last executing test programs: 2m18.208063855s ago: executing program 0 (id=70): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f0000000040), &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = io_uring_setup(0x725, &(0x7f00000004c0)={0x0, 0xafd5, 0x8000, 0x0, 0x20c}) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0xa27, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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") r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r9], 0x1c}}, 0x804) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x154e, 0x0, 0x41, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10, r4, 0x8000000) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 2m17.046524389s ago: executing program 0 (id=79): r0 = getpid() syz_pidfd_open(r0, 0x0) 2m16.833924857s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x54a5, 0x1) 2m15.249202746s ago: executing program 0 (id=92): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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") openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 2m14.693907621s ago: executing program 0 (id=91): r0 = getpid() syz_pidfd_open(r0, 0x0) 2m12.455279062s ago: executing program 0 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280060011004e200000080004003c120000140003"], 0x58}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)='.\xbb.\x85\xd3\xf4y\x00', r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m12.111494611s ago: executing program 32 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280060011004e200000080004003c120000140003"], 0x58}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)='.\xbb.\x85\xd3\xf4y\x00', r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m10.815347696s ago: executing program 3 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2m10.27597207s ago: executing program 3 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @raw32={[0x3, 0x7]}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) 2m10.095445525s ago: executing program 3 (id=112): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000540)=ANY=[], 0x4) 2m9.850639634s ago: executing program 3 (id=113): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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") openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 2m9.276841661s ago: executing program 3 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8090) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000240)={0xb, 0x0, '\x00', 0x1, 0x0}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 2m8.146902883s ago: executing program 3 (id=115): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x840) 2m7.81093604s ago: executing program 33 (id=115): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x840) 1m56.204358613s ago: executing program 4 (id=103): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 1m55.913139497s ago: executing program 4 (id=139): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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") r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) 1m55.01967196s ago: executing program 4 (id=141): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, 0x0, 0x4) 1m53.606993755s ago: executing program 4 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) eventfd2(0x9, 0x800) 1m53.191629048s ago: executing program 34 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) eventfd2(0x9, 0x800) 1m9.641498459s ago: executing program 1 (id=372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x54a5, 0x1) 1m9.13250757s ago: executing program 1 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, 0x0, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m8.608823293s ago: executing program 1 (id=379): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}}, 0x32) 1m8.387263391s ago: executing program 1 (id=381): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4008040) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000340)}, 0x8000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3029127, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@dax_never}, {@debug}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) 1m7.975477514s ago: executing program 1 (id=383): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f1, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m5.987885516s ago: executing program 1 (id=394): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0x40505331, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) 1m5.329573629s ago: executing program 35 (id=394): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0x40505331, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) 25.024810955s ago: executing program 6 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a85000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) 24.824974132s ago: executing program 6 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 24.659240845s ago: executing program 6 (id=757): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 24.443184473s ago: executing program 6 (id=760): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES16=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200000000000022e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000ff090000000000005509010000000000950000000000e7ffbf91000000000000b702000001000000850000008500717486e5b56f7583520000b70000000000000099000000000000009aa599ee26ad6139"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x9c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf251000000005000f00060000000600110041030000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006861736800000000140002800800074000000001080002400000000e0900010073797a3000000000090002000000000000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 18.437618981s ago: executing program 5 (id=823): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2, 0x4, 0x9, 0x3, 0x7, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0xfffffbff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}]}, 0x38}}, 0x800) 18.182673922s ago: executing program 5 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, &(0x7f00000004c0)}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 17.95199888s ago: executing program 5 (id=830): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 17.8374347s ago: executing program 7 (id=832): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x54a5, 0x1) 17.737648418s ago: executing program 5 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 17.650982365s ago: executing program 7 (id=834): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010012000000010000001a0000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) 17.400911445s ago: executing program 7 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.399911695s ago: executing program 5 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getpid() preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x33, 0x0) 17.315359782s ago: executing program 2 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, &(0x7f00000004c0)}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 17.136476716s ago: executing program 5 (id=839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000"], 0x254}}, 0x40858) 17.062395533s ago: executing program 2 (id=840): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) chmod(0x0, 0x40) 17.036878375s ago: executing program 7 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 16.891240786s ago: executing program 2 (id=842): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x54a5, 0x1) 16.804994543s ago: executing program 2 (id=843): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 16.675404164s ago: executing program 2 (id=844): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 16.499423109s ago: executing program 2 (id=845): unshare(0x20060400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 15.98621987s ago: executing program 7 (id=846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) 15.86456944s ago: executing program 6 (id=847): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15.607427311s ago: executing program 7 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 15.599702112s ago: executing program 6 (id=849): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 1.747265907s ago: executing program 36 (id=839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000"], 0x254}}, 0x40858) 1.142318457s ago: executing program 37 (id=845): unshare(0x20060400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 64.102254ms ago: executing program 38 (id=849): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 0s ago: executing program 39 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) kernel console output (not intermixed with test programs): 14][ T6412] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.276769][ T6412] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.320547][ T60] hsr_slave_0: left promiscuous mode [ 112.327300][ T60] hsr_slave_1: left promiscuous mode [ 112.333318][ T60] bridge_slave_1: left allmulticast mode [ 112.339973][ T60] bridge_slave_1: left promiscuous mode [ 112.345695][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.356153][ T60] bridge_slave_0: left allmulticast mode [ 112.362065][ T60] bridge_slave_0: left promiscuous mode [ 112.368333][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.381655][ T60] hsr_slave_0: left promiscuous mode [ 112.388566][ T60] hsr_slave_1: left promiscuous mode [ 112.394589][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.402466][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.411549][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.419348][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.429761][ T60] bridge_slave_1: left allmulticast mode [ 112.435443][ T60] bridge_slave_1: left promiscuous mode [ 112.441635][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.452553][ T60] bridge_slave_0: left allmulticast mode [ 112.459917][ T60] bridge_slave_0: left promiscuous mode [ 112.465653][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.490441][ T60] veth1_macvtap: left promiscuous mode [ 112.496010][ T60] veth0_macvtap: left promiscuous mode [ 112.502309][ T60] veth1_vlan: left promiscuous mode [ 112.508735][ T60] veth0_vlan: left promiscuous mode [ 112.941453][ T60] team0 (unregistering): Port device team_slave_1 removed [ 112.976701][ T60] team0 (unregistering): Port device team_slave_0 removed [ 112.977004][ T5798] Bluetooth: hci0: command tx timeout [ 113.013395][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.048552][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.374715][ T60] bond0 (unregistering): Released all slaves [ 113.729225][ T60] team0 (unregistering): Port device team_slave_1 removed [ 113.762653][ T60] team0 (unregistering): Port device team_slave_0 removed [ 113.795262][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.832223][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.186034][ T60] bond0 (unregistering): Released all slaves [ 114.288379][ T6346] veth1_vlan: entered promiscuous mode [ 114.412608][ T6346] veth0_macvtap: entered promiscuous mode [ 114.453040][ T6346] veth1_macvtap: entered promiscuous mode [ 114.523982][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.576574][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.600671][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.687357][ T6346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.696098][ T6346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.721519][ T6346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.730359][ T6346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.780575][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.843950][ T2109] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.851173][ T2109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.878888][ T2109] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.886038][ T2109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.994254][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.003292][ T6586] loop2: detected capacity change from 0 to 164 [ 115.065730][ T6586] ISOFS: unable to read i-node block [ 115.077522][ T6586] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 115.205311][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.244725][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.280744][ T6377] veth0_vlan: entered promiscuous mode [ 115.290819][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 115.290832][ T28] audit: type=1326 audit(1756582646.083:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.372426][ T28] audit: type=1326 audit(1756582646.083:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.402648][ T6377] veth1_vlan: entered promiscuous mode [ 115.427575][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.435460][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.519099][ T28] audit: type=1326 audit(1756582646.093:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.581383][ T28] audit: type=1326 audit(1756582646.093:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.634223][ T6377] veth0_macvtap: entered promiscuous mode [ 115.661455][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 115.678347][ T28] audit: type=1326 audit(1756582646.093:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.697412][ T6377] veth1_macvtap: entered promiscuous mode [ 115.716658][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 115.732138][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.766317][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.774144][ T28] audit: type=1326 audit(1756582646.093:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.816418][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.820265][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.859064][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.866985][ T28] audit: type=1326 audit(1756582646.093:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.869132][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.891552][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.940953][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.951773][ T28] audit: type=1326 audit(1756582646.093:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 115.975406][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 115.989730][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.004391][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.013289][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.034176][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.042882][ T28] audit: type=1326 audit(1756582646.093:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 116.058665][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.075884][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.095972][ T28] audit: type=1326 audit(1756582646.093:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 116.125663][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.147107][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.152567][ T6377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.165018][ T6377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.168061][ T6605] loop4: detected capacity change from 0 to 512 [ 116.181558][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.190351][ T6377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.198540][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.201370][ T6377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.228794][ T787] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 116.270547][ T787] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 116.287677][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.308290][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.358869][ T6605] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.489968][ T6608] fido_id[6608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.623986][ T6614] loop2: detected capacity change from 0 to 128 [ 116.655120][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.740350][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.841223][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.861113][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.949919][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 116.990826][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.031813][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.062468][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.120126][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.213205][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.254003][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.316036][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.332943][ T6412] veth0_vlan: entered promiscuous mode [ 117.355585][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.371884][ T6412] veth1_vlan: entered promiscuous mode [ 117.393273][ T6637] loop2: detected capacity change from 0 to 164 [ 117.408981][ T6346] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 117.449566][ T6637] ISOFS: unable to read i-node block [ 117.454944][ T6637] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 117.511337][ T6412] veth0_macvtap: entered promiscuous mode [ 117.564443][ T6412] veth1_macvtap: entered promiscuous mode [ 117.648486][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.688049][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.709997][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.759613][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.807738][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.959377][ T6652] loop2: detected capacity change from 0 to 512 [ 117.979141][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.011150][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.014163][ T6653] loop1: detected capacity change from 0 to 128 [ 118.024674][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.046171][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.080788][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.085529][ T6652] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.118347][ T6653] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.119301][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.151451][ T6653] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.167052][ T6412] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.198747][ T6412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.213999][ T6412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.225186][ T6412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.233526][ T6346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.433017][ T2109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.569243][ T2109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.667770][ T2109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.772363][ T2109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.852309][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.862779][ T6377] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.966317][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.974190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.060373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.088742][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.360846][ T6674] loop2: detected capacity change from 0 to 164 [ 119.432355][ T6676] loop1: detected capacity change from 0 to 1024 [ 119.439239][ T6674] ISOFS: unable to read i-node block [ 119.444632][ T6674] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 119.449991][ T6676] EXT4-fs: Ignoring removed orlov option [ 119.493172][ T6676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.538104][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.678021][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.687054][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.702758][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.712354][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.720172][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.735862][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.756568][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.883948][ T6690] loop5: detected capacity change from 0 to 512 [ 119.962537][ T6692] loop2: detected capacity change from 0 to 128 [ 120.009825][ T6692] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.031724][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.070138][ T6692] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.096582][ T6690] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.490895][ T6690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.651864][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.909265][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 121.691802][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.776329][ T5789] Bluetooth: hci2: command tx timeout [ 122.029527][ T6731] loop2: detected capacity change from 0 to 8192 [ 122.102697][ T6741] loop1: detected capacity change from 0 to 164 [ 122.118251][ T6741] ISOFS: unable to read i-node block [ 122.123773][ T6741] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 122.164283][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 122.164298][ T28] audit: type=1800 audit(1756582652.953:348): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="file2" dev="loop2" ino=1048620 res=0 errno=0 [ 122.219823][ T6739] tipc: Started in network mode [ 122.236969][ T6739] tipc: Node identity 5ad8721bf9a4, cluster identity 4711 [ 122.247627][ T6739] tipc: Enabled bearer , priority 0 [ 122.285594][ T6735] tipc: Resetting bearer [ 122.382139][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 122.493660][ T6734] tipc: Disabling bearer [ 122.518522][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.530840][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.540151][ T6686] bridge_slave_0: entered allmulticast mode [ 122.547768][ T6686] bridge_slave_0: entered promiscuous mode [ 122.558198][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.565459][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.573138][ T6686] bridge_slave_1: entered allmulticast mode [ 122.580848][ T6686] bridge_slave_1: entered promiscuous mode [ 122.710683][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.170'. [ 122.792873][ T2109] hsr_slave_0: left promiscuous mode [ 122.827511][ T2109] hsr_slave_1: left promiscuous mode [ 122.842038][ T2109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.862949][ T2109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.899110][ T2109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.914644][ T2109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.943412][ T2109] bridge_slave_1: left allmulticast mode [ 122.963737][ T2109] bridge_slave_1: left promiscuous mode [ 122.973508][ T6758] loop5: detected capacity change from 0 to 128 [ 122.976420][ T2109] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.026380][ T2109] bridge_slave_0: left allmulticast mode [ 123.030056][ T6758] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.034385][ T2109] bridge_slave_0: left promiscuous mode [ 123.054787][ T2109] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.087681][ T2109] veth1_macvtap: left promiscuous mode [ 123.093303][ T2109] veth0_macvtap: left promiscuous mode [ 123.097322][ T6758] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.172406][ T2109] veth1_vlan: left promiscuous mode [ 123.182504][ T2109] veth0_vlan: left promiscuous mode [ 123.856929][ T5789] Bluetooth: hci2: command tx timeout [ 124.765958][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 124.871204][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.066008][ T28] audit: type=1326 audit(1756582655.853:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.090305][ T28] audit: type=1326 audit(1756582655.853:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.116142][ T28] audit: type=1326 audit(1756582655.853:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.151925][ T28] audit: type=1326 audit(1756582655.853:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.188529][ T28] audit: type=1326 audit(1756582655.853:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.212209][ T28] audit: type=1326 audit(1756582655.853:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.235471][ T28] audit: type=1326 audit(1756582655.853:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.258326][ T28] audit: type=1326 audit(1756582655.853:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.290432][ T28] audit: type=1326 audit(1756582655.853:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 125.956436][ T5789] Bluetooth: hci2: command tx timeout [ 126.194977][ T2109] team0 (unregistering): Port device team_slave_1 removed [ 126.233052][ T2109] team0 (unregistering): Port device team_slave_0 removed [ 126.267490][ T2109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.304012][ T2109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.662357][ T2109] bond0 (unregistering): Released all slaves [ 126.724639][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.758350][ T6800] veth0_to_team: entered promiscuous mode [ 126.774435][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 126.808659][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.945377][ T6686] team0: Port device team_slave_0 added [ 126.964220][ T6686] team0: Port device team_slave_1 added [ 127.036039][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.053468][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.091529][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.106888][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.114063][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.163191][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.333753][ T6686] hsr_slave_0: entered promiscuous mode [ 127.348978][ T6686] hsr_slave_1: entered promiscuous mode [ 127.371909][ T6822] loop1: detected capacity change from 0 to 128 [ 127.423580][ T6822] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.460391][ T6827] tipc: Enabled bearer , priority 0 [ 127.460785][ T6822] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.547599][ T6823] tipc: Resetting bearer [ 127.616687][ T6821] tipc: Disabling bearer [ 127.969604][ T6686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.994618][ T6686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.016612][ T5789] Bluetooth: hci2: command tx timeout [ 128.025949][ T6686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.159635][ T6686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.176070][ T6845] loop2: detected capacity change from 0 to 1024 [ 128.185914][ T6845] EXT4-fs: Ignoring removed orlov option [ 128.191761][ T6845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.281584][ T6845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.425091][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.441855][ T6377] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.537411][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.193'. [ 128.767891][ T6869] tipc: Enabled bearer , priority 0 [ 128.801481][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.815004][ T6869] tipc: Resetting bearer [ 128.838429][ T6867] tipc: Disabling bearer [ 128.870982][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.901100][ T2109] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.908267][ T2109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.964360][ T2109] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.971564][ T2109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.361831][ T6892] loop1: detected capacity change from 0 to 128 [ 129.371897][ T6890] loop2: detected capacity change from 0 to 1024 [ 129.425244][ T6890] EXT4-fs: Ignoring removed orlov option [ 129.435011][ T6892] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.499048][ T6890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.529541][ T6892] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.625823][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.725006][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.811999][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.156140][ T6916] loop5: detected capacity change from 0 to 2048 [ 130.171498][ T6918] tipc: Enabled bearer , priority 0 [ 130.204677][ T6916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.204895][ T6918] tipc: Resetting bearer [ 130.319588][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 130.319602][ T28] audit: type=1800 audit(1756582661.103:377): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.207" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 130.357906][ T6917] tipc: Disabling bearer [ 130.441481][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.784500][ T6686] veth0_vlan: entered promiscuous mode [ 130.827311][ T6377] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.838040][ T6686] veth1_vlan: entered promiscuous mode [ 130.944933][ T6686] veth0_macvtap: entered promiscuous mode [ 130.983971][ T6686] veth1_macvtap: entered promiscuous mode [ 131.062849][ T6946] loop5: detected capacity change from 0 to 1024 [ 131.066167][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.081056][ T6946] EXT4-fs: Ignoring removed orlov option [ 131.109121][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.120012][ T6946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.158653][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.199326][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.206237][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.272381][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.314749][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.330624][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.340879][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.358113][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.386145][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.410260][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 131.441654][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.486626][ T6686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.513017][ T6686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.534616][ T6686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.577407][ T6686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.743795][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.772293][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.815567][ T6970] loop1: detected capacity change from 0 to 128 [ 131.832738][ T6969] tipc: Enabled bearer , priority 0 [ 131.855060][ T6969] tipc: Resetting bearer [ 131.877517][ T6967] tipc: Disabling bearer [ 131.880696][ T6970] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.899859][ T6970] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.954230][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.982156][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.316065][ T6986] loop6: detected capacity change from 0 to 128 [ 132.822354][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829397][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.314500][ T6994] blk-mq: failed to allocate request map [ 133.591767][ T7000] loop5: detected capacity change from 0 to 1024 [ 133.619267][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.225'. [ 133.639614][ T7000] EXT4-fs: Ignoring removed orlov option [ 133.645305][ T7000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.714576][ T7000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.785996][ T6377] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.978269][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.045115][ T7015] tipc: Started in network mode [ 134.076508][ T7015] tipc: Node identity 022a93a2a87c, cluster identity 4711 [ 134.083830][ T7015] tipc: Enabled bearer , priority 0 [ 134.125109][ T7015] tipc: Resetting bearer [ 134.151856][ T7012] tipc: Disabling bearer [ 134.160152][ T28] audit: type=1326 audit(1756582664.953:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.224420][ T28] audit: type=1326 audit(1756582664.953:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.306314][ T28] audit: type=1326 audit(1756582664.963:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.406365][ T28] audit: type=1326 audit(1756582664.963:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.494402][ T7036] loop1: detected capacity change from 0 to 128 [ 134.545379][ T28] audit: type=1326 audit(1756582664.963:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.642940][ T28] audit: type=1326 audit(1756582664.963:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.666537][ T28] audit: type=1326 audit(1756582664.963:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.700067][ T28] audit: type=1326 audit(1756582664.963:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 134.725795][ T28] audit: type=1326 audit(1756582664.963:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.399859][ T28] audit: type=1326 audit(1756582664.963:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.432852][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.236'. [ 135.498525][ T28] audit: type=1326 audit(1756582664.963:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.532589][ T28] audit: type=1326 audit(1756582664.963:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.533209][ T7042] loop5: detected capacity change from 0 to 128 [ 135.571152][ T28] audit: type=1326 audit(1756582664.963:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.659861][ T7042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.666725][ T28] audit: type=1326 audit(1756582664.963:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.702361][ T7042] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.842546][ T7051] loop1: detected capacity change from 0 to 1024 [ 135.858342][ T28] audit: type=1326 audit(1756582664.983:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.865049][ T7051] EXT4-fs: Ignoring removed orlov option [ 135.935480][ T28] audit: type=1326 audit(1756582664.993:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 135.986413][ T7051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.014118][ T28] audit: type=1326 audit(1756582664.993:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 136.070207][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.086302][ T28] audit: type=1326 audit(1756582664.993:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 136.145484][ T28] audit: type=1326 audit(1756582664.993:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 136.333139][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.201354][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.371991][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.411455][ T7074] bond_slave_0: entered promiscuous mode [ 137.414485][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.244'. [ 137.417516][ T7074] bond_slave_1: entered promiscuous mode [ 137.418756][ T7074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.444923][ T7074] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 137.735255][ T7094] loop5: detected capacity change from 0 to 128 [ 137.831600][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 138.897088][ T7109] loop2: detected capacity change from 0 to 128 [ 138.936148][ T7109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.036399][ T7109] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.300404][ T7116] loop1: detected capacity change from 0 to 256 [ 140.540513][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'. [ 140.789256][ T7146] loop5: detected capacity change from 0 to 128 [ 140.886035][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.887561][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 140.887576][ T28] audit: type=1326 audit(1756582671.683:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 140.934980][ T28] audit: type=1326 audit(1756582671.723:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 140.972267][ T28] audit: type=1326 audit(1756582671.723:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 141.001237][ T28] audit: type=1326 audit(1756582671.723:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 141.043074][ T28] audit: type=1326 audit(1756582671.723:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 142.182754][ T28] audit: type=1326 audit(1756582672.973:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.5.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 142.273363][ T7163] loop2: detected capacity change from 0 to 4096 [ 142.308839][ T7163] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.338010][ T28] audit: type=1326 audit(1756582672.973:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.5.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 142.420875][ T28] audit: type=1326 audit(1756582672.973:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.5.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 142.443595][ T28] audit: type=1326 audit(1756582672.973:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.5.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 142.474046][ T28] audit: type=1326 audit(1756582672.973:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.5.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 142.515439][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.265932][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.470242][ T7178] loop1: detected capacity change from 0 to 128 [ 143.505443][ T7178] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.587706][ T7178] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.035795][ T7195] loop6: detected capacity change from 0 to 128 [ 144.113412][ T7193] loop2: detected capacity change from 0 to 512 [ 144.181495][ T7193] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.272: casefold flag without casefold feature [ 144.235057][ T7193] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.272: couldn't read orphan inode 15 (err -117) [ 144.251781][ T7193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.268653][ T7193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.662391][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 145.734467][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.277'. [ 146.042390][ T7232] loop2: detected capacity change from 0 to 164 [ 146.106147][ T7232] ISOFS: unable to read i-node block [ 146.144673][ T7232] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.286022][ T7241] loop5: detected capacity change from 0 to 128 [ 146.373517][ T7241] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.480818][ T7241] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.495816][ T7246] loop1: detected capacity change from 0 to 128 [ 147.108791][ T7260] loop2: detected capacity change from 0 to 128 [ 147.169803][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 147.169818][ T28] audit: type=1800 audit(1756582677.963:459): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="file1" dev="loop2" ino=1048642 res=0 errno=0 [ 147.191161][ T7263] loop1: detected capacity change from 0 to 512 [ 147.202079][ T7260] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 147.251217][ T7260] FAT-fs (loop2): Filesystem has been set read-only [ 147.314916][ T7263] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.284: casefold flag without casefold feature [ 147.362914][ T7263] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.284: couldn't read orphan inode 15 (err -117) [ 147.427554][ T7263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.479277][ T7263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.520546][ T28] audit: type=1326 audit(1756582678.303:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.588535][ T28] audit: type=1326 audit(1756582678.303:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.656296][ T28] audit: type=1326 audit(1756582678.303:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.782777][ T28] audit: type=1326 audit(1756582678.303:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.828866][ T28] audit: type=1326 audit(1756582678.313:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.842980][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.860202][ T28] audit: type=1326 audit(1756582678.313:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 147.882841][ T28] audit: type=1326 audit(1756582678.313:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 148.066913][ T28] audit: type=1326 audit(1756582678.313:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 148.537600][ T28] audit: type=1326 audit(1756582678.363:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 148.675071][ T7283] syz.5.287 uses obsolete (PF_INET,SOCK_PACKET) [ 148.707422][ T7283] syz.5.287: attempt to access beyond end of device [ 148.707422][ T7283] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 148.721526][ T7283] FAT-fs (loop11): unable to read boot sector [ 148.975277][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.291'. [ 149.174671][ T7299] loop5: detected capacity change from 0 to 128 [ 149.192396][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 149.456325][ T7314] loop6: detected capacity change from 0 to 128 [ 149.487047][ T7314] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.505563][ T7314] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.882557][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.297'. [ 150.161839][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.220039][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.427771][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.301'. [ 150.432233][ T7328] loop1: detected capacity change from 0 to 512 [ 150.459202][ T7328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.667196][ T7328] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.745958][ T7328] EXT4-fs (loop1): 1 truncate cleaned up [ 150.787615][ T7328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.961437][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.304'. [ 151.237344][ T7369] loop2: detected capacity change from 0 to 1024 [ 151.260003][ T7369] EXT4-fs: Ignoring removed orlov option [ 151.265744][ T7369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.307113][ T7372] loop5: detected capacity change from 0 to 128 [ 151.353916][ T7372] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.423405][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.437895][ T7372] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.469848][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.508110][ T787] usb 2-1: too many configurations: 216, using maximum allowed: 8 [ 151.534496][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.562075][ T787] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 151.591409][ T787] usb 2-1: can't read configurations, error -71 [ 151.753847][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.753982][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.786763][ T7385] loop1: detected capacity change from 0 to 512 [ 151.953577][ T7385] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.311: bg 0: block 248: padding at end of block bitmap is not set [ 152.024894][ T7385] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.311: Failed to acquire dquot type 1 [ 152.099381][ T7385] EXT4-fs (loop1): 1 truncate cleaned up [ 152.117494][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.172132][ T7385] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.222218][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 152.222232][ T28] audit: type=1326 audit(1756582682.963:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 152.368196][ T28] audit: type=1326 audit(1756582682.963:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 152.406234][ T28] audit: type=1326 audit(1756582682.963:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 152.429737][ T28] audit: type=1326 audit(1756582683.163:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 152.695265][ T28] audit: type=1326 audit(1756582683.163:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 152.887008][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.061098][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.317'. [ 153.071710][ T28] audit: type=1326 audit(1756582683.193:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 153.155564][ T28] audit: type=1326 audit(1756582683.193:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 153.183028][ T28] audit: type=1326 audit(1756582683.193:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 153.205387][ T28] audit: type=1326 audit(1756582683.193:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 153.394037][ T7422] loop5: detected capacity change from 0 to 1024 [ 153.419320][ T7422] EXT4-fs: Ignoring removed orlov option [ 153.432297][ T7425] loop6: detected capacity change from 0 to 128 [ 153.432742][ T7422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.469879][ T7425] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.488456][ T7425] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.554938][ T7422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.671664][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.765007][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.964788][ T7443] loop6: detected capacity change from 0 to 512 [ 154.005404][ T7443] EXT4-fs: Ignoring removed orlov option [ 154.039679][ T7443] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 154.125056][ T7443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 154.170133][ T7443] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.323: corrupted in-inode xattr: e_value size too large [ 154.213484][ T7443] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.323: couldn't read orphan inode 15 (err -117) [ 154.244227][ T7443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.389880][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.779220][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'. [ 154.879942][ T7478] loop6: detected capacity change from 0 to 128 [ 154.923544][ T7478] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.964005][ T7478] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.995669][ T7483] loop1: detected capacity change from 0 to 1024 [ 154.997002][ T7483] EXT4-fs: Ignoring removed orlov option [ 155.009444][ T7483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.256925][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.397711][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.453386][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.052852][ T28] audit: type=1326 audit(1756582686.843:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60638ebe9 code=0x7ffc0000 [ 156.323580][ T7530] loop6: detected capacity change from 0 to 128 [ 156.861371][ T7530] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.963255][ T7530] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.150122][ T7540] loop5: detected capacity change from 0 to 1024 [ 157.169390][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.169797][ T7540] EXT4-fs: Ignoring removed orlov option [ 157.197493][ T7540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.205749][ T7542] mmap: syz.2.342 (7542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.281193][ T7540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.334285][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 157.334298][ T28] audit: type=1326 audit(1756582688.123:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.371133][ T28] audit: type=1326 audit(1756582688.123:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.410406][ T28] audit: type=1326 audit(1756582688.163:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.438711][ T28] audit: type=1326 audit(1756582688.163:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.517037][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.534452][ T28] audit: type=1326 audit(1756582688.163:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.636940][ T28] audit: type=1326 audit(1756582688.163:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.724887][ T28] audit: type=1326 audit(1756582688.163:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.766855][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.350'. [ 157.796459][ T28] audit: type=1326 audit(1756582688.163:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.834972][ T28] audit: type=1326 audit(1756582688.183:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 157.900057][ T28] audit: type=1326 audit(1756582688.183:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 158.168025][ T7542] netlink: 268 bytes leftover after parsing attributes in process `syz.2.342'. [ 158.192865][ T7542] unsupported nla_type 65024 [ 158.482621][ T7583] loop5: detected capacity change from 0 to 128 [ 158.525367][ T7583] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.545870][ T7583] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.645154][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.835539][ T7591] loop6: detected capacity change from 0 to 1024 [ 158.859943][ T7591] EXT4-fs: Ignoring removed orlov option [ 158.888281][ T7591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.932755][ T7591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.317800][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.347412][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 159.399052][ T7605] loop1: detected capacity change from 0 to 512 [ 159.484897][ T7605] EXT4-fs (loop1): too many log groups per flexible block group [ 159.591178][ T7605] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 159.644507][ T7620] loop6: detected capacity change from 0 to 512 [ 159.658759][ T7605] EXT4-fs (loop1): mount failed [ 159.753872][ T7620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.656809][ T27] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 160.884251][ T7639] loop1: detected capacity change from 0 to 128 [ 160.915787][ T7639] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.947524][ T7639] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.069716][ T6377] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.398808][ T7658] loop1: detected capacity change from 0 to 1024 [ 162.422898][ T7658] EXT4-fs: Ignoring removed orlov option [ 162.441964][ T7658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.485700][ T7658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.651824][ T27] usb 7-1: unable to get BOS descriptor or descriptor too short [ 162.664071][ T27] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 162.672475][ T27] usb 7-1: can't read configurations, error -71 [ 162.684790][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.811238][ T7671] loop6: detected capacity change from 0 to 128 [ 162.853086][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.079606][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 163.239961][ T7684] syz.6.377: attempt to access beyond end of device [ 163.239961][ T7684] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 163.263035][ T7684] FAT-fs (loop13): unable to read boot sector [ 163.302781][ T7687] loop2: detected capacity change from 0 to 128 [ 163.324548][ T7687] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.373080][ T7687] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.575631][ T7694] loop1: detected capacity change from 0 to 512 [ 163.604324][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.626113][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.642731][ T7694] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.672091][ T7695] tipc: Started in network mode [ 163.705042][ T7695] tipc: Node identity b2f77a4ee30f, cluster identity 4711 [ 163.751847][ T7695] tipc: Enabled bearer , priority 0 [ 163.770640][ T7700] loop2: detected capacity change from 0 to 1024 [ 163.782041][ T7700] EXT4-fs: Ignoring removed orlov option [ 163.825897][ T7695] tipc: Resetting bearer [ 163.848912][ T7700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.955973][ T7692] tipc: Disabling bearer [ 164.000890][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.059595][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 164.059609][ T28] audit: type=1800 audit(1756582694.853:701): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.382" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 164.124964][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.196982][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.223235][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.239832][ T7706] loop6: detected capacity change from 0 to 1024 [ 164.267838][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.271913][ T7706] EXT4-fs: Ignoring removed orlov option [ 164.296373][ T7706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.304777][ T7709] loop5: detected capacity change from 0 to 128 [ 164.306118][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.314103][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.356007][ T7706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.410377][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.521832][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.584532][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.655476][ T6377] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 164.687228][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.869069][ T28] audit: type=1326 audit(1756582695.663:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 164.904811][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 164.915951][ T28] audit: type=1326 audit(1756582695.683:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 164.977287][ T28] audit: type=1326 audit(1756582695.683:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.008745][ T28] audit: type=1326 audit(1756582695.683:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.039018][ T28] audit: type=1326 audit(1756582695.683:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.109612][ T28] audit: type=1326 audit(1756582695.683:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.151880][ T28] audit: type=1326 audit(1756582695.683:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.210373][ T28] audit: type=1326 audit(1756582695.683:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.252352][ T28] audit: type=1326 audit(1756582695.683:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7723 comm="syz.5.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 165.422274][ T7725] team0 (unregistering): Port device team_slave_0 removed [ 165.466605][ T7725] team0 (unregistering): Port device team_slave_1 removed [ 165.503560][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.388'. [ 165.711749][ T7741] loop5: detected capacity change from 0 to 512 [ 165.744621][ T7741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.765583][ T7741] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.880033][ T6377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.060311][ T7741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.078175][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.102803][ T7756] loop2: detected capacity change from 0 to 128 [ 166.286391][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.381597][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.578792][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.761882][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.771063][ T7771] loop6: detected capacity change from 0 to 1024 [ 166.809419][ T7771] EXT4-fs: Ignoring removed orlov option [ 166.815225][ T7771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.915499][ T7771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.202166][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.355468][ T42] tipc: Left network mode [ 167.430605][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.440735][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.454955][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.472784][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.486866][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.494508][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.402'. [ 167.506710][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.760879][ T7798] ªªªªªª: renamed from vlan0 (while UP) [ 168.084133][ T7812] pim6reg: entered allmulticast mode [ 168.159078][ T7816] loop6: detected capacity change from 0 to 128 [ 168.188859][ T7808] pim6reg: left allmulticast mode [ 168.303774][ T7820] tipc: Enabling of bearer rejected, failed to enable media [ 168.552154][ T7831] syz.5.411[7831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.552279][ T7831] syz.5.411[7831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.914646][ T7845] tipc: Enabled bearer , priority 0 [ 168.954844][ T7845] tipc: Resetting bearer [ 169.059757][ T7842] tipc: Disabling bearer [ 169.094054][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 169.274328][ T7856] loop2: detected capacity change from 0 to 128 [ 169.452443][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 169.452457][ T28] audit: type=1326 audit(1756582700.243:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.503213][ T42] hsr_slave_0: left promiscuous mode [ 169.536891][ T28] audit: type=1326 audit(1756582700.283:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.586493][ T42] hsr_slave_1: left promiscuous mode [ 169.616394][ T5789] Bluetooth: hci1: command tx timeout [ 169.636108][ T28] audit: type=1326 audit(1756582700.283:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.666296][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.705268][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.723230][ T28] audit: type=1326 audit(1756582700.283:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.754718][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.772734][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.788107][ T28] audit: type=1326 audit(1756582700.283:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.812264][ T42] bridge_slave_1: left allmulticast mode [ 169.837237][ T42] bridge_slave_1: left promiscuous mode [ 169.843354][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.861902][ T28] audit: type=1326 audit(1756582700.283:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.914816][ T28] audit: type=1326 audit(1756582700.283:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.950635][ T28] audit: type=1326 audit(1756582700.283:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.973284][ T28] audit: type=1326 audit(1756582700.283:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 169.997794][ T42] bridge_slave_0: left allmulticast mode [ 170.003480][ T42] bridge_slave_0: left promiscuous mode [ 170.019632][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.030800][ T28] audit: type=1326 audit(1756582700.283:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 170.091824][ T42] bond_slave_0: left promiscuous mode [ 170.097554][ T42] bond_slave_1: left promiscuous mode [ 170.108214][ T42] veth1_macvtap: left promiscuous mode [ 170.113763][ T42] veth0_macvtap: left promiscuous mode [ 170.131376][ T42] veth1_vlan: left promiscuous mode [ 170.144900][ T42] veth0_vlan: left promiscuous mode [ 170.292994][ T7841] netlink: 268 bytes leftover after parsing attributes in process `syz.6.414'. [ 170.361173][ T42] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 170.559616][ T42] bond1 (unregistering): Released all slaves [ 170.923884][ T7884] loop2: detected capacity change from 0 to 1024 [ 170.934736][ T7884] EXT4-fs: Ignoring removed orlov option [ 170.963913][ T7884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.000897][ T7884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.160213][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.306348][ T7889] loop2: detected capacity change from 0 to 128 [ 171.605850][ T42] team0 (unregistering): Port device team_slave_1 removed [ 171.660597][ T42] team0 (unregistering): Port device team_slave_0 removed [ 171.709125][ T5789] Bluetooth: hci1: command tx timeout [ 171.730791][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.784312][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.194929][ T42] bond0 (unregistering): Released all slaves [ 172.631610][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.650959][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.666723][ T7788] bridge_slave_0: entered allmulticast mode [ 172.667381][ T7904] loop5: detected capacity change from 0 to 512 [ 172.674506][ T7788] bridge_slave_0: entered promiscuous mode [ 172.730483][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.749329][ T7904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.756703][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.776880][ T7788] bridge_slave_1: entered allmulticast mode [ 172.787786][ T7788] bridge_slave_1: entered promiscuous mode [ 172.796349][ T7904] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.892416][ T7903] loop2: detected capacity change from 0 to 8192 [ 173.002712][ T7903] netlink: 196 bytes leftover after parsing attributes in process `syz.2.432'. [ 173.025086][ T7788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.088667][ T7788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.195190][ T7904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.251457][ T7788] team0: Port device team_slave_0 added [ 173.334530][ T7788] team0: Port device team_slave_1 added [ 173.341915][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.385476][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 173.563009][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.586464][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.596806][ T7931] loop5: detected capacity change from 0 to 1024 [ 173.666325][ T7788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.688831][ T7931] EXT4-fs: Ignoring removed orlov option [ 173.694547][ T7931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.695885][ T7788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.722457][ T7788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.777763][ T5789] Bluetooth: hci1: command tx timeout [ 173.820315][ T7931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.831032][ T7788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.010560][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.013363][ T7788] hsr_slave_0: entered promiscuous mode [ 174.055064][ T7788] hsr_slave_1: entered promiscuous mode [ 174.070479][ T7788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.092400][ T7788] Cannot create hsr debugfs directory [ 174.491039][ T7959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.648936][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 174.648952][ T28] audit: type=1326 audit(1756582705.443:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.657930][ T7788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.693334][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 174.705748][ T28] audit: type=1326 audit(1756582705.483:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.733384][ T28] audit: type=1326 audit(1756582705.493:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.736830][ T7788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.770699][ T28] audit: type=1326 audit(1756582705.493:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.809217][ T28] audit: type=1326 audit(1756582705.493:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.811192][ T7788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.839642][ T7971] loop6: detected capacity change from 0 to 128 [ 174.842611][ T28] audit: type=1326 audit(1756582705.493:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.883865][ T7788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.892222][ T28] audit: type=1326 audit(1756582705.493:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 174.927184][ T7971] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.968923][ T28] audit: type=1326 audit(1756582705.493:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 175.000811][ T7971] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.006254][ T28] audit: type=1326 audit(1756582705.523:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 175.109607][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.126818][ T28] audit: type=1326 audit(1756582705.523:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff463b8ebe9 code=0x7ffc0000 [ 175.265308][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.286510][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.365315][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.372521][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.405676][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.412860][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.622079][ T7992] lo: entered allmulticast mode [ 175.673832][ T7992] tunl0: entered allmulticast mode [ 175.690064][ T7992] gre0: entered allmulticast mode [ 175.786675][ T7992] gretap0: entered allmulticast mode [ 175.786952][ T7953] netlink: 268 bytes leftover after parsing attributes in process `syz.5.439'. [ 175.809815][ T7992] erspan0: entered allmulticast mode [ 175.823646][ T7992] ip_vti0: entered allmulticast mode [ 175.852572][ T7992] ip6_vti0: entered allmulticast mode [ 175.858918][ T5789] Bluetooth: hci1: command tx timeout [ 175.904560][ T7992] sit0: entered allmulticast mode [ 175.967025][ T7992] ip6tnl0: entered allmulticast mode [ 176.008161][ T7992] ip6gre0: entered allmulticast mode [ 176.045193][ T7992] syz_tun: entered allmulticast mode [ 176.084638][ T7992] ip6gretap0: entered allmulticast mode [ 176.122757][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.130456][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.139072][ T7992] bridge0: entered allmulticast mode [ 176.176544][ T7992] vcan0: entered allmulticast mode [ 176.190290][ T7992] $Hÿ: left promiscuous mode [ 176.201052][ T7992] bond_slave_0: left promiscuous mode [ 176.210223][ T7992] bond_slave_1: left promiscuous mode [ 176.215861][ T7992] $Hÿ: entered allmulticast mode [ 176.221657][ T7992] bond_slave_0: entered allmulticast mode [ 176.231631][ T7992] bond_slave_1: entered allmulticast mode [ 176.241712][ T7992] team0: entered allmulticast mode [ 176.249474][ T7992] team_slave_0: entered allmulticast mode [ 176.255397][ T7992] team_slave_1: entered allmulticast mode [ 176.293907][ T7992] dummy0: entered allmulticast mode [ 176.333110][ T7992] nlmon0: entered allmulticast mode [ 176.348275][ T7992] caif0: entered allmulticast mode [ 176.363366][ T7992] veth0: entered allmulticast mode [ 176.394426][ T7992] veth1: entered allmulticast mode [ 176.426034][ T7992] wg0: entered allmulticast mode [ 176.446787][ T7992] wg1: entered allmulticast mode [ 176.469020][ T7992] wg2: entered allmulticast mode [ 176.491086][ T7992] veth0_to_bridge: entered allmulticast mode [ 176.540104][ T7992] veth1_to_bridge: entered allmulticast mode [ 176.587023][ T7992] veth0_to_bond: entered allmulticast mode [ 176.627023][ T7992] veth1_to_bond: entered allmulticast mode [ 176.664548][ T7992] veth0_to_team: left promiscuous mode [ 176.670636][ T7992] veth0_to_team: entered allmulticast mode [ 176.693492][ T7992] veth1_to_team: entered allmulticast mode [ 176.741948][ T7992] veth0_to_batadv: entered allmulticast mode [ 176.778272][ T7992] batadv_slave_0: entered allmulticast mode [ 176.810639][ T7992] veth1_to_batadv: entered allmulticast mode [ 176.842967][ T7992] batadv_slave_1: entered allmulticast mode [ 176.878731][ T7992] xfrm0: entered allmulticast mode [ 176.912185][ T7992] veth0_to_hsr: entered allmulticast mode [ 176.942408][ T7992] hsr_slave_0: entered allmulticast mode [ 176.965748][ T7992] veth1_to_hsr: entered allmulticast mode [ 177.001730][ T7992] hsr_slave_1: entered allmulticast mode [ 177.027136][ T7992] hsr0: entered allmulticast mode [ 177.060155][ T7992] veth1_virt_wifi: entered allmulticast mode [ 177.097671][ T7992] veth0_virt_wifi: entered allmulticast mode [ 177.118495][ T7992] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 177.142395][ T7992] veth1_vlan: entered allmulticast mode [ 177.173999][ T7992] veth0_vlan: entered allmulticast mode [ 177.222200][ T7992] vlan0: entered allmulticast mode [ 177.237026][ T7992] vlan1: entered allmulticast mode [ 177.268914][ T7992] macvlan0: entered allmulticast mode [ 177.286868][ T7992] macvlan1: entered allmulticast mode [ 177.295550][ T7992] ipvlan0: entered allmulticast mode [ 177.302417][ T7992] ipvlan1: entered allmulticast mode [ 177.313949][ T7992] veth1_macvtap: entered allmulticast mode [ 177.328710][ T7992] veth0_macvtap: entered allmulticast mode [ 177.349409][ T7992] macvtap0: entered allmulticast mode [ 177.391515][ T7992] macsec0: entered allmulticast mode [ 177.407852][ T7992] geneve0: entered allmulticast mode [ 177.419747][ T7992] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.433789][ T7992] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.445714][ T7992] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.455101][ T7992] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.464286][ T7992] geneve1: entered allmulticast mode [ 177.490032][ T7992] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 177.510946][ T7992] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 177.528614][ T7992] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 177.547293][ T7992] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 177.563080][ T7992] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 177.587923][ T7992] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 177.823736][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.105469][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.455'. [ 178.369160][ T8017] loop6: detected capacity change from 0 to 128 [ 178.432851][ T8017] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.508409][ T7788] veth0_vlan: entered promiscuous mode [ 178.521140][ T8017] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.580474][ T7788] veth1_vlan: entered promiscuous mode [ 178.666855][ T7788] veth0_macvtap: entered promiscuous mode [ 178.689184][ T7788] veth1_macvtap: entered promiscuous mode [ 178.729236][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.747401][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.760664][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.772243][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.788977][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.818109][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.841477][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 178.865512][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.903939][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.942797][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.964333][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.990649][ T7788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.998312][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 179.041708][ T7788] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.061116][ T7788] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.085652][ T7788] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.125566][ T7788] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.318624][ T2109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.338444][ T2109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.394954][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.404061][ T8042] loop5: detected capacity change from 0 to 1024 [ 179.417676][ T8042] EXT4-fs: Ignoring removed orlov option [ 179.423311][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.447034][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.464'. [ 179.556237][ T8042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.601055][ T8042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.807160][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.022615][ T8060] loop5: detected capacity change from 0 to 128 [ 180.054069][ T8060] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.135615][ T8060] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.367920][ T6412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.449213][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.473'. [ 180.501659][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 180.501673][ T28] audit: type=1326 audit(1756582711.293:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.643994][ T28] audit: type=1326 audit(1756582711.293:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.734509][ T28] audit: type=1326 audit(1756582711.293:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.757534][ T8084] pim6reg1: entered allmulticast mode [ 180.818245][ T28] audit: type=1326 audit(1756582711.293:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.846746][ T28] audit: type=1326 audit(1756582711.293:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.900609][ T8089] loop7: detected capacity change from 0 to 512 [ 180.916404][ T28] audit: type=1326 audit(1756582711.293:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 180.971839][ T28] audit: type=1326 audit(1756582711.303:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 181.028386][ T8089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.043874][ T28] audit: type=1326 audit(1756582711.303:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 181.071251][ T28] audit: type=1326 audit(1756582711.303:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 181.095622][ T28] audit: type=1326 audit(1756582711.303:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 181.120593][ T8089] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.200795][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 181.300633][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.325981][ T8106] loop6: detected capacity change from 0 to 512 [ 181.409403][ T8106] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 181.498467][ T8106] EXT4-fs (loop6): 1 truncate cleaned up [ 181.505634][ T8106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.551980][ T8113] loop7: detected capacity change from 0 to 128 [ 181.601926][ T8113] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.624543][ T8113] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.754341][ T7788] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.892465][ T8123] syz.7.486[8123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.892592][ T8123] syz.7.486[8123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.919613][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.988330][ T8126] loop5: detected capacity change from 0 to 1024 [ 182.047235][ T8126] EXT4-fs: Ignoring removed orlov option [ 182.063360][ T8126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.163208][ T8126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.887723][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.493'. [ 183.074493][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.214737][ T8162] loop6: detected capacity change from 0 to 128 [ 183.323787][ T8162] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.458633][ T8162] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.578774][ T8179] loop5: detected capacity change from 0 to 128 [ 183.605801][ T8179] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.648170][ T8179] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.677520][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.913344][ T42] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.006753][ T8185] pim6reg1: entered allmulticast mode [ 184.228197][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.502'. [ 184.446717][ T8212] loop6: detected capacity change from 0 to 128 [ 184.503056][ T8212] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.590337][ T8212] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.673569][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.510'. [ 184.716969][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.161047][ T8228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.573794][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.520'. [ 185.636091][ T8260] loop6: detected capacity change from 0 to 128 [ 185.679320][ T8260] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.703591][ T8260] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.725298][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 185.875933][ T6686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.590219][ T8292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.758073][ T8308] netlink: 268 bytes leftover after parsing attributes in process `syz.7.532'. [ 186.776892][ T8306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 186.823391][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 186.823403][ T28] audit: type=1326 audit(1756582717.613:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 186.891871][ T28] audit: type=1326 audit(1756582717.643:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 186.959186][ T28] audit: type=1326 audit(1756582717.653:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.036731][ T28] audit: type=1326 audit(1756582717.653:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.075991][ T28] audit: type=1326 audit(1756582717.653:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.108299][ T28] audit: type=1326 audit(1756582717.653:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.141058][ T28] audit: type=1326 audit(1756582717.653:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.170566][ T28] audit: type=1326 audit(1756582717.673:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.196724][ T28] audit: type=1326 audit(1756582717.673:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.259032][ T28] audit: type=1326 audit(1756582717.673:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6de18ebe9 code=0x7ffc0000 [ 187.425647][ T8331] loop7: detected capacity change from 0 to 1024 [ 187.477956][ T8338] Zero length message leads to an empty skb [ 187.495245][ T8339] syz.5.540 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.497315][ T8331] EXT4-fs: Ignoring removed orlov option [ 187.576358][ T8331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.657722][ T8331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.918698][ T8356] block device autoloading is deprecated and will be removed. [ 187.927973][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.184944][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.559'. [ 189.561102][ T8412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.991704][ T8452] tipc: Enabling of bearer rejected, failed to enable media [ 190.131164][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.570'. [ 190.961562][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.580'. [ 190.985169][ T8474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.026633][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 191.348487][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 191.896552][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.592'. [ 193.694273][ T8584] tipc: Enabled bearer , priority 0 [ 193.754211][ T8584] tipc: Resetting bearer [ 193.868453][ T8581] tipc: Disabling bearer [ 193.906166][ C1] sched: RT throttling activated [ 194.135061][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 194.261447][ T8600] pim6reg1: entered allmulticast mode [ 194.271594][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288084][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.577492][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.627'. [ 195.721950][ T8681] tipc: Enabled bearer , priority 0 [ 195.751485][ T8681] tipc: Resetting bearer [ 195.825937][ T8679] tipc: Disabling bearer [ 195.999784][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.631'. [ 196.312825][ T8705] pim6reg1: entered allmulticast mode [ 196.336571][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 196.455462][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.638'. [ 196.515008][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 196.515023][ T28] audit: type=1326 audit(1756582727.303:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 196.609521][ T28] audit: type=1326 audit(1756582727.333:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 196.695426][ T28] audit: type=1326 audit(1756582727.343:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 196.756427][ T28] audit: type=1326 audit(1756582727.343:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 196.848813][ T28] audit: type=1326 audit(1756582727.343:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 196.974073][ T28] audit: type=1326 audit(1756582727.353:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 197.048412][ T28] audit: type=1326 audit(1756582727.353:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 197.098357][ T28] audit: type=1326 audit(1756582727.353:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 197.156272][ T28] audit: type=1326 audit(1756582727.353:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 197.233631][ T28] audit: type=1326 audit(1756582727.353:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 197.841951][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.651'. [ 199.219117][ T8855] netlink: 348 bytes leftover after parsing attributes in process `syz.7.674'. [ 199.735489][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.681'. [ 200.152428][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 200.449849][ T8925] pim6reg1: entered allmulticast mode [ 201.769303][ T8990] netlink: 208 bytes leftover after parsing attributes in process `syz.5.711'. [ 201.819019][ T8990] netlink: 208 bytes leftover after parsing attributes in process `syz.5.711'. [ 201.841313][ T8995] netlink: 208 bytes leftover after parsing attributes in process `syz.5.711'. [ 202.208951][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.715'. [ 202.837904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b9b1000: rx timeout, send abort [ 202.850345][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b9b1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 202.865588][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b9b0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.287721][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.724'. [ 203.621903][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 203.621917][ T28] audit: type=1326 audit(1756582734.413:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.695976][ T28] audit: type=1326 audit(1756582734.463:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.786248][ T28] audit: type=1326 audit(1756582734.473:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.833397][ T28] audit: type=1326 audit(1756582734.483:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.895752][ T28] audit: type=1326 audit(1756582734.483:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.939037][ T9070] syzkaller0: entered promiscuous mode [ 203.944623][ T28] audit: type=1326 audit(1756582734.483:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 203.981185][ T9070] syzkaller0: entered allmulticast mode [ 204.029973][ T28] audit: type=1326 audit(1756582734.483:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 204.079291][ T28] audit: type=1326 audit(1756582734.483:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 204.153966][ T28] audit: type=1326 audit(1756582734.483:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 204.208094][ T28] audit: type=1326 audit(1756582734.483:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.7.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 206.425018][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.741'. [ 206.990775][ T9149] netlink: 1 bytes leftover after parsing attributes in process `syz.6.750'. [ 207.437585][ T9174] process 'syz.5.758' launched '/dev/fd/3' with NULL argv: empty string added [ 207.806492][ T9191] netlink: 348 bytes leftover after parsing attributes in process `syz.2.763'. [ 208.215711][ T9209] netlink: 'syz.2.769': attribute type 4 has an invalid length. [ 208.809833][ T9233] netlink: 348 bytes leftover after parsing attributes in process `syz.5.775'. [ 209.011262][ T9241] netlink: 'syz.5.777': attribute type 10 has an invalid length. [ 209.469874][ T9262] netlink: 340 bytes leftover after parsing attributes in process `syz.2.776'. [ 209.775692][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.783'. [ 209.941451][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 210.149445][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 210.149460][ T28] audit: type=1326 audit(1756582740.943:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.218014][ T28] audit: type=1326 audit(1756582740.973:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.287915][ T28] audit: type=1326 audit(1756582740.983:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.359351][ T28] audit: type=1326 audit(1756582740.983:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.403204][ T28] audit: type=1326 audit(1756582740.983:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.462117][ T28] audit: type=1326 audit(1756582740.983:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.535076][ T28] audit: type=1326 audit(1756582740.983:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.638247][ T28] audit: type=1326 audit(1756582740.983:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.701490][ T28] audit: type=1326 audit(1756582740.983:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 210.769417][ T28] audit: type=1326 audit(1756582740.983:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9289 comm="syz.7.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa2d8ebe9 code=0x7ffc0000 [ 211.186760][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.794'. [ 212.050796][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.804'. [ 212.336968][ T9377] netlink: 96 bytes leftover after parsing attributes in process `syz.5.807'. [ 213.087945][ T9408] netlink: 304 bytes leftover after parsing attributes in process `syz.5.817'. [ 214.357464][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 214.876420][ T9485] netlink: 304 bytes leftover after parsing attributes in process `syz.5.839'. [ 215.829747][ T9491] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 215.945912][ T9177] Set syz1 is full, maxelem 65536 reached [ 216.067465][ T9513] block device autoloading is deprecated and will be removed. [ 216.176306][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 216.176322][ T28] audit: type=1326 audit(1756582746.963:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.283233][ T28] audit: type=1326 audit(1756582746.963:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.362115][ T28] audit: type=1326 audit(1756582747.013:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.393154][ T28] audit: type=1326 audit(1756582747.013:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.431468][ T28] audit: type=1326 audit(1756582747.013:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.483193][ T28] audit: type=1326 audit(1756582747.013:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.545880][ T28] audit: type=1326 audit(1756582747.013:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.572011][ T28] audit: type=1326 audit(1756582747.013:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.609061][ T28] audit: type=1326 audit(1756582747.033:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 216.634892][ T28] audit: type=1326 audit(1756582747.033:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.6.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49df8ebe9 code=0x7ffc0000 [ 230.660588][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.672892][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.685738][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.696018][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.705444][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.715131][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.159986][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.172308][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.180661][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.194362][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.202395][ T5789] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.213385][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.611451][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.626416][ T5802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.635586][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.643608][ T5802] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.651541][ T5802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.659304][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.667922][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.675293][ T5802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.684256][ T5802] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.692988][ T5802] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.700412][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.708469][ T5802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.736544][ T5789] Bluetooth: hci4: command tx timeout [ 233.297113][ T5803] Bluetooth: hci5: command tx timeout [ 234.738140][ T5803] Bluetooth: hci6: command tx timeout [ 234.816424][ T5789] Bluetooth: hci4: command tx timeout [ 234.823270][ T5803] Bluetooth: hci7: command tx timeout [ 235.376527][ T5803] Bluetooth: hci5: command tx timeout [ 236.817535][ T5803] Bluetooth: hci6: command tx timeout [ 236.896396][ T5789] Bluetooth: hci4: command tx timeout [ 236.901928][ T5803] Bluetooth: hci7: command tx timeout [ 237.456246][ T5803] Bluetooth: hci5: command tx timeout [ 319.876117][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 319.882763][ C0] rcu: 0-...!: (10500 ticks this GP) idle=179c/1/0x4000000000000000 softirq=33385/33385 fqs=1195 [ 319.894209][ C0] rcu: (t=10502 jiffies g=32561 q=2982 ncpus=2) [ 319.902099][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 8104 jiffies! g32561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 319.914326][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=14621 [ 319.922205][ C0] rcu: rcu_preempt kthread starved for 8107 jiffies! g32561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 319.933481][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 319.943457][ C0] rcu: RCU grace-period kthread stack dump: [ 319.949346][ C0] task:rcu_preempt state:I stack:27688 pid:17 ppid:2 flags:0x00004000 [ 319.958557][ C0] Call Trace: [ 319.961832][ C0] [ 319.964767][ C0] __schedule+0x14d2/0x44d0 [ 319.969292][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 319.976055][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 319.981256][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 319.987168][ C0] ? asan.module_dtor+0x20/0x20 [ 319.992028][ C0] ? enqueue_timer+0x225/0x530 [ 319.996801][ C0] ? __mod_timer+0x984/0xdb0 [ 320.001412][ C0] schedule+0xbd/0x170 [ 320.005500][ C0] schedule_timeout+0x160/0x280 [ 320.010360][ C0] ? console_conditional_schedule+0x40/0x40 [ 320.016254][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 320.022155][ C0] ? update_process_times+0x1b0/0x1b0 [ 320.027536][ C0] ? prepare_to_swait_event+0x339/0x360 [ 320.033098][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 320.037966][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 320.044146][ C0] ? rcu_gp_init+0x1510/0x1510 [ 320.049003][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 320.053889][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.059110][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.064408][ C0] rcu_gp_kthread+0x99/0x380 [ 320.069014][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.074238][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 320.079182][ C0] ? __kthread_parkme+0x162/0x1c0 [ 320.084214][ C0] kthread+0x2fa/0x390 [ 320.088284][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.093402][ C0] ? kthread_blkcg+0xd0/0xd0 [ 320.098004][ C0] ret_from_fork+0x48/0x80 [ 320.102433][ C0] ? kthread_blkcg+0xd0/0xd0 [ 320.107022][ C0] ret_from_fork_asm+0x11/0x20 [ 320.111800][ C0] [ 320.114829][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 320.121165][ C0] Sending NMI from CPU 0 to CPUs 1: [ 320.126377][ C1] NMI backtrace for cpu 1 [ 320.126392][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 320.126405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.126421][ C1] Workqueue: bat_events batadv_nc_worker [ 320.126442][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x532/0x9d0 [ 320.126462][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1b 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 320.126475][ C1] RSP: 0018:ffffc900001f0900 EFLAGS: 00000206 [ 320.126486][ C1] RAX: 0000000000000000 RBX: ffff88807ac55280 RCX: ffff888019e7bc00 [ 320.126496][ C1] RDX: 0000000000000100 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 320.126506][ C1] RBP: ffffc900001f09f0 R08: ffffffff90da562f R09: 1ffffffff21b4ac5 [ 320.126517][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ac6 R12: 1ffff110171e0001 [ 320.126528][ C1] R13: 00000000ffff8d9d R14: 1ffff1100f58aa50 R15: dffffc0000000000 [ 320.126538][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 320.126550][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.126560][ C1] CR2: 00007f127889ff54 CR3: 0000000024b0b000 CR4: 00000000003506e0 [ 320.126573][ C1] Call Trace: [ 320.126579][ C1] [ 320.126589][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 320.126610][ C1] do_raw_spin_lock+0x24e/0x2c0 [ 320.126630][ C1] ? __rwlock_init+0x150/0x150 [ 320.126652][ C1] __xfrm_state_delete+0xba/0x800 [ 320.126670][ C1] ? __rwlock_init+0x150/0x150 [ 320.126688][ C1] ? mark_lock+0x94/0x320 [ 320.126706][ C1] xfrm_timer_handler+0x1c3/0x9e0 [ 320.126725][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 320.126740][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 320.126762][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 320.126784][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 320.126806][ C1] ? _raw_spin_unlock+0x40/0x40 [ 320.126826][ C1] ? debug_object_deactivate+0x67/0x350 [ 320.126856][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 320.126874][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 320.126894][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 320.126907][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 320.126929][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 320.126945][ C1] handle_softirqs+0x280/0x820 [ 320.126961][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 320.126977][ C1] ? do_softirq+0x180/0x180 [ 320.126993][ C1] __irq_exit_rcu+0xc7/0x190 [ 320.127007][ C1] ? irq_exit_rcu+0x20/0x20 [ 320.127023][ C1] irq_exit_rcu+0x9/0x20 [ 320.127035][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 320.127056][ C1] [ 320.127060][ C1] [ 320.127065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.127079][ C1] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 320.127099][ C1] Code: 0f 84 2c ff ff ff eb 99 e8 2d 60 fe 08 48 c7 c7 40 6a d3 8c 4c 89 f6 e8 2e ee e1 02 e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 0f 1e fa 41 57 41 56 53 65 ff 05 f8 21 94 7e e8 0b 76 fe 08 89 [ 320.127110][ C1] RSP: 0018:ffffc90000107b58 EFLAGS: 00000202 [ 320.127121][ C1] RAX: ffffffff8a365213 RBX: 0000000000000001 RCX: 0000000000000000 [ 320.127130][ C1] RDX: ffff888019e7bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 320.127139][ C1] RBP: ffff888059f60e38 R08: dffffc0000000000 R09: 1ffffffff21b4aa0 [ 320.127150][ C1] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: dffffc0000000000 [ 320.127160][ C1] R13: ffffffff8a3651e2 R14: ffff88805c57cc80 R15: 00000000000001c7 [ 320.127171][ C1] ? batadv_nc_worker+0xd2/0x610 [ 320.127189][ C1] ? batadv_nc_worker+0x103/0x610 [ 320.127211][ C1] ? batadv_nc_worker+0xef/0x610 [ 320.127228][ C1] batadv_nc_worker+0x10c/0x610 [ 320.127250][ C1] ? process_scheduled_works+0x957/0x15b0 [ 320.127268][ C1] process_scheduled_works+0xa45/0x15b0 [ 320.127299][ C1] ? assign_work+0x400/0x400 [ 320.127319][ C1] ? assign_work+0x39e/0x400 [ 320.127339][ C1] worker_thread+0xa55/0xfc0 [ 320.127369][ C1] kthread+0x2fa/0x390 [ 320.127382][ C1] ? pr_cont_work+0x560/0x560 [ 320.127399][ C1] ? kthread_blkcg+0xd0/0xd0 [ 320.127413][ C1] ret_from_fork+0x48/0x80 [ 320.127429][ C1] ? kthread_blkcg+0xd0/0xd0 [ 320.127443][ C1] ret_from_fork_asm+0x11/0x20 [ 320.127470][ C1] [ 320.128388][ C0] CPU: 0 PID: 9485 Comm: syz.5.839 Not tainted syzkaller #0 [ 320.548599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.558650][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x60 [ 320.564802][ C0] Code: 89 fb e8 13 00 00 00 48 8b 3d bc 01 c5 0c 48 89 de 5b e9 a3 75 56 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 50 2a 7e 7e <65> 8b 15 51 2a 7e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 320.584407][ C0] RSP: 0018:ffffc90014637198 EFLAGS: 00000287 [ 320.590469][ C0] RAX: ffffffff891e31c0 RBX: 0000000003000000 RCX: ffff88805b2d1e00 [ 320.598431][ C0] RDX: ffff88805b2d1e00 RSI: 0000000003000000 RDI: 0000000001000000 [ 320.606394][ C0] RBP: ffffc900146372f0 R08: dffffc0000000000 R09: 1ffffffff21b4aa0 [ 320.614363][ C0] R10: dffffc0000000000 R11: fffffbfff21b4aa1 R12: 0000000001000000 [ 320.622339][ C0] R13: 0000000000000001 R14: ffff88805be89000 R15: dffffc0000000000 [ 320.630300][ C0] FS: 00007ff464a136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.639220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.645792][ C0] CR2: 00007fa6de3912f8 CR3: 000000007d447000 CR4: 00000000003506f0 [ 320.653761][ C0] Call Trace: [ 320.657058][ C0] [ 320.659982][ C0] xfrm_alloc_spi+0x4d0/0x11f0 [ 320.664762][ C0] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 320.669702][ C0] ? verify_spi_info+0x120/0x120 [ 320.674636][ C0] ? xfrm_find_acq+0x79/0x90 [ 320.679232][ C0] xfrm_alloc_userspi+0x5d1/0xa90 [ 320.684249][ C0] ? end_current_label_crit_section+0x170/0x170 [ 320.690507][ C0] ? apparmor_capable+0x137/0x1a0 [ 320.695518][ C0] ? xfrm_dump_policy_done+0x90/0x90 [ 320.700794][ C0] ? __nla_parse+0x40/0x50 [ 320.705214][ C0] xfrm_user_rcv_msg+0x596/0x870 [ 320.710150][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.715354][ C0] ? xfrm_netlink_rcv+0x90/0x90 [ 320.720198][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 320.725578][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 320.730685][ C0] ? __mutex_trylock_common+0x153/0x250 [ 320.736236][ C0] netlink_rcv_skb+0x216/0x480 [ 320.741001][ C0] ? xfrm_netlink_rcv+0x90/0x90 [ 320.745850][ C0] ? netlink_ack+0x1110/0x1110 [ 320.750611][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.755805][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 320.760827][ C0] xfrm_netlink_rcv+0x79/0x90 [ 320.765591][ C0] netlink_unicast+0x751/0x8d0 [ 320.770367][ C0] netlink_sendmsg+0x8c1/0xbe0 [ 320.775155][ C0] ? netlink_getsockopt+0x580/0x580 [ 320.780358][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 320.785303][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.790582][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 320.796032][ C0] ? netlink_getsockopt+0x580/0x580 [ 320.801224][ C0] ____sys_sendmsg+0x5bf/0x950 [ 320.805984][ C0] ? __asan_memset+0x22/0x40 [ 320.810584][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 320.815598][ C0] ? __import_iovec+0x5f2/0x860 [ 320.820462][ C0] ? import_iovec+0x73/0xa0 [ 320.824968][ C0] ___sys_sendmsg+0x220/0x290 [ 320.829652][ C0] ? __sys_sendmsg+0x270/0x270 [ 320.834446][ C0] __se_sys_sendmsg+0x1a5/0x270 [ 320.839301][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 320.844338][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.849540][ C0] do_syscall_64+0x55/0xb0 [ 320.853963][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.858635][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.863301][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.869187][ C0] RIP: 0033:0x7ff463b8ebe9 [ 320.873609][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.893211][ C0] RSP: 002b:00007ff464a13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.901621][ C0] RAX: ffffffffffffffda RBX: 00007ff463dc5fa0 RCX: 00007ff463b8ebe9 [ 320.909581][ C0] RDX: 0000000000040858 RSI: 0000200000001680 RDI: 0000000000000003 [ 320.917544][ C0] RBP: 00007ff463c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.925507][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.933470][ C0] R13: 00007ff463dc6038 R14: 00007ff463dc5fa0 R15: 00007ffea385dd98 [ 320.941443][ C0]