_macvtap entered promiscuous mode [ 372.232185][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 372.270472][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.303778][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.327277][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.330190][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 372.344781][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.379474][ T9859] usb 1-1: 0:2 : does not exist [ 372.406641][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.437362][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 372.449044][ T9859] usb 1-1: USB disconnect, device number 7 [ 372.462735][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.471533][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.503134][T10040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.536353][T10040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.558090][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.576984][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2207'. [ 372.608118][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.629194][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.649096][T10040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.671925][T10040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.680667][T10040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.720708][T10040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.868373][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.887312][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.933551][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.964042][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.982043][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.998566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.107496][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2136'. [ 373.132327][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2136'. [ 373.312899][T10240] syz.0.2221[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.313007][T10240] syz.0.2221[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.347739][T10240] device wireguard0 entered promiscuous mode [ 373.526109][ T4345] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 373.814959][ T4345] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 373.858960][ T4345] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 373.995583][ T4345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.142414][ T4345] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.151505][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.170147][ T4345] usb 4-1: Product: syz [ 374.174397][ T4345] usb 4-1: Manufacturer: syz [ 374.179387][ T4345] usb 4-1: SerialNumber: syz [ 374.192400][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2223'. [ 374.501431][T10267] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2230'. [ 374.591118][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2234'. [ 374.616491][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 374.790861][T10278] loop7: detected capacity change from 0 to 512 [ 374.816194][T10278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.847660][T10278] EXT4-fs (loop7): orphan cleanup on readonly fs [ 374.869467][T10278] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2237: bg 0: block 248: padding at end of block bitmap is not set [ 374.898894][T10278] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.2237: Failed to acquire dquot type 1 [ 374.931337][T10278] EXT4-fs (loop7): 1 truncate cleaned up [ 374.940949][T10278] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 374.990047][T10278] syz.7.2237 (10278) used greatest stack depth: 18816 bytes left [ 374.999365][T10040] EXT4-fs (loop7): unmounting filesystem. [ 375.226475][T10293] loop1: detected capacity change from 0 to 128 [ 376.043969][ T4345] usb 4-1: 0:2 : does not exist [ 376.066615][ T4345] usb 4-1: USB disconnect, device number 12 [ 376.251288][T10307] __nla_validate_parse: 1 callbacks suppressed [ 376.251306][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2250'. [ 376.374252][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 376.374303][ T26] audit: type=1326 audit(1732926522.780:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.491317][T10319] loop7: detected capacity change from 0 to 512 [ 376.501824][ T26] audit: type=1326 audit(1732926522.830:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.561390][T10319] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2255: inode #1: comm syz.7.2255: iget: illegal inode # [ 376.565497][ T26] audit: type=1326 audit(1732926522.830:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.612272][T10319] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2255: error while reading EA inode 1 err=-117 [ 376.625244][ T26] audit: type=1326 audit(1732926522.830:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.648582][T10319] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2255: inode #1: comm syz.7.2255: iget: illegal inode # [ 376.666223][ T26] audit: type=1326 audit(1732926522.830:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.689441][ T26] audit: type=1326 audit(1732926522.830:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.712602][T10319] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2255: error while reading EA inode 1 err=-117 [ 376.725331][ T26] audit: type=1326 audit(1732926522.830:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.748257][T10319] EXT4-fs (loop7): 1 orphan inode deleted [ 376.757288][T10319] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 376.786346][ T26] audit: type=1326 audit(1732926522.830:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.822362][ T26] audit: type=1326 audit(1732926522.830:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.845119][ T26] audit: type=1326 audit(1732926522.830:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f04380809 code=0x7ffc0000 [ 376.888855][T10040] EXT4-fs (loop7): unmounting filesystem. [ 376.973748][T10334] loop0: detected capacity change from 0 to 512 [ 376.986409][T10334] EXT4-fs: Ignoring removed orlov option [ 377.001313][T10334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.016430][T10334] EXT4-fs (loop0): orphan cleanup on readonly fs [ 377.025864][T10334] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2262: bg 0: block 248: padding at end of block bitmap is not set [ 377.042296][ T4345] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 377.046355][T10334] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.2262: Failed to acquire dquot type 1 [ 377.070564][T10334] EXT4-fs (loop0): 1 truncate cleaned up [ 377.084879][T10334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 377.125678][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2264'. [ 377.140643][T10334] EXT4-fs: Ignoring removed orlov option [ 377.146564][T10334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.156027][T10334] EXT4-fs error (device loop0): __ext4_remount:6449: comm syz.0.2262: Abort forced by user [ 377.228875][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 377.242018][ T4345] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 377.257216][ T4345] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 377.281138][ T4345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.321372][ T4345] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.322161][T10351] loop7: detected capacity change from 0 to 512 [ 377.345355][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.356410][ T4345] usb 2-1: Product: syz [ 377.356694][T10351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.360935][ T4345] usb 2-1: Manufacturer: syz [ 377.377115][ T4345] usb 2-1: SerialNumber: syz [ 377.408950][T10351] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 377.427572][T10351] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.676745][T10040] EXT4-fs (loop7): unmounting filesystem. [ 377.809277][T10354] loop3: detected capacity change from 0 to 512 [ 377.859954][T10354] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2269: bg 0: block 248: padding at end of block bitmap is not set [ 377.875152][T10354] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.2269: Failed to acquire dquot type 1 [ 377.890335][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2276'. [ 377.908099][T10354] EXT4-fs (loop3): 1 truncate cleaned up [ 377.923332][T10354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.944738][T10354] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.037749][T10378] syz.7.2279[10378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.037893][T10378] syz.7.2279[10378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.342501][T10386] loop5: detected capacity change from 0 to 128 [ 378.390843][T10391] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.401394][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.401439][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.419012][T10386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.426382][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 378.434169][T10386] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.600509][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 378.635990][T10395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2286'. [ 378.767118][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2290'. [ 378.903299][ T9703] EXT4-fs (loop5): unmounting filesystem. [ 379.313032][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2303'. [ 379.429859][T10431] loop7: detected capacity change from 0 to 512 [ 379.494650][T10431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 379.509407][T10431] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.709231][ T4345] usb 2-1: 0:2 : does not exist [ 379.722967][ T4345] usb 2-1: USB disconnect, device number 7 [ 379.830159][T10452] netlink: 'syz.7.2305': attribute type 4 has an invalid length. [ 380.531313][T10040] EXT4-fs (loop7): unmounting filesystem. [ 380.647551][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2317'. [ 380.667490][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2318'. [ 380.682602][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2318'. [ 380.837613][T10467] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.911921][T10476] loop1: detected capacity change from 0 to 4096 [ 380.948980][T10476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 380.963871][T10476] EXT4-fs (loop1): unmounting filesystem. [ 381.008380][T10467] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.012710][T10483] syz.5.2323[10483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.024920][T10483] syz.5.2323[10483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.068438][T10477] device syzkaller1 entered promiscuous mode [ 381.174862][T10491] loop0: detected capacity change from 0 to 1024 [ 381.183727][T10491] ext2: Unknown parameter 'noacl' [ 381.186455][T10467] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.216896][ T4345] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 381.230434][ T4345] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 381.309460][T10467] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.314492][T10495] loop0: detected capacity change from 0 to 512 [ 381.348934][T10495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 381.349742][T10497] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 381.362495][T10495] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.440274][T10467] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.450809][T10501] netlink: 'syz.1.2329': attribute type 1 has an invalid length. [ 381.485646][T10467] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.581497][T10467] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.620366][T10467] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.792400][T10508] __nla_validate_parse: 1 callbacks suppressed [ 381.792441][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2331'. [ 381.839419][T10511] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 382.035372][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2333'. [ 382.211544][ T26] kauditd_printk_skb: 185 callbacks suppressed [ 382.211561][ T26] audit: type=1326 audit(1732926527.400:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.237004][T10519] loop5: detected capacity change from 0 to 512 [ 382.292091][ T26] audit: type=1326 audit(1732926527.400:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.343801][T10519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 382.359264][T10519] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.401874][ T26] audit: type=1326 audit(1732926527.410:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.411918][ T4293] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 382.426193][T10528] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 382.464731][ T26] audit: type=1326 audit(1732926527.410:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.491864][ T26] audit: type=1326 audit(1732926527.410:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.521271][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 382.568236][ T26] audit: type=1326 audit(1732926527.410:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.607137][ T26] audit: type=1326 audit(1732926527.410:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.611852][ T4293] usb 8-1: Using ep0 maxpacket: 16 [ 382.633747][ T26] audit: type=1326 audit(1732926527.410:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f661d180809 code=0x7ffc0000 [ 382.665227][ T9703] EXT4-fs (loop5): unmounting filesystem. [ 382.678637][ T4293] usb 8-1: config 0 has no interfaces? [ 382.684183][ T26] audit: type=1326 audit(1732926527.410:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f661d180843 code=0x7ffc0000 [ 382.715791][T10535] loop0: detected capacity change from 0 to 128 [ 382.722328][ T26] audit: type=1326 audit(1732926527.410:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.5.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f661d17f2bf code=0x7ffc0000 [ 382.775763][ T4293] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 382.788129][ T4293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.797256][T10539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 382.817396][ T4293] usb 8-1: Product: syz [ 382.820035][T10535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 382.822284][ T4293] usb 8-1: Manufacturer: syz [ 382.841087][T10535] ext4 filesystem being mounted at /514/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.863744][T10535] ------------[ cut here ]------------ [ 382.869224][T10535] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 382.882863][T10535] WARNING: CPU: 0 PID: 10535 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 382.892880][T10535] Modules linked in: [ 382.896827][T10535] CPU: 0 PID: 10535 Comm: syz.0.2341 Not tainted 6.1.119-syzkaller #0 [ 382.905000][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.915073][T10535] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 382.920725][T10542] syz.3.2346[10542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.920809][T10535] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 382.920901][T10542] syz.3.2346[10542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.932183][T10535] RSP: 0018:ffffc90005cb75b0 EFLAGS: 00010046 [ 382.932206][T10535] RAX: 3e73978220a81400 RBX: ffffffff90c6f2e0 RCX: 0000000000080000 [ 382.932219][T10535] RDX: ffffc9000589a000 RSI: 0000000000006946 RDI: 0000000000006947 [ 382.932232][T10535] RBP: ffffc90005cb76b0 R08: ffffffff8152b88e R09: fffff52000b96e15 [ 382.932246][T10535] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 382.932259][T10535] R13: 1ffff92000b96ec4 R14: ffff8880747852c8 R15: ffffffff974dff41 [ 382.932274][T10535] FS: 00007f55ab7c86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 382.932295][T10535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.932309][T10535] CR2: 0000001b2d60eff8 CR3: 000000007e733000 CR4: 00000000003506f0 [ 382.932325][T10535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.932337][T10535] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.932350][T10535] Call Trace: [ 382.932356][T10535] [ 382.932363][T10535] ? __warn+0x15a/0x520 [ 382.932388][T10535] ? look_up_lock_class+0xc2/0x140 [ 382.932411][T10535] ? report_bug+0x2af/0x500 [ 382.932438][T10535] ? look_up_lock_class+0xc2/0x140 [ 382.932460][T10535] ? handle_bug+0x3d/0x70 [ 382.932487][T10535] ? exc_invalid_op+0x16/0x40 [ 382.932515][T10535] ? asm_exc_invalid_op+0x16/0x20 [ 382.932546][T10535] ? __warn_printk+0x28e/0x350 [ 382.932570][T10535] ? look_up_lock_class+0xc2/0x140 [ 382.932593][T10535] register_lock_class+0x100/0x990 [ 382.932624][T10535] ? __ext4_iget+0x2d00/0x3ee0 [ 382.932649][T10535] ? is_dynamic_key+0x260/0x260 [ 382.932677][T10535] ? mark_lock+0x9a/0x340 [ 382.932710][T10535] __lock_acquire+0xd3/0x1f80 [ 382.932747][T10535] lock_acquire+0x1f8/0x5a0 [ 382.932775][T10535] ? ext4_ioctl+0x460f/0x5f60 [ 382.932806][T10535] ? read_lock_is_recursive+0x10/0x10 [ 382.932837][T10535] ? __might_sleep+0xb0/0xb0 [ 382.932854][T10535] ? rwsem_write_trylock+0x166/0x210 [ 382.932882][T10535] ? clear_nonspinnable+0x60/0x60 [ 382.932912][T10535] down_write_nested+0x39/0x60 [ 382.932936][T10535] ? ext4_ioctl+0x460f/0x5f60 [ 382.932962][T10535] ext4_ioctl+0x460f/0x5f60 [ 382.932988][T10535] ? kasan_set_track+0x4b/0x70 [ 382.933024][T10535] ? ext4_fileattr_set+0x1770/0x1770 [ 382.933059][T10535] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 382.933078][T10535] ? __x64_compat_sys_ioctl+0x80/0x80 [ 382.933097][T10535] ? __lock_acquire+0x1f80/0x1f80 [ 382.933124][T10535] ? lockdep_hardirqs_on+0x94/0x130 [ 382.933147][T10535] ? __kmem_cache_free+0x25c/0x3c0 [ 382.933172][T10535] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 382.933207][T10535] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 382.933237][T10535] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 382.933267][T10535] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 382.933317][T10535] ? __fget_files+0x28/0x4a0 [ 382.933345][T10535] ? __fget_files+0x28/0x4a0 [ 382.933364][T10535] ? __fget_files+0x435/0x4a0 [ 382.933383][T10535] ? __fget_files+0x28/0x4a0 [ 383.241628][T10535] ? bpf_lsm_file_ioctl+0x5/0x10 [ 383.246652][T10535] ? security_file_ioctl+0x7d/0xa0 [ 383.251767][T10535] ? ext4_fileattr_set+0x1770/0x1770 [ 383.257069][T10535] __se_sys_ioctl+0xf1/0x160 [ 383.261663][T10535] do_syscall_64+0x3b/0xb0 [ 383.266090][T10535] ? clear_bhb_loop+0x45/0xa0 [ 383.270816][T10535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.276733][T10535] RIP: 0033:0x7f55aa980809 [ 383.281180][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.300793][T10535] RSP: 002b:00007f55ab7c8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.309223][T10535] RAX: ffffffffffffffda RBX: 00007f55aab45fa0 RCX: 00007f55aa980809 [ 383.317198][T10535] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000006 [ 383.325175][T10535] RBP: 00007f55aa9f393e R08: 0000000000000000 R09: 0000000000000000 [ 383.333148][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.341129][T10535] R13: 0000000000000000 R14: 00007f55aab45fa0 R15: 00007fff651f8578 [ 383.349119][T10535] [ 383.352147][T10535] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.359444][T10535] CPU: 0 PID: 10535 Comm: syz.0.2341 Not tainted 6.1.119-syzkaller #0 [ 383.367596][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.377658][T10535] Call Trace: [ 383.380940][T10535] [ 383.383870][T10535] dump_stack_lvl+0x1e3/0x2cb [ 383.388562][T10535] ? nf_tcp_handle_invalid+0x642/0x642 [ 383.394032][T10535] ? panic+0x764/0x764 [ 383.398100][T10535] ? vscnprintf+0x59/0x80 [ 383.402436][T10535] panic+0x318/0x764 [ 383.406353][T10535] ? __warn+0x169/0x520 [ 383.410526][T10535] ? memcpy_page_flushcache+0xfc/0xfc [ 383.415909][T10535] __warn+0x348/0x520 [ 383.419885][T10535] ? look_up_lock_class+0xc2/0x140 [ 383.424991][T10535] report_bug+0x2af/0x500 [ 383.429327][T10535] ? look_up_lock_class+0xc2/0x140 [ 383.434438][T10535] handle_bug+0x3d/0x70 [ 383.438602][T10535] exc_invalid_op+0x16/0x40 [ 383.443129][T10535] asm_exc_invalid_op+0x16/0x20 [ 383.447997][T10535] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 383.453721][T10535] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 383.473473][T10535] RSP: 0018:ffffc90005cb75b0 EFLAGS: 00010046 [ 383.479546][T10535] RAX: 3e73978220a81400 RBX: ffffffff90c6f2e0 RCX: 0000000000080000 [ 383.487523][T10535] RDX: ffffc9000589a000 RSI: 0000000000006946 RDI: 0000000000006947 [ 383.495497][T10535] RBP: ffffc90005cb76b0 R08: ffffffff8152b88e R09: fffff52000b96e15 [ 383.503469][T10535] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 383.511459][T10535] R13: 1ffff92000b96ec4 R14: ffff8880747852c8 R15: ffffffff974dff41 [ 383.519510][T10535] ? __warn_printk+0x28e/0x350 [ 383.524296][T10535] register_lock_class+0x100/0x990 [ 383.529423][T10535] ? __ext4_iget+0x2d00/0x3ee0 [ 383.534221][T10535] ? is_dynamic_key+0x260/0x260 [ 383.539091][T10535] ? mark_lock+0x9a/0x340 [ 383.543444][T10535] __lock_acquire+0xd3/0x1f80 [ 383.548132][T10535] lock_acquire+0x1f8/0x5a0 [ 383.552636][T10535] ? ext4_ioctl+0x460f/0x5f60 [ 383.557321][T10535] ? read_lock_is_recursive+0x10/0x10 [ 383.562699][T10535] ? __might_sleep+0xb0/0xb0 [ 383.567297][T10535] ? rwsem_write_trylock+0x166/0x210 [ 383.572587][T10535] ? clear_nonspinnable+0x60/0x60 [ 383.577704][T10535] down_write_nested+0x39/0x60 [ 383.582475][T10535] ? ext4_ioctl+0x460f/0x5f60 [ 383.587162][T10535] ext4_ioctl+0x460f/0x5f60 [ 383.591669][T10535] ? kasan_set_track+0x4b/0x70 [ 383.596442][T10535] ? ext4_fileattr_set+0x1770/0x1770 [ 383.601735][T10535] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 383.606604][T10535] ? __x64_compat_sys_ioctl+0x80/0x80 [ 383.611969][T10535] ? __lock_acquire+0x1f80/0x1f80 [ 383.616997][T10535] ? lockdep_hardirqs_on+0x94/0x130 [ 383.622196][T10535] ? __kmem_cache_free+0x25c/0x3c0 [ 383.627339][T10535] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 383.632986][T10535] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 383.638622][T10535] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 383.644259][T10535] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 383.649877][T10535] ? __fget_files+0x28/0x4a0 [ 383.654467][T10535] ? __fget_files+0x28/0x4a0 [ 383.659054][T10535] ? __fget_files+0x435/0x4a0 [ 383.663728][T10535] ? __fget_files+0x28/0x4a0 [ 383.668315][T10535] ? bpf_lsm_file_ioctl+0x5/0x10 [ 383.673255][T10535] ? security_file_ioctl+0x7d/0xa0 [ 383.678359][T10535] ? ext4_fileattr_set+0x1770/0x1770 [ 383.683649][T10535] __se_sys_ioctl+0xf1/0x160 [ 383.688240][T10535] do_syscall_64+0x3b/0xb0 [ 383.692656][T10535] ? clear_bhb_loop+0x45/0xa0 [ 383.697362][T10535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.703263][T10535] RIP: 0033:0x7f55aa980809 [ 383.707675][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.727280][T10535] RSP: 002b:00007f55ab7c8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.735689][T10535] RAX: ffffffffffffffda RBX: 00007f55aab45fa0 RCX: 00007f55aa980809 [ 383.743654][T10535] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000006 [ 383.751627][T10535] RBP: 00007f55aa9f393e R08: 0000000000000000 R09: 0000000000000000 [ 383.759588][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.767554][T10535] R13: 0000000000000000 R14: 00007f55aab45fa0 R15: 00007fff651f8578 [ 383.775530][T10535] [ 383.778895][T10535] Kernel Offset: disabled [ 383.783222][T10535] Rebooting in 86400 seconds..