last executing test programs: 1m35.030271714s ago: executing program 2 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x2a) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 1m33.015183826s ago: executing program 2 (id=173): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0xff}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x14, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m32.904378368s ago: executing program 2 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000) 1m32.638933542s ago: executing program 2 (id=177): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x150d, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1m32.045743952s ago: executing program 1 (id=178): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="0f78cec744240017000000c7442402bfdbcde3c7442406000000000f011c240f20e035000010000f22e0650f2091f40f2093f2d9fcf30f09640f01bee88543220fc77500", 0x44}], 0x1, 0x49, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x2, 0x7, 0x6, 0x260, 0x5, 0x0, [{0x7, 0x7, 0x6, '\x00', 0x2288}, {0x22909ee5, 0x2, 0x80000000, '\x00', 0x402}, {0xffffffffffffffff, 0x100, 0xffffffffffffffff, '\x00', 0x1000}, {0x4, 0x9, 0x1}, {0x2, 0x1000, 0x0, '\x00', 0xd84}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000400fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000fffc00000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000067b20000000000000000000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000022b0000000a000000fe8000a600"/158], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff}, [@acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x1, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5}}}}}]}}]}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m30.954734179s ago: executing program 2 (id=183): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fadvise64(r1, 0x7, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="aaaa8aaaaaaab557a0758659080600010800060400010180c20001"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) kcmp(r4, r4, 0x2, r3, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m27.273868009s ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000100)={0x8, 0x32}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x2e]}}, &(0x7f0000000700)=""/63, 0x1f, 0x3f, 0x1, 0x50, 0x10000}, 0x28) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_stats_latency\x00', r3}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0xdd, 0x4) r5 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==") process_madvise(r6, 0x0, 0x0, 0x16, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x3e, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xffffffffffffffac}, 0xdb30}], 0x1, 0x40002042, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r7) 1m24.15498842s ago: executing program 2 (id=193): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(0x0, 0x107502, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_gettime(0x0, 0x0) utimensat(r7, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)={{}, {0x0, 0x2710}}, 0x0) 1m23.174863126s ago: executing program 1 (id=195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m23.022720108s ago: executing program 1 (id=198): bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x2a) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 1m20.973021312s ago: executing program 1 (id=201): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 1m20.334736152s ago: executing program 1 (id=202): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000001b00)={[{@minixdf}]}, 0x0, 0x24d, &(0x7f0000001e00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x46) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 1m8.293128168s ago: executing program 32 (id=193): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(0x0, 0x107502, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_gettime(0x0, 0x0) utimensat(r7, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)={{}, {0x0, 0x2710}}, 0x0) 1m4.991136132s ago: executing program 33 (id=202): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000001b00)={[{@minixdf}]}, 0x0, 0x24d, &(0x7f0000001e00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x46) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 33.18375401s ago: executing program 4 (id=301): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 32.919740234s ago: executing program 4 (id=304): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) munlockall() 31.754754163s ago: executing program 0 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000001000000000009500000000000000", @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002100400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r2, 0x0, 0x44) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) 30.401719755s ago: executing program 0 (id=308): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x9713}}, {@init_itable_val={'init_itable', 0x3d, 0x10}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}], [{@appraise_type}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x0, 0x477, &(0x7f0000000780)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a6301827000"], 0xffdd) 28.140034112s ago: executing program 4 (id=312): r0 = socket(0x1, 0x80802, 0x0) unshare(0x20000400) shutdown(r0, 0x0) 27.938812405s ago: executing program 4 (id=316): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noinit_itable}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@abort}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1b0401d, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1000}}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x71c}}, {@quota}]}, 0x1, 0x63e, &(0x7f00000003c0)="$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") syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 25.855426469s ago: executing program 0 (id=323): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 25.082933351s ago: executing program 4 (id=324): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231306ff000b53743ff62a90000706000000b3"], 0x0}, 0x0) 22.557050233s ago: executing program 0 (id=328): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file2\x00', 0x10947e, 0xe1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0xa0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) chdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@nouid32}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@nojournal_checksum}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") fallocate(r0, 0x10, 0x0, 0x1001f0) 21.684592157s ago: executing program 0 (id=331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffd) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 21.212386415s ago: executing program 4 (id=336): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, 0x0}}], 0x1, 0x2, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000040)) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendfile(r0, r0, 0x0, 0x800000009) 20.963996829s ago: executing program 34 (id=336): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, 0x0}}], 0x1, 0x2, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000040)) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendfile(r0, r0, 0x0, 0x800000009) 20.722394453s ago: executing program 0 (id=341): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 19.762006318s ago: executing program 35 (id=341): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 5.077076237s ago: executing program 3 (id=430): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) close(0x4) 4.521127596s ago: executing program 6 (id=436): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a9"], 0xf0}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.434073394s ago: executing program 5 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "f565"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 3.234640767s ago: executing program 3 (id=438): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c30b9989d1381932f15ae226fe89d2e05df3e19bd92614e8ee7a9225f449cd2f09ac439b54c36b0aec489d4ce0572b5eea0ded2f3f856e66a8fe1d54d826077a47f3374333de6af6721bfe4137e60daaba8438214d314170b16108e9236290154f6e556a57fae98dbb13a7b4732ec3a6f2f567cc1f71ea58121504c01c05b5b5a07f1c35cca6af7d", @ANYRES16=r2, @ANYBLOB="050000000000000000000600", @ANYRES32, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) 3.142376839s ago: executing program 6 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000130008002abd7000ffdbdf252606008e4e204e240300000007000000000000c048ea00009ccfffff03000000ffffff7f00010000", @ANYRES32, @ANYBLOB="052a670006000000010000000100000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020605000000000000000000000000050500010007000000090000050004000000000013000300686173683a6e65742c69666163650000"], 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r6, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$alg(0x26, 0x5, 0x0) accept4(r8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.357095971s ago: executing program 8 (id=442): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.352567522s ago: executing program 3 (id=443): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r2}, &(0x7f0000000240)=0x8) 2.288405123s ago: executing program 7 (id=444): unshare(0x26020480) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffff11) 2.234997793s ago: executing program 8 (id=445): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0xfffd, 0x0, 0xfd, 0x4, 0x0, @rand_addr=0x64010102, @private=0x4}}}}) 2.184694134s ago: executing program 3 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) setns(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)) 2.178439294s ago: executing program 7 (id=447): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x4}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 2.026918056s ago: executing program 8 (id=448): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 1.21502293s ago: executing program 3 (id=449): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f00000000c0)=0x8000, 0x4) 1.134796161s ago: executing program 6 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) 1.127801581s ago: executing program 8 (id=451): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file2\x00', 0x10947e, 0xe1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0xa0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) chdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@nouid32}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@nojournal_checksum}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") fallocate(r0, 0x10, 0x0, 0x1001f0) 1.101644121s ago: executing program 3 (id=452): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.006752153s ago: executing program 6 (id=453): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 996.417663ms ago: executing program 5 (id=454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'erspan0\x00', @ifru_flags=0x5200}) 884.596385ms ago: executing program 6 (id=455): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000004380)=ANY=[@ANYRESOCT=r0, @ANYBLOB="322d6825fe8cf7050cedffff3c57c86c0b18fa14eb854c5c2e26da314f1cae655aa13f05abe701b22a5d7801c560ffcaa7a9dd43edce1570072b0ef862679690e41a47e87f451affc318d2e01fa6e062186de79664ac21bb4786923b19c25c8a11b176a7a3ef1425b6d5e0c9ef15bd14e3c9d30fb24d50b512afb6ab04794571f1b53ae1a1d0f87c76239c9f6700ed8f08cbdb137cad2901209b2c77c46608d398435233cdf13d5d7a7f68304cc8956bda78a62e3872bcee78cfeee8c6051bbe2470c9646cfe9343a022b0618ce422f210c275b35df1507d54b51f86f9f3290a0ff8bd1ba812836252179d3656536b3a23ac27bb810f78ecba4a277ad5540a767bb07151ed892973dfd0eb7ba7f8f7ec0821927a58787096a95b010ebc1df715150bfa78e63eed7e8eb33f0ea0277fb3eb31c9cd233c14ab7fc9c7957dfbb865082a", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x40000000) 805.828256ms ago: executing program 5 (id=456): unshare(0x2c020400) r0 = socket(0x28, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 805.241366ms ago: executing program 7 (id=457): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) 804.755306ms ago: executing program 7 (id=458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit, @jmp={0x5, 0x1, 0x9, 0x7, 0x1, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfc30}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x90, &(0x7f0000000240)=""/144, 0x41100, 0x24, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0xffffffffffffff42, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x5, 0x8}, 0x10, 0xdcf6, r0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x2, 0x10, 0x7}, {0x3, 0x5, 0x1, 0xb}, {0x2, 0x4, 0x4, 0xc}], 0x10, 0x6}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r0, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r7, r0, 0x2d, 0x32, r6, @void, @void, @void, @value=r8}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) sendmsg$IPCTNL_MSG_CT_NEW(r11, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) 654.771209ms ago: executing program 5 (id=459): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x1c) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8001}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a", 0x21) socket$netlink(0x10, 0x3, 0x0) 622.70424ms ago: executing program 6 (id=460): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000200)="7c39cb55bf78d9cde36d604af0e1e1885428b193ca9b1b8f5dd7e28c3e98dcdeba38fcad78828d5b655e697aa0b62b101d033de0819b818373dc9ef591abf9d508786f0f9eec50532f0578a91b135dbbf7095181c12e08ed9220055db78dadaa1b84e97e10e55eea9fcf5ce357aa580d7211058ac4da315fcb939f69100fc85c0b8f431fde45a5ecca580b424d02d2dbcc681e496891bf17b15b1ebcc6ace6f0dac16d040ef7b8ca08346c3622e8455ff4cafbe38d57a31a697695e7bb5334b946c8002f3cc7083b502e", 0x0, 0x4}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 567.0963ms ago: executing program 8 (id=461): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1) shutdown(r0, 0x1) 338.846084ms ago: executing program 7 (id=462): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c"], 0xf0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 338.494624ms ago: executing program 8 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x0, 0x0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 321.648975ms ago: executing program 5 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x7, 0x290, @void, @void, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 122.951948ms ago: executing program 5 (id=465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x5004, 0x7, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 7 (id=466): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000004380)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x40000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) kernel console output (not intermixed with test programs): ][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.682985][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.691205][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.648306][ T4412] loop3: detected capacity change from 0 to 1024 [ 67.839871][ T4412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 67.848519][ T4412] System zones: 0-1, 3-36 [ 67.936880][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.194374][ T26] audit: type=1326 audit(2000000002.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 68.436280][ T26] audit: type=1326 audit(2000000003.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 68.566435][ T26] audit: type=1326 audit(2000000003.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.433571][ T26] audit: type=1326 audit(2000000003.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.455812][ T26] audit: type=1326 audit(2000000003.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.532847][ T26] audit: type=1326 audit(2000000003.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.556566][ T26] audit: type=1326 audit(2000000003.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.611122][ T26] audit: type=1326 audit(2000000003.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.708141][ T4424] overlayfs: failed to resolve './file0': -2 [ 69.742513][ T26] audit: type=1326 audit(2000000003.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.770287][ T26] audit: type=1326 audit(2000000003.220:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4411 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 69.988011][ T4429] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.188681][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.195244][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.315379][ T4449] loop0: detected capacity change from 0 to 512 [ 71.348623][ T4452] loop1: detected capacity change from 0 to 16 [ 72.655978][ T4449] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 72.707356][ T4449] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.726605][ T4449] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.40: bad orphan inode 15 [ 72.757955][ T4449] ext4_test_bit(bit=14, block=18) = 1 [ 72.776458][ T4449] is_bad_inode(inode)=0 [ 72.788629][ T4449] NEXT_ORPHAN(inode)=1023 [ 72.799837][ T4449] max_ino=32 [ 72.812994][ T4449] i_nlink=0 [ 72.817457][ T4449] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2941: inode #15: comm syz.0.40: corrupted xattr block 19 [ 72.850452][ T4449] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 72.876123][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.022202][ T4452] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.103156][ T4452] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 73.265392][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.280424][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.288734][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.915222][ T4474] loop4: detected capacity change from 0 to 1024 [ 74.211703][ T4474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 74.220291][ T4474] System zones: 0-1, 3-36 [ 74.285238][ T4474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.983035][ T4481] loop0: detected capacity change from 0 to 256 [ 75.458915][ T4484] loop3: detected capacity change from 0 to 2048 [ 76.295470][ T7] cfg80211: failed to load regulatory.db [ 76.444490][ T4484] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 76.475860][ T4481] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.536548][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 76.536561][ T26] audit: type=1800 audit(2000000011.350:25): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 79.640295][ T4520] loop2: detected capacity change from 0 to 512 [ 79.775586][ T4524] loop3: detected capacity change from 0 to 512 [ 79.857322][ T4520] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 79.869293][ T4520] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.892540][ T4524] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.967927][ T4524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 80.003690][ T4520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 80.437804][ T4524] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.445242][ T4524] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.63: bg 0: block 361: padding at end of block bitmap is not set [ 80.462953][ T4520] System zones: 1-12 [ 81.450534][ T4524] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 81.580525][ T4530] loop4: detected capacity change from 0 to 1024 [ 82.461121][ T4524] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.63: attempt to clear invalid blocks 33619980 len 1 [ 83.445238][ T4520] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.61: corrupted in-inode xattr [ 83.575637][ T4524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.63: invalid indirect mapped block 1811939328 (level 0) [ 83.641632][ T4520] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.61: couldn't read orphan inode 15 (err -117) [ 83.656288][ T4524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.63: invalid indirect mapped block 2185560079 (level 1) [ 83.681457][ T4530] EXT4-fs: failed to create workqueue [ 83.686844][ T4530] EXT4-fs (loop4): mount failed [ 83.724795][ T4520] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 83.796726][ T4524] EXT4-fs (loop3): 1 truncate cleaned up [ 83.874933][ T4524] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,noblock_validity,dioread_lock,resuid=0x0000000000000000,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 84.333418][ T4546] loop3: detected capacity change from 0 to 256 [ 84.368600][ T4536] syz.1.68[4536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.368694][ T4536] syz.1.68[4536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.429160][ T4536] loop1: detected capacity change from 0 to 128 [ 85.265969][ T4555] loop4: detected capacity change from 0 to 256 [ 85.275651][ T4553] loop2: detected capacity change from 0 to 8192 [ 85.311761][ T26] audit: type=1326 audit(2000000020.130:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.421985][ T26] audit: type=1326 audit(2000000020.130:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.479158][ T26] audit: type=1326 audit(2000000020.130:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.508038][ T26] audit: type=1326 audit(2000000020.130:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.555276][ T26] audit: type=1326 audit(2000000020.130:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.625315][ T26] audit: type=1326 audit(2000000020.130:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.903668][ T4562] loop4: detected capacity change from 0 to 512 [ 85.917402][ T26] audit: type=1326 audit(2000000020.360:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.959629][ T26] audit: type=1326 audit(2000000020.360:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 85.995082][ T26] audit: type=1326 audit(2000000020.430:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 86.335872][ T4566] loop0: detected capacity change from 0 to 40427 [ 86.800671][ T26] audit: type=1326 audit(2000000020.430:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4556 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 88.807709][ T4566] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.815718][ T4566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.880274][ T4562] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 88.892830][ T4566] F2FS-fs (loop0): invalid crc value [ 88.898878][ T4566] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 88.996654][ T4562] EXT4-fs: failed to create workqueue [ 89.041073][ T4562] EXT4-fs (loop4): mount failed [ 89.443338][ T4571] loop1: detected capacity change from 0 to 40427 [ 89.516521][ T4571] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 89.564957][ T4571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.627558][ T4588] Zero length message leads to an empty skb [ 89.949682][ T4571] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 91.973479][ T4621] loop1: detected capacity change from 0 to 256 [ 92.115082][ T4623] loop0: detected capacity change from 0 to 512 [ 92.140385][ T4621] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 92.190735][ T4623] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 92.220840][ T4623] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.261282][ T4623] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.92: bad orphan inode 15 [ 92.284556][ T4621] exFAT-fs (loop1): hint_cluster is invalid (17) [ 92.334525][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 92.334537][ T26] audit: type=1800 audit(2000000027.150:56): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="file1" dev="loop1" ino=1048621 res=0 errno=0 [ 92.362790][ T4623] ext4_test_bit(bit=14, block=18) = 1 [ 92.368718][ T4623] is_bad_inode(inode)=0 [ 92.374840][ T4623] NEXT_ORPHAN(inode)=1023 [ 92.386020][ T4623] max_ino=32 [ 92.389225][ T4623] i_nlink=0 [ 92.404084][ T4623] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2941: inode #15: comm syz.0.92: corrupted xattr block 19 [ 92.451988][ T4623] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 92.489898][ T4623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.679231][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.690347][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.697828][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.707951][ T4633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 93.330668][ T4648] loop0: detected capacity change from 0 to 1024 [ 93.520180][ T4648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 93.528822][ T4648] System zones: 0-1, 3-36 [ 93.601430][ T4648] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.655411][ T26] audit: type=1326 audit(2000000030.470:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 95.943808][ T4658] loop3: detected capacity change from 0 to 256 [ 96.132167][ T26] audit: type=1326 audit(2000000030.570:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 96.310184][ T4658] FAT-fs (loop3): Directory bread(block 64) failed [ 96.357318][ T4658] FAT-fs (loop3): Directory bread(block 65) failed [ 96.371363][ T4658] FAT-fs (loop3): Directory bread(block 66) failed [ 96.377980][ T26] audit: type=1326 audit(2000000030.570:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 96.441082][ T4658] FAT-fs (loop3): Directory bread(block 67) failed [ 96.447675][ T4658] FAT-fs (loop3): Directory bread(block 68) failed [ 96.484939][ T4658] FAT-fs (loop3): Directory bread(block 69) failed [ 96.507810][ T26] audit: type=1326 audit(2000000030.570:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 96.540512][ T4658] FAT-fs (loop3): Directory bread(block 70) failed [ 96.570794][ T4658] FAT-fs (loop3): Directory bread(block 71) failed [ 96.622839][ T4658] FAT-fs (loop3): Directory bread(block 72) failed [ 96.629401][ T4658] FAT-fs (loop3): Directory bread(block 73) failed [ 96.660282][ T26] audit: type=1326 audit(2000000030.570:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 96.820703][ T26] audit: type=1326 audit(2000000030.580:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 96.959045][ T26] audit: type=1326 audit(2000000030.580:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 97.056546][ T26] audit: type=1326 audit(2000000030.580:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf5c8859e3 code=0x7ffc0000 [ 97.106262][ T26] audit: type=1326 audit(2000000030.600:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcf5c88445f code=0x7ffc0000 [ 97.192791][ T4667] loop2: detected capacity change from 0 to 512 [ 97.203854][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.227000][ T4667] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.244920][ T4667] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.252278][ T4667] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.109: bad orphan inode 15 [ 97.273618][ T4667] ext4_test_bit(bit=14, block=18) = 1 [ 97.279001][ T4667] is_bad_inode(inode)=0 [ 97.285698][ T4667] NEXT_ORPHAN(inode)=1023 [ 97.290105][ T4667] max_ino=32 [ 97.295394][ T4667] i_nlink=0 [ 97.298985][ T4667] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2941: inode #15: comm syz.2.109: corrupted xattr block 19 [ 97.311489][ T4667] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 97.320538][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.480225][ T4673] loop0: detected capacity change from 0 to 256 [ 97.510984][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 97.510997][ T26] audit: type=1326 audit(2000000032.310:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 97.575596][ T26] audit: type=1326 audit(2000000032.310:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 97.956775][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.966478][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.973923][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.979061][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 97.983709][ T4676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.033000][ T4673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 98.076904][ T26] audit: type=1326 audit(2000000032.310:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.106296][ T4675] loop3: detected capacity change from 0 to 256 [ 98.186474][ T4317] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.205419][ T4317] usb 2-1: config 0 has no interface number 0 [ 98.212490][ T4317] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.213524][ T4675] exfat: Bad value for 'gid' [ 98.223796][ T4317] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.237952][ T26] audit: type=1326 audit(2000000032.310:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.262408][ T4317] usb 2-1: config 0 interface 2 has no altsetting 0 [ 98.272448][ T26] audit: type=1326 audit(2000000032.380:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.347442][ T26] audit: type=1326 audit(2000000032.380:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.454859][ T26] audit: type=1326 audit(2000000032.380:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.477434][ T4317] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 98.490249][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.512935][ T4317] usb 2-1: Product: syz [ 98.530601][ T4317] usb 2-1: Manufacturer: syz [ 98.539841][ T4317] usb 2-1: SerialNumber: syz [ 98.544736][ T26] audit: type=1326 audit(2000000032.380:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.576055][ T4317] usb 2-1: config 0 descriptor?? [ 98.610927][ T26] audit: type=1326 audit(2000000032.380:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 98.654354][ T26] audit: type=1326 audit(2000000032.900:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.3.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 99.609651][ T4688] loop2: detected capacity change from 0 to 40427 [ 99.644484][ T4317] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 99.645308][ T4688] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.656989][ T4317] usb 2-1: USB disconnect, device number 2 [ 99.790489][ T4704] loop1: detected capacity change from 0 to 1024 [ 99.861521][ T4688] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.458204][ T4688] F2FS-fs (loop2): invalid crc value [ 102.544644][ T4688] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 102.563844][ T4704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 102.572174][ T4704] System zones: 0-1, 3-36 [ 102.576874][ T4704] EXT4-fs: error -4 creating inode table initialization thread [ 102.585007][ T4704] EXT4-fs (loop1): mount failed [ 103.498789][ T4596] udevd[4596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.889934][ T4732] loop0: detected capacity change from 0 to 2048 [ 103.950621][ T4592] Alternate GPT is invalid, using primary GPT. [ 104.416661][ T4592] loop0: p1 p2 p3 [ 104.647625][ T4732] Alternate GPT is invalid, using primary GPT. [ 104.691218][ T4732] loop0: p1 p2 p3 [ 104.727200][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 104.727213][ T26] audit: type=1326 audit(2000000039.540:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 104.842974][ T4745] loop4: detected capacity change from 0 to 512 [ 104.849866][ T26] audit: type=1326 audit(2000000039.590:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 104.918401][ T26] audit: type=1326 audit(2000000039.590:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 104.940723][ T26] audit: type=1326 audit(2000000039.590:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 105.029442][ T26] audit: type=1326 audit(2000000039.620:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 105.048163][ T4745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.076623][ T4745] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.103325][ T4592] udevd[4592]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 105.123859][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 105.123993][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 105.295565][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 105.308344][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 105.330829][ T26] audit: type=1326 audit(2000000039.620:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 105.353281][ T26] audit: type=1326 audit(2000000039.620:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 105.376084][ T26] audit: type=1326 audit(2000000039.620:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 105.636488][ T26] audit: type=1326 audit(2000000039.620:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 106.183640][ T4764] loop2: detected capacity change from 0 to 256 [ 106.204949][ T4592] udevd[4592]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 106.458610][ T26] audit: type=1326 audit(2000000039.620:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8549069a9 code=0x7ffc0000 [ 107.313570][ T4764] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 108.528706][ T4777] loop3: detected capacity change from 0 to 1024 [ 108.792486][ T4777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 108.801215][ T4777] System zones: 0-1, 3-36 [ 108.850846][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.313875][ T4783] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'. [ 111.616009][ T4806] loop2: detected capacity change from 0 to 1024 [ 113.462439][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 113.462452][ T26] audit: type=1326 audit(2000000048.280:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 114.077946][ T26] audit: type=1326 audit(2000000048.310:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 114.102003][ T4806] EXT4-fs: failed to create workqueue [ 114.107386][ T4806] EXT4-fs (loop2): mount failed [ 114.201874][ T4827] loop0: detected capacity change from 0 to 512 [ 114.261008][ T26] audit: type=1326 audit(2000000048.580:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 114.414105][ T26] audit: type=1326 audit(2000000048.580:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 114.440499][ T26] audit: type=1326 audit(2000000048.590:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 114.629815][ T4837] loop1: detected capacity change from 0 to 1024 [ 115.133364][ T4827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.190270][ T4837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 115.198897][ T4837] System zones: 0-1, 3-36 [ 115.262005][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.599325][ T4827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 115.680206][ T4827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.686973][ T26] audit: type=1326 audit(2000000048.590:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 115.838483][ T4827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.152: bg 0: block 361: padding at end of block bitmap is not set [ 115.987480][ T26] audit: type=1326 audit(2000000048.590:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 116.261106][ T4827] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 116.433187][ T26] audit: type=1326 audit(2000000048.590:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 116.500940][ T26] audit: type=1326 audit(2000000048.590:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 116.528233][ T4827] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.152: attempt to clear invalid blocks 33619980 len 1 [ 116.798406][ T26] audit: type=1326 audit(2000000048.600:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5c8859a9 code=0x7ffc0000 [ 116.891155][ T4827] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.152: invalid indirect mapped block 1811939328 (level 0) [ 116.967669][ T4827] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.152: invalid indirect mapped block 2185560079 (level 1) [ 117.042034][ T4827] EXT4-fs (loop0): 1 truncate cleaned up [ 117.081010][ T4827] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,noblock_validity,dioread_lock,resuid=0x0000000000000000,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 117.569245][ T4878] loop0: detected capacity change from 0 to 128 [ 118.345571][ T4887] loop1: detected capacity change from 0 to 512 [ 118.467329][ T4887] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.609800][ T4887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.801178][ T4887] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.169: bad orphan inode 15 [ 120.509545][ T4887] ext4_test_bit(bit=14, block=18) = 1 [ 120.515018][ T4887] is_bad_inode(inode)=0 [ 120.540967][ T4887] NEXT_ORPHAN(inode)=1023 [ 120.545325][ T4887] max_ino=32 [ 120.548513][ T4887] i_nlink=0 [ 120.640961][ T4887] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #15: comm syz.1.169: corrupted xattr block 19 [ 120.683248][ T4887] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 120.725908][ T4887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.734058][ T4904] loop0: detected capacity change from 0 to 512 [ 120.958413][ T4914] loop2: detected capacity change from 0 to 256 [ 120.966854][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 120.993002][ T4904] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.054439][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.076151][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.084527][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.106079][ T4915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.194801][ T4914] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.232077][ T4914] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 122.290074][ T4914] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001031b, chksum : 0xd41f077c, utbl_chksum : 0xe619d30d) [ 122.953582][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.326327][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 123.561199][ T7] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 123.573344][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.583406][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.593375][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.603910][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 123.614668][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.941272][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.551002][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.568806][ T7] usb 2-1: SerialNumber: syz [ 125.691090][ T7] usb 2-1: can't set config #1, error -71 [ 125.721614][ T7] usb 2-1: USB disconnect, device number 3 [ 126.402249][ T4958] loop3: detected capacity change from 0 to 512 [ 126.578951][ T4958] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 126.843805][ T4958] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.012800][ T4958] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.189: bad orphan inode 15 [ 127.201760][ T4958] ext4_test_bit(bit=14, block=18) = 1 [ 127.207170][ T4958] is_bad_inode(inode)=0 [ 127.213750][ T4965] loop0: detected capacity change from 0 to 128 [ 127.433139][ T4968] loop4: detected capacity change from 0 to 2048 [ 128.433767][ T4958] NEXT_ORPHAN(inode)=1023 [ 128.438668][ T4958] max_ino=32 [ 128.444871][ T4958] i_nlink=0 [ 129.434014][ T4958] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2941: inode #15: comm syz.3.189: corrupted xattr block 19 [ 129.461823][ T4965] attempt to access beyond end of device [ 129.461823][ T4965] loop0: rw=2049, want=234, limit=128 [ 129.794433][ T4958] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 129.834170][ T4958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.896389][ T4969] attempt to access beyond end of device [ 129.896389][ T4969] loop0: rw=2049, want=1041, limit=128 [ 129.965471][ T4965] attempt to access beyond end of device [ 129.965471][ T4965] loop0: rw=0, want=242, limit=128 [ 130.041834][ T4973] loop2: detected capacity change from 0 to 128 [ 130.140468][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 130.156386][ T4973] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.408816][ T4968] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 132.577733][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.584072][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.693780][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 132.693794][ T26] audit: type=1326 audit(2000000067.510:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 133.186057][ T26] audit: type=1326 audit(2000000067.550:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 133.347936][ T26] audit: type=1326 audit(2000000067.550:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 133.370274][ T26] audit: type=1326 audit(2000000067.550:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 133.399178][ T26] audit: type=1326 audit(2000000067.570:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 133.836171][ T26] audit: type=1326 audit(2000000067.570:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 134.182046][ T26] audit: type=1326 audit(2000000067.570:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 134.210927][ T26] audit: type=1326 audit(2000000067.570:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 134.245474][ T5009] loop1: detected capacity change from 0 to 128 [ 134.401044][ T26] audit: type=1326 audit(2000000067.570:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 134.443534][ T5016] loop4: detected capacity change from 0 to 512 [ 134.493063][ T26] audit: type=1326 audit(2000000067.570:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4993 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366dc859a9 code=0x7ffc0000 [ 134.923274][ T5016] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 135.203190][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: none. [ 135.214935][ T5009] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.282291][ T5016] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.292481][ T5016] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.204: bad orphan inode 15 [ 135.414049][ T5009] fscrypt: Error allocating hmac(sha512): -2 [ 135.458515][ T5016] ext4_test_bit(bit=14, block=18) = 1 [ 135.464452][ T5016] is_bad_inode(inode)=0 [ 135.471151][ T5016] NEXT_ORPHAN(inode)=1023 [ 135.491047][ T5016] max_ino=32 [ 135.494253][ T5016] i_nlink=0 [ 135.528126][ T5016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2941: inode #15: comm syz.4.204: corrupted xattr block 19 [ 135.621111][ T5016] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 135.630203][ T5016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.718609][ T5015] loop0: detected capacity change from 0 to 40427 [ 135.881315][ T5015] F2FS-fs (loop0): invalid crc value [ 135.968611][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.989788][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.998854][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.020576][ T5033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.411645][ T5015] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 136.571756][ T5015] F2FS-fs (loop0): Start checkpoint disabled! [ 136.754801][ T5015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 137.043642][ T4444] attempt to access beyond end of device [ 137.043642][ T4444] loop0: rw=2049, want=45104, limit=40427 [ 137.094031][ T5047] loop4: detected capacity change from 0 to 1024 [ 137.187978][ T5047] EXT4-fs (loop4): Ignoring removed oldalloc option [ 137.224863][ T5047] EXT4-fs (loop4): Ignoring removed bh option [ 137.261065][ T5047] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.340431][ T5047] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 143.097963][ T5075] netlink: 260 bytes leftover after parsing attributes in process `syz.0.215'. [ 144.213016][ T5077] loop4: detected capacity change from 0 to 1024 [ 145.506512][ T5085] loop0: detected capacity change from 0 to 512 [ 146.157559][ T5077] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 146.322689][ T5093] loop3: detected capacity change from 0 to 128 [ 146.436796][ T5085] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 146.450570][ T5093] EXT4-fs (loop3): Test dummy encryption mode enabled [ 146.458289][ T5093] EXT4-fs (loop3): Test dummy encryption mode enabled [ 146.631365][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 146.647398][ T5093] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.839129][ T5085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.134195][ T5085] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.220: bad orphan inode 15 [ 147.241653][ T5085] ext4_test_bit(bit=14, block=18) = 1 [ 147.301239][ T5085] is_bad_inode(inode)=0 [ 147.441524][ T5085] NEXT_ORPHAN(inode)=1023 [ 147.686343][ T5085] max_ino=32 [ 147.696495][ T5085] i_nlink=0 [ 147.744646][ T5085] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2941: inode #15: comm syz.0.220: corrupted xattr block 19 [ 147.962088][ T5085] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 148.026422][ T5085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.094195][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 148.171123][ T4250] Bluetooth: hci5: command 0x0409 tx timeout [ 148.926373][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.935457][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.942961][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.952351][ T5105] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.956388][ T5113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 150.923081][ T5123] loop3: detected capacity change from 0 to 2048 [ 150.998960][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 151.723172][ T5123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.009782][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.028860][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.112737][ T5086] device bridge_slave_0 entered promiscuous mode [ 152.194517][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.269235][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.348266][ T5125] loop4: detected capacity change from 0 to 8192 [ 152.355748][ T5086] device bridge_slave_1 entered promiscuous mode [ 152.572728][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.761744][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.988376][ T5086] team0: Port device team_slave_0 added [ 153.067540][ T5142] loop3: detected capacity change from 0 to 256 [ 153.097170][ T5086] team0: Port device team_slave_1 added [ 153.134898][ T5142] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 153.183965][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 153.183978][ T26] audit: type=1800 audit(2000000088.000:210): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="file1" dev="loop3" ino=1048632 res=0 errno=0 [ 153.211209][ T4250] Bluetooth: hci5: command 0x040f tx timeout [ 153.288470][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.301220][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.357839][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.449630][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.473168][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.540319][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.806286][ T5086] device hsr_slave_0 entered promiscuous mode [ 153.838182][ T5086] device hsr_slave_1 entered promiscuous mode [ 153.850187][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.865170][ T5086] Cannot create hsr debugfs directory [ 153.875320][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 154.071658][ T5150] loop0: detected capacity change from 0 to 8192 [ 154.438752][ T4173] Bluetooth: hci6: command 0x0409 tx timeout [ 154.639510][ T5166] syz.4.234[5166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.639937][ T5166] syz.4.234[5166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.105204][ T5167] loop0: detected capacity change from 0 to 512 [ 155.357657][ T5167] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 155.442554][ T5167] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.470996][ T5167] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.235: bad orphan inode 15 [ 155.520140][ T5167] ext4_test_bit(bit=14, block=18) = 1 [ 155.525952][ T5167] is_bad_inode(inode)=0 [ 155.549322][ T5167] NEXT_ORPHAN(inode)=1023 [ 155.559427][ T5167] max_ino=32 [ 155.581099][ T5167] i_nlink=0 [ 155.597062][ T5167] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2941: inode #15: comm syz.0.235: corrupted xattr block 19 [ 155.641491][ T5167] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 155.690988][ T5167] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.430751][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 156.464836][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.473808][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.481303][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.490563][ T5171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.576210][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.588701][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 156.621208][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.629554][ T5134] device bridge_slave_0 entered promiscuous mode [ 156.650038][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.651375][ T4184] syz-executor (4184) used greatest stack depth: 20800 bytes left [ 156.665062][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.694145][ T5134] device bridge_slave_1 entered promiscuous mode [ 156.826212][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.853412][ T5086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.879449][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.895853][ T5086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.950431][ T5086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.965717][ T5086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.995769][ T5134] team0: Port device team_slave_0 added [ 157.084266][ T5134] team0: Port device team_slave_1 added [ 157.196089][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.211829][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.281503][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.313289][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.321067][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.389587][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.408037][ T5174] loop4: detected capacity change from 0 to 40427 [ 157.472865][ T5174] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.483513][ T5134] device hsr_slave_0 entered promiscuous mode [ 157.509078][ T5134] device hsr_slave_1 entered promiscuous mode [ 157.561974][ T5134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.570401][ T5134] Cannot create hsr debugfs directory [ 157.584315][ T5174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.663618][ T4183] attempt to access beyond end of device [ 157.663618][ T4183] loop4: rw=2049, want=45104, limit=40427 [ 157.913595][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.087903][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.218915][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.444348][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.529483][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.551484][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.561528][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.568582][ T4879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.629043][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.638020][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.647966][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.651151][ T4250] Bluetooth: hci6: command 0x040f tx timeout [ 158.655053][ T4879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.702969][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.729132][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.819280][ T5086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.894179][ T5207] loop3: detected capacity change from 0 to 512 [ 158.935767][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.005750][ T5207] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.054770][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.091978][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.256105][ T5207] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.316445][ T5207] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.244: bad orphan inode 15 [ 159.396775][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.526637][ T5207] ext4_test_bit(bit=14, block=18) = 1 [ 159.605091][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.673127][ T5207] is_bad_inode(inode)=0 [ 159.809103][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.818914][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.827344][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.840968][ T5207] NEXT_ORPHAN(inode)=1023 [ 159.845304][ T5207] max_ino=32 [ 159.872153][ T5207] i_nlink=0 [ 159.877185][ T5207] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2941: inode #15: comm syz.3.244: corrupted xattr block 19 [ 159.880527][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.899580][ T5207] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 159.909891][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.920610][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.939071][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.999589][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.578586][ T26] audit: type=1326 audit(2000000095.390:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 160.646429][ T5134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.720477][ T26] audit: type=1326 audit(2000000095.420:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 160.741149][ T4257] Bluetooth: hci6: command 0x0419 tx timeout [ 160.751153][ T26] audit: type=1326 audit(2000000095.420:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 160.773161][ T5134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.775188][ T26] audit: type=1326 audit(2000000095.420:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 160.894433][ T26] audit: type=1326 audit(2000000095.420:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.156222][ T26] audit: type=1326 audit(2000000095.420:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.201693][ T5229] loop0: detected capacity change from 0 to 128 [ 161.229965][ T5229] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.241982][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.251739][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.259193][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.269237][ T5226] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.306824][ T26] audit: type=1326 audit(2000000095.420:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.329226][ T5134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.348074][ T26] audit: type=1326 audit(2000000095.420:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.394185][ T5134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.490031][ T4317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.499685][ T5229] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 161.560303][ T5229] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.566019][ T26] audit: type=1326 audit(2000000095.420:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.593513][ T26] audit: type=1326 audit(2000000095.420:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46907579a9 code=0x7ffc0000 [ 161.611904][ T4317] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.676813][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.707261][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.715395][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.769228][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.819279][ T5252] loop4: detected capacity change from 0 to 1024 [ 161.881760][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.902072][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.914183][ T5249] fido_id[5249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.943292][ T5252] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.956848][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.987797][ T4458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.011867][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.032445][ T5229] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 162.032513][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.032890][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.057259][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.065182][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.083115][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.092298][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.101631][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.108789][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.151933][ T4458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.209364][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.227516][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.299966][ T5271] loop4: detected capacity change from 0 to 256 [ 162.313098][ T4458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.316526][ T5271] exfat: Deprecated parameter 'namecase' [ 162.361739][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.370176][ T5271] exfat: Deprecated parameter 'utf8' [ 162.387518][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.401065][ T5271] exfat: Deprecated parameter 'namecase' [ 162.416431][ T5271] exfat: Deprecated parameter 'utf8' [ 162.437699][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.472610][ T5271] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 162.475819][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.507330][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.517022][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.528014][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.537095][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.549976][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.574926][ T4458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.604817][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.710366][ T5277] tipc: Started in network mode [ 162.740367][ T5277] tipc: Node identity 3e639abf8c5, cluster identity 4711 [ 162.846222][ T5277] tipc: Enabled bearer , priority 0 [ 162.906239][ T5278] device syzkaller0 entered promiscuous mode [ 162.913298][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.954499][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.065863][ T5086] device veth0_vlan entered promiscuous mode [ 163.086096][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.124603][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.133436][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.141253][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.209624][ T5086] device veth1_vlan entered promiscuous mode [ 163.324630][ T4458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.376244][ T5086] device veth0_macvtap entered promiscuous mode [ 163.406626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.421786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.458154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.486941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.523784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.582844][ T4458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.633493][ T5086] device veth1_macvtap entered promiscuous mode [ 163.651055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.671297][ T5276] tipc: Resetting bearer [ 163.707580][ T5276] tipc: Disabling bearer [ 163.740993][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.780912][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.797761][ T5282] loop3: detected capacity change from 0 to 40427 [ 163.801007][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.831826][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.836387][ T5282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.860843][ T5282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.872041][ T5291] loop4: detected capacity change from 0 to 40427 [ 163.878591][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.891169][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.901434][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.918401][ T5282] F2FS-fs (loop3): invalid crc value [ 163.920898][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.946340][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.964596][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.979064][ T5282] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.003274][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.033652][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.048808][ T5282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.048822][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.048836][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.062532][ T5282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.083264][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.102663][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.118340][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.128529][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.139455][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.150774][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.168597][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.190956][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.198301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.252087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.252491][ T5291] F2FS-fs (loop4): invalid crc value [ 164.259622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.278117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.295485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.298785][ T5291] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.316851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.336026][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.367561][ T5086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.400909][ T5086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.439441][ T5282] attempt to access beyond end of device [ 164.439441][ T5282] loop3: rw=2049, want=79880, limit=40427 [ 164.469399][ T5291] F2FS-fs (loop4): Start checkpoint disabled! [ 164.476398][ T5086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.491313][ T5291] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 164.499430][ T5086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.523929][ T4458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.546496][ T5282] attempt to access beyond end of device [ 164.546496][ T5282] loop3: rw=2049, want=81920, limit=40427 [ 164.664171][ T4458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.719928][ T5282] attempt to access beyond end of device [ 164.719928][ T5282] loop3: rw=2049, want=51200, limit=40427 [ 164.872559][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.879899][ T5282] attempt to access beyond end of device [ 164.879899][ T5282] loop3: rw=2049, want=53248, limit=40427 [ 164.895302][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.947463][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.005486][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.019936][ T5282] attempt to access beyond end of device [ 165.019936][ T5282] loop3: rw=2049, want=59416, limit=40427 [ 165.049319][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.082605][ T4364] attempt to access beyond end of device [ 165.082605][ T4364] loop4: rw=2049, want=40968, limit=40427 [ 165.111610][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.187399][ T5282] attempt to access beyond end of device [ 165.187399][ T5282] loop3: rw=2049, want=62968, limit=40427 [ 165.209275][ T4458] tipc: Left network mode [ 165.248333][ T5282] attempt to access beyond end of device [ 165.248333][ T5282] loop3: rw=2049, want=63728, limit=40427 [ 165.295167][ T5335] loop5: detected capacity change from 0 to 256 [ 165.494916][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.504481][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.766321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.909914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.286123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.366705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.382706][ T5134] device veth0_vlan entered promiscuous mode [ 166.454429][ T5134] device veth1_vlan entered promiscuous mode [ 166.574469][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.592292][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.626720][ T5134] device veth0_macvtap entered promiscuous mode [ 166.785988][ T5134] device veth1_macvtap entered promiscuous mode [ 167.544401][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.573516][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.614050][ T5361] loop4: detected capacity change from 0 to 512 [ 167.639419][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.660159][ T5361] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext3 [ 167.701011][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.727332][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.760984][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.799986][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.828416][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.849083][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.860490][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.873030][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.884215][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.895222][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.915317][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.937167][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.947163][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 167.960840][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.025656][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.066042][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.076509][ T1107] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 168.103187][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.120977][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.141576][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.151598][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.161860][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.174541][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.185146][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.186666][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 168.208891][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.222047][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.232825][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.245900][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.257407][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.268538][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.278932][ T5361] loop4: detected capacity change from 0 to 128 [ 168.289178][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 168.340997][ T1107] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 168.442946][ T5361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.456722][ T1107] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.472622][ T5361] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.487901][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.510810][ T5361] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 168.528551][ T5361] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 168.540820][ T1107] usb 6-1: SerialNumber: syz [ 168.560150][ T5361] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 168.577028][ T5361] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 168.601363][ T5354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.609851][ T5361] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 168.626265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.631769][ T1107] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 168.646068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.663884][ T1107] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 168.690709][ T5361] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 168.705667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.741641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.750523][ T5378] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 168.764753][ T5134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.798727][ T5134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.802363][ T5378] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 168.818572][ T5134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.917642][ T1107] usb 6-1: USB disconnect, device number 2 [ 168.926354][ T5134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.973871][ T5361] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 169.110046][ T5361] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 169.325745][ T5378] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 169.618668][ T5378] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 169.791021][ T5387] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 169.927620][ T5387] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 170.016668][ T5361] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.272: No space for directory leaf checksum. Please run e2fsck -D. [ 170.101530][ T5361] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.272: checksumming directory block 0 [ 170.741268][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 170.844468][ T5404] loop4: detected capacity change from 0 to 1024 [ 170.898470][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.964507][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.004207][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 171.011761][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 171.047705][ T5415] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 171.057120][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.065256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.076366][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.084258][ T5415] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 171.105084][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.130962][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.161385][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.180622][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.461416][ T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.480809][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.573649][ T4191] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 171.629862][ T21] usb 4-1: Product: syz [ 171.680165][ T21] usb 4-1: Manufacturer: syz [ 171.824114][ T21] usb 4-1: SerialNumber: syz [ 172.135867][ T7] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.151250][ T4191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.160960][ T7] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 172.170175][ T7] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 172.188770][ T7] usb 6-1: config 220 has no interface number 2 [ 172.195185][ T7] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.210999][ T4191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.221117][ T7] usb 6-1: config 220 interface 0 has no altsetting 0 [ 172.228608][ T7] usb 6-1: config 220 interface 76 has no altsetting 0 [ 172.239563][ T4191] usb 5-1: too many endpoints for config 1 interface 1 altsetting 125: 83, using maximum allowed: 30 [ 172.245799][ T7] usb 6-1: config 220 interface 1 has no altsetting 0 [ 172.252854][ T4191] usb 5-1: config 1 interface 1 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 172.371239][ T4191] usb 5-1: config 1 interface 1 has no altsetting 0 [ 172.411165][ T7] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.438295][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.476038][ T7] usb 6-1: Product: syz [ 172.480527][ T7] usb 6-1: Manufacturer: syz [ 172.493940][ T7] usb 6-1: SerialNumber: syz [ 172.566186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 172.575315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 172.584355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 172.593305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.602249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.611197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.620895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.630900][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.640894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 172.650897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 173.481083][ T4191] usb 5-1: New USB device found, idVendor=05a5, idProduct=a4a1, bcdDevice= 0.40 [ 173.485601][ T5447] loop0: detected capacity change from 0 to 1024 [ 173.516992][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.550950][ T4191] usb 5-1: Product: syz [ 173.555136][ T4191] usb 5-1: Manufacturer: syz [ 173.581378][ T4191] usb 5-1: SerialNumber: syz [ 173.641788][ T4191] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 173.671943][ T21] usb 4-1: 0:2 : does not exist [ 173.854297][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.862395][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.872941][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.880536][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.053023][ T7] usb 6-1: selecting invalid altsetting 0 [ 174.079535][ T7] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 174.118057][ T7] usb 6-1: No valid video chain found. [ 174.483875][ T1107] usb 5-1: USB disconnect, device number 2 [ 175.039186][ T4608] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.107848][ T4250] Bluetooth: hci6: command 0x0411 tx timeout [ 175.116883][ T4608] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.125888][ T7] usb 6-1: selecting invalid altsetting 0 [ 175.168255][ T7] usbtest: probe of 6-1:220.1 failed with error -22 [ 175.180611][ T5461] loop4: detected capacity change from 0 to 256 [ 175.280505][ T7] usb 6-1: USB disconnect, device number 3 [ 175.444269][ T4458] device hsr_slave_0 left promiscuous mode [ 175.453937][ T4458] device hsr_slave_1 left promiscuous mode [ 175.473001][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.600539][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.878116][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.182933][ T21] usb 4-1: USB disconnect, device number 2 [ 176.205312][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.310089][ T4458] device bridge_slave_1 left promiscuous mode [ 176.350701][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.375409][ T5473] loop5: detected capacity change from 0 to 256 [ 176.469916][ T4458] device bridge_slave_0 left promiscuous mode [ 176.641380][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 176.649575][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 176.655837][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 176.662749][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.675064][ T4592] udevd[4592]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.207015][ T4458] device hsr_slave_0 left promiscuous mode [ 178.216583][ T4458] device hsr_slave_1 left promiscuous mode [ 178.224384][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.232349][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.246633][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.256776][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.269147][ T4458] device bridge_slave_1 left promiscuous mode [ 178.280267][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.314019][ T4458] device bridge_slave_0 left promiscuous mode [ 178.365902][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.572244][ T4458] device veth1_macvtap left promiscuous mode [ 178.587175][ T4458] device veth0_macvtap left promiscuous mode [ 178.596792][ T4458] device veth1_vlan left promiscuous mode [ 178.608498][ T4458] device veth0_vlan left promiscuous mode [ 178.624975][ T4458] device veth1_macvtap left promiscuous mode [ 178.639277][ T4458] device veth0_macvtap left promiscuous mode [ 178.646072][ T4458] device veth1_vlan left promiscuous mode [ 178.667455][ T4458] device veth0_vlan left promiscuous mode [ 178.711732][ T1107] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 178.986078][ T1107] usb 7-1: Using ep0 maxpacket: 8 [ 179.001350][ T4191] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 179.110405][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 179.126439][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 179.165359][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.192321][ T1107] usb 7-1: unable to get BOS descriptor or descriptor too short [ 179.207277][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.302800][ T1107] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 179.329575][ T1107] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 179.345866][ T1107] usb 7-1: config 4 has no interface number 0 [ 179.362770][ T4458] bond0 (unregistering): Released all slaves [ 179.522160][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 179.539518][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 179.551792][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.568234][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.628188][ T4458] bond0 (unregistering): Released all slaves [ 179.631148][ T1107] usb 7-1: string descriptor 0 read error: -22 [ 179.648943][ T1107] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 179.658402][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.661289][ T4191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 179.679353][ T4191] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1616, setting to 64 [ 179.739786][ T1107] usb 7-1: Found UVC 0.02 device (04f2:b746) [ 179.759820][ T1107] usb 7-1: No valid video chain found. [ 179.861225][ T4191] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.880636][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.909763][ T4191] usb 1-1: Product: syz [ 179.914250][ T4191] usb 1-1: Manufacturer: syz [ 179.923166][ T4191] usb 1-1: SerialNumber: syz [ 179.980831][ T4235] usb 7-1: USB disconnect, device number 2 [ 179.986079][ T5501] loop4: detected capacity change from 0 to 128 [ 180.001277][ T5492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 180.138168][ T5501] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue. Quota mode: none. [ 180.151340][ T5501] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.272930][ T5486] loop0: detected capacity change from 0 to 1024 [ 180.521217][ T4191] cdc_ncm 1-1:1.0: bind() failure [ 180.527130][ T5522] loop5: detected capacity change from 0 to 128 [ 180.548971][ T4191] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 180.580984][ T4191] cdc_ncm 1-1:1.1: bind() failure [ 180.621263][ T4191] usb 1-1: USB disconnect, device number 2 [ 180.709526][ T5522] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none. [ 180.726034][ T5526] loop6: detected capacity change from 0 to 4096 [ 180.757459][ T5522] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.151528][ T5537] loop3: detected capacity change from 0 to 1024 [ 181.838669][ T5543] loop0: detected capacity change from 0 to 256 [ 181.864942][ T5526] loop6: detected capacity change from 0 to 256 [ 181.894317][ T5543] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.914166][ T5543] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 181.961994][ T5526] exfat: Deprecated parameter 'debug' [ 181.968432][ T5543] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 181.980686][ T5526] exfat: Unknown parameter 'delalloc' [ 183.220932][ T5556] loop3: detected capacity change from 0 to 16 [ 183.267236][ T5556] erofs: (device loop3): mounted with root inode @ nid 36. [ 183.317529][ T5556] attempt to access beyond end of device [ 183.317529][ T5556] loop3: rw=524288, want=32, limit=16 [ 183.329336][ T5556] attempt to access beyond end of device [ 183.329336][ T5556] loop3: rw=524288, want=24, limit=16 [ 184.160761][ T5562] loop0: detected capacity change from 0 to 512 [ 184.746960][ T5562] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 185.504994][ T5562] EXT4-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 185.954246][ T5584] loop4: detected capacity change from 0 to 1024 [ 186.747469][ T5584] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,abort,errors=continue,. Quota mode: none. [ 188.534936][ T4183] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 188.660160][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 188.682869][ T4173] Bluetooth: hci6: command 0x0405 tx timeout [ 188.836706][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 189.665675][ T4183] EXT4-fs error (device loop4): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 189.968836][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 190.074720][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 190.279179][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 190.304322][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 190.442751][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.518809][ T4183] EXT4-fs error (device loop4): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 190.658599][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 190.735570][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 190.919260][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 191.099434][ T4183] EXT4-fs error (device loop4): empty_inline_dir:1855: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 191.140509][ T5649] loop0: detected capacity change from 0 to 1024 [ 191.213497][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.283060][ T4183] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /87/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 191.315418][ T5649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.367890][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.388678][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.410465][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.447900][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.480432][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.541504][ T4183] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 191.601286][ T4592] udevd[4592]: incorrect jbd checksum on /dev/loop0 [ 191.611240][ T5649] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.328: Invalid inode table block 0 in block_group 0 [ 191.657733][ T5649] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 191.691654][ T5649] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.328: mark_inode_dirty error [ 191.734874][ T5649] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.328: Invalid inode table block 0 in block_group 0 [ 191.782256][ T5649] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 191.820072][ T5649] EXT4-fs error (device loop0): ext4_alloc_file_blocks:4552: inode #16: comm syz.0.328: mark_inode_dirty error [ 191.941933][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 192.049823][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 192.085354][ T4185] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #2: comm syz-executor: mark_inode_dirty error [ 192.128900][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 192.410447][ T5683] netlink: 'syz.6.335': attribute type 1 has an invalid length. [ 193.690730][ T5700] loop6: detected capacity change from 0 to 8192 [ 193.739931][ T5700] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.934578][ T5710] loop5: detected capacity change from 0 to 1024 [ 194.018359][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.024712][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.099078][ T5710] EXT4-fs (loop5): inline encryption not supported [ 194.152350][ T5710] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.441624][ T5710] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 194.525596][ T5701] chnl_net:caif_netlink_parms(): no params data found [ 194.686871][ T5710] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.344: Allocating blocks 497-513 which overlap fs metadata [ 194.709064][ T5733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 194.786978][ T5710] EXT4-fs (loop5): pa ffff888073d33e00: logic 128, phys. 385, len 8 [ 194.795325][ T5710] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 194.956739][ T4458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.067341][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.089800][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.129848][ T5701] device bridge_slave_0 entered promiscuous mode [ 195.233073][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.240161][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.305292][ T5701] device bridge_slave_1 entered promiscuous mode [ 195.362410][ T4458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.533010][ T5701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.558978][ T4458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.655473][ T5701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.688565][ T5716] chnl_net:caif_netlink_parms(): no params data found [ 195.712367][ T4458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.790955][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 195.848221][ T5701] team0: Port device team_slave_0 added [ 195.884725][ T5701] team0: Port device team_slave_1 added [ 196.072195][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.079156][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.157825][ T5701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.233135][ T4458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.275283][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.291354][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.299448][ T5716] device bridge_slave_0 entered promiscuous mode [ 196.325235][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.333397][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.341076][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 196.441038][ T5701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.482804][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.500085][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.519571][ T5716] device bridge_slave_1 entered promiscuous mode [ 196.542844][ T4458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.157869][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.294905][ T5701] device hsr_slave_0 entered promiscuous mode [ 197.401637][ T5701] device hsr_slave_1 entered promiscuous mode [ 197.483614][ T4458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.508609][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.549072][ T5796] syz.5.360 uses obsolete (PF_INET,SOCK_PACKET) [ 197.598914][ T4458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.648150][ T5716] team0: Port device team_slave_0 added [ 197.666665][ T5716] team0: Port device team_slave_1 added [ 197.815135][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.827610][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.854386][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 197.863469][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.930616][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.944831][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.996136][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.154923][ T5818] loop5: detected capacity change from 0 to 2048 [ 198.165334][ T5716] device hsr_slave_0 entered promiscuous mode [ 198.180118][ T5716] device hsr_slave_1 entered promiscuous mode [ 198.186886][ T5716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.195275][ T5716] Cannot create hsr debugfs directory [ 198.231054][ T5818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.370391][ T4458] tipc: Left network mode [ 198.412125][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 198.496357][ T5701] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.556911][ T5701] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.857052][ T5701] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.704341][ T5854] loop5: detected capacity change from 0 to 1024 [ 199.728539][ T5701] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.792909][ T5854] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.953014][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 200.212342][ T5716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.253339][ T5716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.363992][ T5887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.443625][ T5716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.466833][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.491206][ T5825] Bluetooth: hci1: command 0x040f tx timeout [ 200.497869][ T5716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.614623][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.661806][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.715936][ T5701] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.752390][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.771544][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.806921][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.814060][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.882367][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.929948][ T5910] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.943739][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.995703][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.017607][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.024739][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.149428][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.178083][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.197496][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.239695][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.251746][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.293436][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.339313][ T5701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.366619][ T5701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.400040][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 201.415761][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.435583][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.459654][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.473662][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.496003][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.542913][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.608648][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.662733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.690037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.944519][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.355297][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 202.565224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.581494][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 202.601213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.631230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.638304][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.728161][ T5716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.770338][ T5716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.485851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.579919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.622475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.638965][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.646105][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.668319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.688638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.708768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.730823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.752119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.766770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.782222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.790481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.799009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.807252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.816765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.826157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.841437][ T5972] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 203.853335][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.861845][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.905878][ T5701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.318341][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.334285][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.402658][ T5716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.606845][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.637695][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.719017][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.732271][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.754488][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.762244][ T4250] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 204.789028][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.815265][ T5701] device veth0_vlan entered promiscuous mode [ 204.857453][ T5701] device veth1_vlan entered promiscuous mode [ 204.949531][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.968687][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.021035][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.026600][ T4250] usb 6-1: Using ep0 maxpacket: 16 [ 205.038958][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.074265][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.102324][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.130029][ T5716] device veth0_vlan entered promiscuous mode [ 205.162001][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.171485][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.181132][ T4250] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 205.193202][ T5701] device veth0_macvtap entered promiscuous mode [ 205.201548][ T4250] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.221650][ T4250] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.246496][ T5716] device veth1_vlan entered promiscuous mode [ 205.270706][ T4250] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.288740][ T4250] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 205.299416][ T4250] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.328748][ T5701] device veth1_macvtap entered promiscuous mode [ 205.368201][ T4458] device hsr_slave_0 left promiscuous mode [ 205.382004][ T4458] device hsr_slave_1 left promiscuous mode [ 205.391497][ T4250] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.402617][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.410610][ T4250] usb 6-1: SerialNumber: syz [ 205.418222][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.437233][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.456543][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.464794][ T5995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.472830][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.480633][ T4458] device bridge_slave_1 left promiscuous mode [ 205.488442][ T4250] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 205.497119][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.6.409'. [ 205.506446][ T4250] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 205.513451][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.527150][ T4458] device bridge_slave_0 left promiscuous mode [ 205.534451][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.583795][ T4458] device hsr_slave_0 left promiscuous mode [ 205.593393][ T4458] device hsr_slave_1 left promiscuous mode [ 205.601652][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.609674][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.619814][ T6040] netlink: zone id is out of range [ 205.626013][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.629882][ T6040] netlink: zone id is out of range [ 205.641250][ T6040] netlink: zone id is out of range [ 205.641279][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.646373][ T6040] netlink: zone id is out of range [ 205.646381][ T6040] netlink: zone id is out of range [ 205.646388][ T6040] netlink: zone id is out of range [ 205.646396][ T6040] netlink: zone id is out of range [ 205.646403][ T6040] netlink: zone id is out of range [ 205.646409][ T6040] netlink: zone id is out of range [ 205.698870][ T4402] usb 6-1: USB disconnect, device number 4 [ 205.765768][ T4458] device bridge_slave_1 left promiscuous mode [ 205.776394][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.785679][ T4458] device bridge_slave_0 left promiscuous mode [ 205.795610][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.816226][ T4458] device veth1_macvtap left promiscuous mode [ 205.825911][ T4458] device veth0_macvtap left promiscuous mode [ 205.845845][ T4458] device veth1_vlan left promiscuous mode [ 205.852379][ T4458] device veth0_vlan left promiscuous mode [ 205.861894][ T4458] device veth1_macvtap left promiscuous mode [ 205.878108][ T4458] device veth0_macvtap left promiscuous mode [ 205.884436][ T4458] device veth1_vlan left promiscuous mode [ 205.895887][ T4458] device veth0_vlan left promiscuous mode [ 206.171832][ T6053] loop3: detected capacity change from 0 to 1024 [ 206.226486][ T6053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 206.234906][ T6053] System zones: 0-1, 3-36 [ 206.260632][ T6053] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.357914][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 206.374872][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 206.388642][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.402535][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.470786][ T4458] bond0 (unregistering): Released all slaves [ 206.586130][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 206.602329][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 206.615130][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.628338][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.695684][ T4458] bond0 (unregistering): Released all slaves [ 206.770966][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.787309][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.800007][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 206.808362][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.841512][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.859216][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.883193][ T5716] device veth0_macvtap entered promiscuous mode [ 206.909562][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.926202][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.936438][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.957843][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.967713][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.978703][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.009881][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.029281][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.039831][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.050589][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.065596][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.075451][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.093003][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.104742][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.133551][ T5716] device veth1_macvtap entered promiscuous mode [ 207.181701][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.204053][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.229419][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.259072][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.273004][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.292092][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.307831][ T5701] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.317104][ T5701] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.326899][ T5701] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.336130][ T5701] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.595865][ T6088] netlink: 68 bytes leftover after parsing attributes in process `syz.6.427'. [ 207.843791][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.852004][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.125584][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.157454][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.399486][ T6074] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.408984][ T6074] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.418044][ T6074] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.426948][ T6074] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.543159][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.564148][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.579709][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.593588][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.609746][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.620416][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.640350][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.648143][ T6090] netlink: 'syz.6.428': attribute type 10 has an invalid length. [ 208.664506][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.672295][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.693020][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.700072][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.707969][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.715032][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.728865][ T6090] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.741625][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.760116][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.779745][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.812104][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.834240][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.853120][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.867167][ T5716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.911330][ T5716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.932687][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.967608][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.982842][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.012487][ T5716] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.026077][ T5716] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.042909][ T5716] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.056549][ T5716] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.326391][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.381348][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.448525][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.463296][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.484653][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.502570][ T6130] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 210.572297][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.609335][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.630557][ T6129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.650660][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.661929][ T6129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.670826][ T6129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.679656][ T6129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.690631][ T6129] bond1: (slave geneve2): making interface the new active one [ 210.706227][ T6129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 210.732652][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.759017][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.790951][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.847554][ T6129] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 210.878020][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.925811][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 210.956822][ T6129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.061613][ T6129] syz.3.438 (6129) used greatest stack depth: 18176 bytes left [ 211.624868][ T6167] 9pnet: Insufficient options for proto=fd [ 212.574512][ T6182] loop8: detected capacity change from 0 to 1024 [ 212.797441][ T6182] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.047286][ T6206] netlink: 'syz.7.458': attribute type 12 has an invalid length. [ 213.065584][ T6206] netlink: 132 bytes leftover after parsing attributes in process `syz.7.458'. [ 213.398957][ T6222] device ipvlan2 entered promiscuous mode [ 213.413216][ T6222] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 213.595197][ T6227] ------------[ cut here ]------------ [ 213.630956][ T6227] trace type BPF program uses run-time allocation [ 213.637485][ T6227] WARNING: CPU: 1 PID: 6227 at kernel/bpf/verifier.c:11746 check_map_prog_compatibility+0x6cf/0x870 [ 213.673042][ T6230] loop7: detected capacity change from 0 to 128 [ 213.731342][ T6227] Modules linked in: [ 213.750174][ T6230] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue. Quota mode: none. [ 213.764233][ T6227] CPU: 1 PID: 6227 Comm: syz.5.465 Not tainted 5.15.189-syzkaller #0 [ 213.791037][ T6230] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.838528][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.848943][ T6227] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 213.858665][ T6227] Code: ff e8 95 e3 ef ff 48 c7 c6 a0 27 11 8a e9 0d fd ff ff e8 84 e3 ef ff c6 05 24 e9 cd 0b 01 48 c7 c7 00 24 11 8a e8 41 87 15 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 213.879745][ T6227] RSP: 0018:ffffc900030af450 EFLAGS: 00010246 [ 213.886532][ T6227] RAX: b025bd4a6d770400 RBX: 0000000000000001 RCX: 0000000000080000 [ 213.894980][ T6227] RDX: ffffc900158bf000 RSI: 00000000000045b7 RDI: 00000000000045b8 [ 213.911084][ T6227] RBP: ffff888069f88000 R08: dffffc0000000000 R09: ffffed1017224f24 [ 213.939466][ T6227] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffc900010be038 [ 213.968106][ T6227] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000217c07 [ 213.999317][ T6227] FS: 00007fc4185ef6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 214.029723][ T6227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.081165][ T6227] CR2: 0000560e0f80a950 CR3: 000000002a0e5000 CR4: 00000000003506f0 [ 214.123580][ T6227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.146484][ T6227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.164820][ T6227] Call Trace: [ 214.175648][ T6227] [ 214.190753][ T6227] resolve_pseudo_ldimm64+0x691/0x1030 [ 214.210305][ T6227] ? check_attach_btf_id+0xe60/0xe60 [ 214.226196][ T6227] ? __mark_reg_known+0x1a0/0x1a0 [ 214.242080][ T6227] bpf_check+0x30a4/0xf090 [ 214.262132][ T6227] ? mark_lock+0x94/0x320 [ 214.280151][ T6227] ? bpf_get_btf_vmlinux+0x10/0x10 [ 214.290283][ T6227] ? mark_lock+0x94/0x320 [ 214.303991][ T6227] ? verify_lock_unused+0x140/0x140 [ 214.322059][ T6227] ? verify_lock_unused+0x140/0x140 [ 214.337586][ T6227] ? rcu_lock_release+0x5/0x20 [ 214.355116][ T6227] ? __lock_acquire+0x7c60/0x7c60 [ 214.369804][ T6227] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 214.384381][ T6227] ? lock_chain_count+0x20/0x20 [ 214.397538][ T6227] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 214.420952][ T6227] ? lockdep_hardirqs_on+0x94/0x140 [ 214.431324][ T6227] ? ktime_get_with_offset+0xff/0x320 [ 214.436721][ T6227] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 214.501379][ T6227] ? ktime_get_real_ts64+0x420/0x420 [ 214.506725][ T6227] ? __might_fault+0xb3/0x110 [ 214.530665][ T6227] ? memset+0x1e/0x40 [ 214.536384][ T6227] ? bpf_obj_name_cpy+0x190/0x1d0 [ 214.560911][ T6227] bpf_prog_load+0x1043/0x1550 [ 214.565714][ T6227] ? map_freeze+0x350/0x350 [ 214.570225][ T6227] ? __might_fault+0xb7/0x110 [ 214.610937][ T6227] ? __might_fault+0xb3/0x110 [ 214.615656][ T6227] ? bpf_lsm_bpf+0x5/0x10 [ 214.620013][ T6227] ? security_bpf+0x7a/0xa0 [ 214.651151][ T6227] __sys_bpf+0x4c2/0x670 [ 214.655445][ T6227] ? bpf_link_show_fdinfo+0x340/0x340 [ 214.680918][ T6227] ? vtime_user_exit+0x2dc/0x400 [ 214.685902][ T6227] __x64_sys_bpf+0x78/0x90 [ 214.690328][ T6227] do_syscall_64+0x4c/0xa0 [ 214.740958][ T6227] ? clear_bhb_loop+0x30/0x80 [ 214.745673][ T6227] ? clear_bhb_loop+0x30/0x80 [ 214.750359][ T6227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.770970][ T6227] RIP: 0033:0x7fc41a7879a9 [ 214.781090][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.810306][ T6227] RSP: 002b:00007fc4185ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.818975][ T6227] RAX: ffffffffffffffda RBX: 00007fc41a9aefa0 RCX: 00007fc41a7879a9 [ 214.827220][ T6227] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 214.841046][ T6227] RBP: 00007fc41a809d69 R08: 0000000000000000 R09: 0000000000000000 [ 214.849032][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.873223][ T6227] R13: 0000000000000000 R14: 00007fc41a9aefa0 R15: 00007ffea08b44e8 [ 214.885413][ T6227] [ 214.891223][ T6227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.898504][ T6227] CPU: 1 PID: 6227 Comm: syz.5.465 Not tainted 5.15.189-syzkaller #0 [ 214.906563][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.916604][ T6227] Call Trace: [ 214.919868][ T6227] [ 214.922789][ T6227] dump_stack_lvl+0x168/0x230 [ 214.927457][ T6227] ? show_regs_print_info+0x20/0x20 [ 214.932637][ T6227] ? load_image+0x3b0/0x3b0 [ 214.937134][ T6227] panic+0x2c9/0x7f0 [ 214.941011][ T6227] ? bpf_jit_dump+0xd0/0xd0 [ 214.945502][ T6227] ? check_map_prog_compatibility+0x6cf/0x870 [ 214.951552][ T6227] __warn+0x248/0x2b0 [ 214.955521][ T6227] ? check_map_prog_compatibility+0x6cf/0x870 [ 214.961580][ T6227] report_bug+0x1b7/0x2e0 [ 214.965899][ T6227] handle_bug+0x3a/0x70 [ 214.970034][ T6227] exc_invalid_op+0x16/0x40 [ 214.974515][ T6227] asm_exc_invalid_op+0x16/0x20 [ 214.979345][ T6227] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 214.986005][ T6227] Code: ff e8 95 e3 ef ff 48 c7 c6 a0 27 11 8a e9 0d fd ff ff e8 84 e3 ef ff c6 05 24 e9 cd 0b 01 48 c7 c7 00 24 11 8a e8 41 87 15 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 215.005592][ T6227] RSP: 0018:ffffc900030af450 EFLAGS: 00010246 [ 215.011651][ T6227] RAX: b025bd4a6d770400 RBX: 0000000000000001 RCX: 0000000000080000 [ 215.019604][ T6227] RDX: ffffc900158bf000 RSI: 00000000000045b7 RDI: 00000000000045b8 [ 215.027557][ T6227] RBP: ffff888069f88000 R08: dffffc0000000000 R09: ffffed1017224f24 [ 215.035510][ T6227] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: ffffc900010be038 [ 215.043462][ T6227] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000217c07 [ 215.051427][ T6227] resolve_pseudo_ldimm64+0x691/0x1030 [ 215.056883][ T6227] ? check_attach_btf_id+0xe60/0xe60 [ 215.062156][ T6227] ? __mark_reg_known+0x1a0/0x1a0 [ 215.067169][ T6227] bpf_check+0x30a4/0xf090 [ 215.071574][ T6227] ? mark_lock+0x94/0x320 [ 215.075892][ T6227] ? bpf_get_btf_vmlinux+0x10/0x10 [ 215.080981][ T6227] ? mark_lock+0x94/0x320 [ 215.085304][ T6227] ? verify_lock_unused+0x140/0x140 [ 215.090486][ T6227] ? verify_lock_unused+0x140/0x140 [ 215.095668][ T6227] ? rcu_lock_release+0x5/0x20 [ 215.100417][ T6227] ? __lock_acquire+0x7c60/0x7c60 [ 215.105427][ T6227] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 215.111391][ T6227] ? lock_chain_count+0x20/0x20 [ 215.116225][ T6227] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 215.122447][ T6227] ? lockdep_hardirqs_on+0x94/0x140 [ 215.127632][ T6227] ? ktime_get_with_offset+0xff/0x320 [ 215.132987][ T6227] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 215.139207][ T6227] ? ktime_get_real_ts64+0x420/0x420 [ 215.144479][ T6227] ? __might_fault+0xb3/0x110 [ 215.149137][ T6227] ? memset+0x1e/0x40 [ 215.153100][ T6227] ? bpf_obj_name_cpy+0x190/0x1d0 [ 215.158104][ T6227] bpf_prog_load+0x1043/0x1550 [ 215.162855][ T6227] ? map_freeze+0x350/0x350 [ 215.167339][ T6227] ? __might_fault+0xb7/0x110 [ 215.172006][ T6227] ? __might_fault+0xb3/0x110 [ 215.176661][ T6227] ? bpf_lsm_bpf+0x5/0x10 [ 215.180969][ T6227] ? security_bpf+0x7a/0xa0 [ 215.185453][ T6227] __sys_bpf+0x4c2/0x670 [ 215.189688][ T6227] ? bpf_link_show_fdinfo+0x340/0x340 [ 215.195062][ T6227] ? vtime_user_exit+0x2dc/0x400 [ 215.199989][ T6227] __x64_sys_bpf+0x78/0x90 [ 215.204391][ T6227] do_syscall_64+0x4c/0xa0 [ 215.208795][ T6227] ? clear_bhb_loop+0x30/0x80 [ 215.213460][ T6227] ? clear_bhb_loop+0x30/0x80 [ 215.218139][ T6227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.224028][ T6227] RIP: 0033:0x7fc41a7879a9 [ 215.228427][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.248012][ T6227] RSP: 002b:00007fc4185ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.256408][ T6227] RAX: ffffffffffffffda RBX: 00007fc41a9aefa0 RCX: 00007fc41a7879a9 [ 215.264360][ T6227] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 215.272313][ T6227] RBP: 00007fc41a809d69 R08: 0000000000000000 R09: 0000000000000000 [ 215.280262][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.288213][ T6227] R13: 0000000000000000 R14: 00007fc41a9aefa0 R15: 00007ffea08b44e8 [ 215.296175][ T6227] [ 215.299355][ T6227] Kernel Offset: disabled [ 215.303667][ T6227] Rebooting in 86400 seconds..