last executing test programs: 8m41.858345838s ago: executing program 32 (id=265): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 8m41.852076028s ago: executing program 2 (id=268): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000040)={0x2, 0x3, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001600)={0x2, 0x4e27, @private=0xa010105}, 0x10, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="11000000000000000000000001000000030000000000000014"], 0x188}}], 0x2, 0x0) 8m40.883333154s ago: executing program 2 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0xff, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x2) 8m39.935022439s ago: executing program 2 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mq_open(&(0x7f0000000100)='\xd3\x9cqG?\x99\\\x8b\x89\x15\xb9\x8a\xa5\x0e\xa2\xfa\x05.\xc2\xd7?\xd8\xba{j\\\xc2`:f\x13\xa2\xcaS\xa4,^^&\x86\xdei\xc80\x14\x92\xeaY\xdf\xc3@\xc6W\xb8\x11\xbe\xd4D\xec\x9e1\x12{', 0xc0, 0x0, &(0x7f0000000040)={0x800000000000, 0x4000000, 0x7, 0x4}) 8m39.317450342s ago: executing program 33 (id=280): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000080)="15", 0x0, 0x0, 0x0}) 8m39.312073822s ago: executing program 2 (id=282): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp869,discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,errors=remount-ro\x00iocharset=cp737,grpquota,usrquota,gid=', @ANYRES16, @ANYBLOB=',quota,g\x00\x00=', @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYBLOB=',noquota,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x6170, &(0x7f00000066c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(0x0) open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) 8m38.094485309s ago: executing program 2 (id=287): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000440)=""/252) 8m37.293199554s ago: executing program 2 (id=289): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1fe) write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file1'}, 0xb) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000937fed), &(0x7f0000000000)=0x2) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 8m36.834681476s ago: executing program 34 (id=289): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1fe) write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file1'}, 0xb) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000937fed), &(0x7f0000000000)=0x2) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 8m18.01696192s ago: executing program 6 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8m17.736555291s ago: executing program 6 (id=366): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 8m17.389327463s ago: executing program 6 (id=369): syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4m54.336825307s ago: executing program 8 (id=2126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xfffffffe}}}, &(0x7f0000000280), 0x0) 4m54.049217639s ago: executing program 8 (id=2129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@auto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x23, 0x44d, &(0x7f0000000e00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 4m53.593989422s ago: executing program 8 (id=2133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x4, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xe, 0x4, 0x0, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x1e, [0x8d6, 0x61, 0xfffffffc, 0xffff, 0x1ff, 0x0, 0x8]}]}}, {"c4f6ad54bd"}}}}}, 0x5f) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000010000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0xa) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) sendfile(r3, r3, 0x0, 0x4623) 4m51.529321173s ago: executing program 8 (id=2146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 4m50.498813898s ago: executing program 36 (id=2146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 55.703726301s ago: executing program 7 (id=3747): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 55.588470902s ago: executing program 7 (id=3748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbffffff0f00000008000300", @ANYRES32=r2, @ANYBLOB="0800340004c4030005003300040000"], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 55.440956243s ago: executing program 7 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2, 0x0, 0x0, 0x13}]}, {0x0, [0x0, 0x61, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 54.337110689s ago: executing program 7 (id=3754): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x62040200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 53.757190182s ago: executing program 7 (id=3759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x4, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xd, 0x4, 0x0, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x1a, [0x8d6, 0x61, 0xfffffffc, 0xffff, 0x0, 0x8]}]}}, {"c4f6ad54bd"}}}}}, 0x5b) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0xa) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x6) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) sendfile(r3, r3, 0x0, 0x4623) 53.232831946s ago: executing program 7 (id=3762): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="000000001400000000000000010000", @ANYRES32=r1], 0x30, 0x40400d1}}], 0x1, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x100000000000000) 52.50718206s ago: executing program 37 (id=3762): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="000000001400000000000000010000", @ANYRES32=r1], 0x30, 0x40400d1}}], 0x1, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x100000000000000) 35.938155691s ago: executing program 3 (id=3831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clock_gettime(0xfffffffffffffffd, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x5, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x200040d4) close_range(r0, 0xffffffffffffffff, 0x0) 35.040413896s ago: executing program 3 (id=3835): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b81400800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d200002402018024000280"], 0x159c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22020400) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x646}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 33.633485804s ago: executing program 3 (id=3840): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.460971355s ago: executing program 3 (id=3841): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@data_err_abort}, {@minixdf}, {@minixdf}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 32.937247078s ago: executing program 3 (id=3843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000008c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) finit_module(r5, 0x0, 0x3) r6 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 31.953253223s ago: executing program 3 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x2, &(0x7f0000001800)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe364507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39fbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d662a58bc1b2d467825f3abbbec790a73bc7300c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x276, &(0x7f0000000600)="$eJzs281OE1EYxvGHD+VLmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIw1zBRoocawoKP2/9vMSw5P55y+p81ZdLYfvlsp5kM371XV22Pqlza0I6XUqz7FehrX3qg+rWYbujme/Xrl/qPHdzLZ7NyC2Xxm8VbazMaufnr5+v21z9WRBx/GPg5oK/V0+3v629bE1uT2z8UXhdAKoZXKVfNsqVyuekuBb8uFsOia3Qt8L/StUAr9Sst4PiivrtbMKy2PDq9W/DA0r1Szol+zatmqlZp5z71CyVzXtdFh4U9ymwsLXibpWeBkVSoZb1bS1JGR3GYiEwIAAIni/N99BvYrzv/dYPf8/6Tx+W3F+R8AAAAAAAAAAAAAAAAAAAAAgH/BTr3u1Ot1Z+96Soqe8Kk3/h6SNCxpRNIZSaOSxiQ5klKSzko6J2lc0nlJFyRNSLoo6ZKkyabXSnqtOIr+dzf6393of3drenB3UFp5u5Zby8XXeDyTV0GBfE3L0Y+olw1xPX87OzdtkZQur6w38utrub7W/Iyc3Q3TLj8T5601PxDtu/18Ws7uBmuXT7fND+rG9aa8K0dfnqmsQMvRnjzIv5kxm72bPZSfiv7vf+favrb9c93fjcf5Y+yPQ+9vv6b6k107pLD2qugFgV852WLvdp24F8VJFEN/xzQoOlUk+72EzjhoetIzAQAAAAAAAAAAAAAAAAAcRyd+Tpj0GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOxXAAAA//9gglyG") lchown(&(0x7f0000000380)='./file0\x00', 0xee00, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000005002f000000000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004870}, 0x0) 31.596049836s ago: executing program 38 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x2, &(0x7f0000001800)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe364507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39fbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d662a58bc1b2d467825f3abbbec790a73bc7300c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x276, &(0x7f0000000600)="$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") lchown(&(0x7f0000000380)='./file0\x00', 0xee00, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000005002f000000000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004870}, 0x0) 6.845322383s ago: executing program 9 (id=3996): r0 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 6.297338486s ago: executing program 9 (id=4001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) epoll_create(0xa) 6.015925198s ago: executing program 9 (id=4004): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='jbd2_update_log_tail\x00', 0xffffffffffffffff, 0x0, 0x436}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x1200) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080015000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$caif_seqpacket(0x25, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000d40)={@in6={{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}, 0x0, 0x0, 0x48, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e525d0f0cc158b227692cebce7b37069d14f6dfafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221cd9c79"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) nanosleep(&(0x7f0000000080), 0x0) 5.362285601s ago: executing program 1 (id=4006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 5.271599972s ago: executing program 1 (id=4008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x6}, &(0x7f0000000080)=0x8) 5.145257022s ago: executing program 9 (id=4010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 4.851851114s ago: executing program 9 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) epoll_create(0xa) 4.563958906s ago: executing program 0 (id=4017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 4.543995376s ago: executing program 9 (id=4018): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000040, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@usrquota}, {@nodelalloc}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0xee}}, {@nodiscard}]}, 0xfd, 0x461, &(0x7f0000001840)="$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") 4.453302056s ago: executing program 4 (id=4019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x280) 4.203625727s ago: executing program 1 (id=4021): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) 4.129305948s ago: executing program 0 (id=4022): r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000006c0)=@keyring={'key_or_keyring:', r0}) 3.228649453s ago: executing program 4 (id=4024): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x4e21, @multicast2}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0xe8, 0x7, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x40044) r5 = socket$inet6(0xa, 0x3, 0x84) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="98e9bb716227d8af3e72", 0xa}], 0x1}, 0x8001) sendto(r8, &(0x7f0000000640)="a80e9c09f5ff75e7056e788027355e6cbed36b725e272406c909a2527d6355e52b8e6c89a6996d52172b4aef44f4c28abaa584c3f092344137a8f52275c8ca861b197dbb333a05a867532600297f44535f0db5cbb70d47a6", 0x58, 0x20000800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x2, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x1, {0x0, 0x6}}, {0x1ff, 0x636b, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000) 3.069318014s ago: executing program 0 (id=4025): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 3.069137054s ago: executing program 5 (id=4026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4b4a, 0xffffffffffffff15) 3.046008654s ago: executing program 1 (id=4027): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 2.864831405s ago: executing program 0 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) epoll_create(0xa) 2.805132335s ago: executing program 5 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 2.684911936s ago: executing program 1 (id=4030): getrlimit(0xeb11cfb8dcace944, 0x0) 2.604545896s ago: executing program 5 (id=4031): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x13, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x2000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r8, @ANYBLOB="080001000000000008000200e0000002080009000e00000008000100ac1414"], 0x54}}, 0x0) 2.599881676s ago: executing program 0 (id=4032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 2.345085188s ago: executing program 1 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2, 0x0, 0x0, 0x13}]}, {0x0, [0x0, 0x61, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.149617589s ago: executing program 0 (id=4034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, 0x0, 0x280) 2.006339579s ago: executing program 5 (id=4035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xfe2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170"], 0x38}}, 0x0) 1.85327704s ago: executing program 4 (id=4036): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000abd2b7433f0df582c800000000"], 0x48) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002000010300000000fcffffff0200000300000008000000000c001400", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 812.959766ms ago: executing program 5 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f08, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 781.466026ms ago: executing program 4 (id=4038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x10000, 0x4) 529.322478ms ago: executing program 5 (id=4039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000480)) 434.328799ms ago: executing program 4 (id=4040): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 0s ago: executing program 4 (id=4041): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x84020, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x3, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x2}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000180)=0x2e9aa845) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_secret(0x80000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2871000000000000010902240001"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) kernel console output (not intermixed with test programs): 6] audit: type=1326 audit(1733419685.897:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15060 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 528.285949][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.295732][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.325673][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.401644][ T26] audit: type=1326 audit(1733419685.897:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15060 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 528.427292][T15078] loop7: detected capacity change from 0 to 512 [ 528.519834][ T26] audit: type=1326 audit(1733419685.927:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15060 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 528.636391][ T26] audit: type=1326 audit(1733419685.927:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15060 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 528.690860][T15078] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 528.717554][T15078] ext4 filesystem being mounted at /602/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.742537][T15083] loop9: detected capacity change from 0 to 1024 [ 528.749626][T15083] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.800678][T15083] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 529.120411][ T5278] EXT4-fs (loop7): unmounting filesystem. [ 529.202526][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 529.219154][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.250304][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 529.263018][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.298220][T14777] device veth0_vlan entered promiscuous mode [ 529.306150][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.315163][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.342604][T14777] device veth1_vlan entered promiscuous mode [ 529.404778][T11292] EXT4-fs (loop9): unmounting filesystem. [ 529.437059][T14777] device veth0_macvtap entered promiscuous mode [ 529.517204][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 529.528950][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 529.561756][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.572981][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.588539][T14777] device veth1_macvtap entered promiscuous mode [ 529.597977][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3325'. [ 529.606761][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.632371][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.755778][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.772614][T15118] loop3: detected capacity change from 0 to 128 [ 529.779029][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.799696][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.815650][T15118] syz.3.3326: attempt to access beyond end of device [ 529.815650][T15118] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 529.830377][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.847149][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.860295][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.877462][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.888980][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.912994][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.923927][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.935837][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.954551][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.981572][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.991438][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.037349][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.051365][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.064100][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.083431][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.099853][T11924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 530.132847][T11924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.145054][T14777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.154195][T14777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.171710][T14777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.180523][T14777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.581337][T15134] loop7: detected capacity change from 0 to 1024 [ 530.588575][T15134] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.599816][T11941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.627867][T11941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.636463][T15134] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 530.691124][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.749713][T10055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.779580][T10055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.864658][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 531.236169][ T5278] EXT4-fs (loop7): unmounting filesystem. [ 531.357791][T15158] loop9: detected capacity change from 0 to 128 [ 531.421188][T15158] syz.9.3342: attempt to access beyond end of device [ 531.421188][T15158] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 532.260651][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.271385][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.280124][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.297763][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.319257][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 532.327154][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.383809][T15184] loop5: detected capacity change from 0 to 1024 [ 532.390879][T15184] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.439835][T15184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 532.443553][ T9024] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.524477][T15186] 9pnet: Could not find request transport: ock_acquire_returned [ 532.549577][T15184] bridge0: port 3(erspan0) entered blocking state [ 532.556618][T15184] bridge0: port 3(erspan0) entered disabled state [ 532.564106][T15184] device erspan0 entered promiscuous mode [ 532.570317][T15184] bridge0: port 3(erspan0) entered blocking state [ 532.576851][T15184] bridge0: port 3(erspan0) entered forwarding state [ 532.631203][ T9024] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.738263][ T9024] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.834360][ T9024] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.067275][T14777] EXT4-fs (loop5): unmounting filesystem. [ 533.454344][T15182] chnl_net:caif_netlink_parms(): no params data found [ 533.683173][T15216] loop5: detected capacity change from 0 to 512 [ 533.782473][T15216] EXT4-fs: inline encryption not supported [ 533.854572][T15216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 533.876742][T15216] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.935491][T15216] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.3362: corrupted inode contents [ 534.005422][T15216] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.3362: mark_inode_dirty error [ 534.052490][T15216] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.3362: corrupted inode contents [ 534.108014][T15228] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.3362: corrupted inode contents [ 534.129003][T15228] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.3362: mark_inode_dirty error [ 534.208900][T15228] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.3362: corrupted inode contents [ 534.232664][T15208] random: crng reseeded on system resumption [ 534.300154][T15228] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3362: mark_inode_dirty error [ 534.341965][T15228] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.3362: corrupted inode contents [ 534.418480][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 534.460630][T15228] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.3362: mark_inode_dirty error [ 534.629932][T14777] EXT4-fs (loop5): unmounting filesystem. [ 534.781676][T15182] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.797927][T15182] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.830453][T15182] device bridge_slave_0 entered promiscuous mode [ 534.916241][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.936439][T15182] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.966162][T15182] device bridge_slave_1 entered promiscuous mode [ 535.105542][T15236] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 535.180256][T15182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.203100][T15182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.353344][T15182] team0: Port device team_slave_0 added [ 535.635923][T15182] team0: Port device team_slave_1 added [ 535.699419][T15260] loop5: detected capacity change from 0 to 1024 [ 535.706776][T15260] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.805315][T15260] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 535.823668][T15182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.830662][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.874610][T15182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.923513][T15182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.933530][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.944680][T15270] loop9: detected capacity change from 0 to 128 [ 535.960289][T15182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.006374][T15270] syz.9.3370: attempt to access beyond end of device [ 536.006374][T15270] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 536.253824][T15182] device hsr_slave_0 entered promiscuous mode [ 536.296110][T15182] device hsr_slave_1 entered promiscuous mode [ 536.312248][T15182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.319856][T15182] Cannot create hsr debugfs directory [ 536.413237][T14777] EXT4-fs (loop5): unmounting filesystem. [ 536.491864][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 536.905223][ T9024] device hsr_slave_0 left promiscuous mode [ 536.924425][ T9024] device hsr_slave_1 left promiscuous mode [ 536.940440][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.979676][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.015831][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.242981][ T9024] device veth1_macvtap left promiscuous mode [ 537.258219][ T9024] device veth0_macvtap left promiscuous mode [ 537.268025][ T9024] device veth1_vlan left promiscuous mode [ 537.281592][ T9024] device veth0_vlan left promiscuous mode [ 537.474746][T15304] loop5: detected capacity change from 0 to 512 [ 537.484371][T15304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 537.507453][T15304] EXT4-fs (loop5): 1 truncate cleaned up [ 537.526606][T15304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 537.597921][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 537.597939][ T26] audit: type=1326 audit(1733419695.777:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.686789][ T26] audit: type=1326 audit(1733419695.777:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.717363][ T26] audit: type=1326 audit(1733419695.777:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.759326][T14777] EXT4-fs (loop5): unmounting filesystem. [ 537.760335][ T26] audit: type=1326 audit(1733419695.777:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.789854][ T26] audit: type=1326 audit(1733419695.827:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.837445][ T26] audit: type=1326 audit(1733419695.847:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.888185][ T26] audit: type=1326 audit(1733419695.847:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.910997][ T26] audit: type=1326 audit(1733419695.847:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.934225][ T26] audit: type=1326 audit(1733419695.847:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 537.975322][ T26] audit: type=1326 audit(1733419695.847:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15303 comm="syz.5.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 538.340156][ T9024] team0 (unregistering): Port device team_slave_1 removed [ 538.393290][ T9024] team0 (unregistering): Port device team_slave_0 removed [ 538.441127][ T9024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.494327][ T9024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.587435][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 538.996117][T15315] loop5: detected capacity change from 0 to 128 [ 539.039404][T15315] syz.5.3381: attempt to access beyond end of device [ 539.039404][T15315] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 539.228215][ T9024] bond0 (unregistering): Released all slaves [ 539.303364][T15288] device syzkaller0 entered promiscuous mode [ 539.725652][T15318] loop9: detected capacity change from 0 to 1024 [ 539.732941][T15318] EXT4-fs: Ignoring removed mblk_io_submit option [ 539.787989][T15318] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 540.652715][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 542.135292][T11292] EXT4-fs (loop9): unmounting filesystem. [ 542.603203][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 542.603219][ T26] audit: type=1326 audit(1733419700.787:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 542.762937][ T26] audit: type=1326 audit(1733419700.817:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 542.769196][T15338] device batadv1 entered promiscuous mode [ 542.840626][ T26] audit: type=1326 audit(1733419700.817:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 542.884882][T15338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.915896][ T26] audit: type=1326 audit(1733419700.817:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 542.961734][ T26] audit: type=1326 audit(1733419700.817:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.005412][ T26] audit: type=1326 audit(1733419700.817:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.055851][ T26] audit: type=1326 audit(1733419700.817:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.130827][ T26] audit: type=1326 audit(1733419700.837:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.230139][ T26] audit: type=1326 audit(1733419700.837:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.341731][ T26] audit: type=1326 audit(1733419700.837:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15335 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 543.575923][T15358] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3392'. [ 543.621893][T15358] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3392'. [ 543.643217][T15358] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3392'. [ 543.817904][T15362] device syzkaller0 entered promiscuous mode [ 543.963420][T15376] loop4: detected capacity change from 0 to 128 [ 544.025704][T15376] syz.4.3397: attempt to access beyond end of device [ 544.025704][T15376] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 546.630995][T15182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 546.658645][T15182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 546.759746][T15182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 546.817880][T15182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 546.901659][T15395] loop5: detected capacity change from 0 to 2048 [ 546.981533][T15395] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 546.999126][T15182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.050527][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.091137][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.168459][T15182] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.196229][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.215765][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.224914][T14777] EXT4-fs (loop5): unmounting filesystem. [ 547.254965][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.262140][T11941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.349766][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.378564][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.404439][T15414] dccp_close: ABORT with 340 bytes unread [ 547.405748][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.460707][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.467888][T11941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.490824][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.590727][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.705436][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 547.752164][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 547.786076][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 547.813743][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 547.846723][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 547.868974][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 547.999072][T15417] device syzkaller0 entered promiscuous mode [ 548.008574][T15433] loop4: detected capacity change from 0 to 128 [ 548.015305][T15182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.056405][T15433] syz.4.3417: attempt to access beyond end of device [ 548.056405][T15433] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 548.061628][T15182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.098772][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.119248][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.148674][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.644150][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.681981][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.730446][T15182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.569893][T15525] loop4: detected capacity change from 0 to 128 [ 552.633926][T15525] syz.4.3437: attempt to access beyond end of device [ 552.633926][T15525] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 552.966112][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 552.983948][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.055790][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 553.080919][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.127468][T15182] device veth0_vlan entered promiscuous mode [ 553.162468][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.186507][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.253306][T15182] device veth1_vlan entered promiscuous mode [ 553.343310][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 553.438078][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 553.476929][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 553.499717][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.626322][T15182] device veth0_macvtap entered promiscuous mode [ 553.662491][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 553.674703][T15563] Cannot find add_set index 0 as target [ 553.685129][T15182] device veth1_macvtap entered promiscuous mode [ 553.720788][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.794229][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.823782][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.886088][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.903805][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.930536][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.959364][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.980134][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.993511][T15573] loop5: detected capacity change from 0 to 128 [ 554.017188][T15182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.038680][T15573] syz.5.3452: attempt to access beyond end of device [ 554.038680][T15573] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 554.066375][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.079539][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.097334][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.110092][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.132075][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.173217][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.194477][T15182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.217474][T15182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.283118][T15182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.308026][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.320076][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.340019][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.417950][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.454942][T15182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.486597][T15182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.501544][T15182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.510279][T15182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.713461][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.734227][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.761339][T11927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 554.859015][T11927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.876970][T11927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.010816][T11941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 555.139967][T15597] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.201285][T15597] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.209976][T15597] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.262205][T15597] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.270802][T15597] device geneve2 entered promiscuous mode [ 555.772578][T15618] loop7: detected capacity change from 0 to 128 [ 555.824631][T15618] syz.7.3469: attempt to access beyond end of device [ 555.824631][T15618] loop7: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 556.433828][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 556.433845][ T26] audit: type=1326 audit(1733419714.617:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 556.567588][ T26] audit: type=1326 audit(1733419714.667:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 556.609402][T15640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3479'. [ 556.659487][ T26] audit: type=1326 audit(1733419714.667:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 556.762044][ T26] audit: type=1326 audit(1733419714.667:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 556.860518][ T26] audit: type=1326 audit(1733419714.667:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 556.951011][ T26] audit: type=1326 audit(1733419714.667:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 557.021145][T15655] loop9: detected capacity change from 0 to 128 [ 557.041514][ T26] audit: type=1326 audit(1733419714.667:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 557.080264][T15655] syz.9.3487: attempt to access beyond end of device [ 557.080264][T15655] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 557.135650][ T26] audit: type=1326 audit(1733419714.667:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 557.219154][T15663] syz.3.3490[15663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.219261][T15663] syz.3.3490[15663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.336303][ T26] audit: type=1326 audit(1733419714.667:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 557.614677][ T26] audit: type=1326 audit(1733419714.667:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 558.116191][T15685] device batadv1 entered promiscuous mode [ 558.132662][T15685] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.327150][T15693] loop3: detected capacity change from 0 to 128 [ 558.335575][T15694] Cannot find set identified by id 0 to match [ 558.375328][T15693] syz.3.3503: attempt to access beyond end of device [ 558.375328][T15693] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 559.225511][T15732] loop3: detected capacity change from 0 to 512 [ 559.256960][T15732] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 559.307594][T15732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 559.348368][T15732] System zones: 1-12 [ 559.353880][T15732] EXT4-fs (loop3): orphan cleanup on readonly fs [ 559.361949][T15732] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3520: bg 0: block 361: padding at end of block bitmap is not set [ 559.415454][T15732] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 559.447954][T15732] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.3520: attempt to clear invalid blocks 33619980 len 1 [ 559.485889][T15738] device batadv1 entered promiscuous mode [ 559.489931][T15732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3520: invalid indirect mapped block 1811939328 (level 0) [ 559.498824][T15742] loop4: detected capacity change from 0 to 1024 [ 559.513424][T15738] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 559.587763][T15742] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 559.589256][T15732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3520: invalid indirect mapped block 2 (level 2) [ 559.624405][T15742] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 559.664148][T15742] EXT4-fs error (device loop4): ext4_get_journal_inode:5734: inode #5: comm syz.4.3522: unexpected bad inode w/o EXT4_IGET_BAD [ 559.689501][T15732] EXT4-fs (loop3): 1 truncate cleaned up [ 559.708255][T15732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 559.717384][T15742] EXT4-fs (loop4): no journal found [ 559.734874][T15742] EXT4-fs (loop4): can't get journal size [ 559.762342][T15732] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 559.844094][T15742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 559.918027][T13995] EXT4-fs (loop3): unmounting filesystem. [ 560.113951][T15753] loop7: detected capacity change from 0 to 128 [ 560.453699][T13567] EXT4-fs (loop4): unmounting filesystem. [ 560.699276][T15780] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3539'. [ 560.832935][T15780] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3539'. [ 561.051634][T15780] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3539'. [ 561.444845][T15808] loop4: detected capacity change from 0 to 128 [ 561.656905][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3552'. [ 561.695930][T15810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.703496][T15810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.746047][T15810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.796327][T15810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.920175][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 561.920193][ T26] audit: type=1800 audit(1733419720.097:2103): pid=15821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3551" name="file0" dev="loop4" ino=1048806 res=0 errno=0 [ 561.921057][T15821] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 562.546055][T15821] FAT-fs (loop4): Filesystem has been set read-only [ 562.566053][T15821] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 562.683147][T15821] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 562.746669][ T26] audit: type=1800 audit(1733419720.927:2104): pid=15821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3551" name="file1" dev="loop4" ino=1048807 res=0 errno=0 [ 562.756123][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 562.895416][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.981002][T15837] loop7: detected capacity change from 0 to 512 [ 563.043100][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #3: comm syz.7.3558: corrupted inode contents [ 563.068142][T15837] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #3: comm syz.7.3558: mark_inode_dirty error [ 563.112562][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #3: comm syz.7.3558: corrupted inode contents [ 563.130943][T15845] loop3: detected capacity change from 0 to 1024 [ 563.148842][T15837] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.3558: mark_inode_dirty error [ 563.179138][T15845] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 563.193499][T15837] Quota error (device loop7): write_blk: dquota write failed [ 563.241380][T15837] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 563.251492][T15845] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 563.256889][T15845] EXT4-fs error (device loop3): ext4_get_journal_inode:5734: inode #5: comm syz.3.3561: unexpected bad inode w/o EXT4_IGET_BAD [ 563.271562][T15837] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.3558: Failed to acquire dquot type 0 [ 563.299850][T15845] EXT4-fs (loop3): no journal found [ 563.313918][T15845] EXT4-fs (loop3): can't get journal size [ 563.314758][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.3558: corrupted inode contents [ 563.351705][T15845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 563.362813][T15837] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #16: comm syz.7.3558: mark_inode_dirty error [ 563.382065][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.3558: corrupted inode contents [ 563.468625][T15837] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.3558: mark_inode_dirty error [ 563.500232][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.3558: corrupted inode contents [ 563.523829][T15837] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 563.540558][T15837] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.3558: corrupted inode contents [ 563.558152][T15837] EXT4-fs error (device loop7): ext4_truncate:4311: inode #16: comm syz.7.3558: mark_inode_dirty error [ 563.576544][T15837] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 563.599891][T15837] EXT4-fs (loop7): 1 truncate cleaned up [ 563.605708][T15837] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 563.610742][T15848] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 563.614873][T15837] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.736498][T15182] EXT4-fs (loop7): unmounting filesystem. [ 563.819056][T13995] EXT4-fs (loop3): unmounting filesystem. [ 564.906047][T15872] loop4: detected capacity change from 0 to 128 [ 564.950831][T15872] syz.4.3573: attempt to access beyond end of device [ 564.950831][T15872] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 565.099398][T15880] loop3: detected capacity change from 0 to 1024 [ 565.113074][ T26] audit: type=1326 audit(1733419723.297:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.185946][T15880] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 565.198905][ T26] audit: type=1326 audit(1733419723.297:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.239019][T15880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 565.306502][T15880] EXT4-fs error (device loop3): ext4_get_journal_inode:5734: inode #5: comm syz.3.3575: unexpected bad inode w/o EXT4_IGET_BAD [ 565.331704][ T26] audit: type=1326 audit(1733419723.297:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.397136][T15880] EXT4-fs (loop3): no journal found [ 565.418441][T15880] EXT4-fs (loop3): can't get journal size [ 565.428060][ T26] audit: type=1326 audit(1733419723.297:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.475448][T15880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 565.506754][ T26] audit: type=1326 audit(1733419723.297:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.530113][ T26] audit: type=1326 audit(1733419723.297:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.9.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 565.577658][T15891] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 565.868092][T15883] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 566.543048][T13995] EXT4-fs (loop3): unmounting filesystem. [ 566.878975][T15916] loop9: detected capacity change from 0 to 128 [ 566.965829][T15916] syz.9.3590: attempt to access beyond end of device [ 566.965829][T15916] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 566.979658][T15922] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 567.172253][T15927] 9pnet_fd: Insufficient options for proto=fd [ 567.355317][T15933] loop9: detected capacity change from 0 to 1024 [ 567.386057][T15933] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 567.402662][T15933] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 567.433921][T15939] loop4: detected capacity change from 0 to 128 [ 567.440384][T15933] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #5: comm syz.9.3597: unexpected bad inode w/o EXT4_IGET_BAD [ 567.464955][T15933] EXT4-fs (loop9): no journal found [ 567.474332][T15933] EXT4-fs (loop9): can't get journal size [ 567.491569][T15933] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 567.817479][T15931] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 567.965883][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 567.965899][ T26] audit: type=1800 audit(1733419726.147:2135): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3600" name="file0" dev="loop4" ino=1048810 res=0 errno=0 [ 567.968394][T15949] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 568.106441][T15949] FAT-fs (loop4): Filesystem has been set read-only [ 568.116884][T15949] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 568.130010][T15949] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 568.140770][ T26] audit: type=1800 audit(1733419726.317:2136): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3600" name="file1" dev="loop4" ino=1048811 res=0 errno=0 [ 568.219817][T11292] EXT4-fs (loop9): unmounting filesystem. [ 568.506714][T15962] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 568.636622][T15964] loop3: detected capacity change from 0 to 128 [ 568.670503][T15966] loop7: detected capacity change from 0 to 128 [ 568.681952][T15964] syz.3.3608: attempt to access beyond end of device [ 568.681952][T15964] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 569.026487][T15974] device batadv0 entered promiscuous mode [ 569.040724][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.225168][T15979] loop7: detected capacity change from 0 to 1024 [ 569.252979][T15979] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 569.289072][T15979] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 569.315177][T15979] EXT4-fs error (device loop7): ext4_get_journal_inode:5734: inode #5: comm syz.7.3615: unexpected bad inode w/o EXT4_IGET_BAD [ 569.372112][T15979] EXT4-fs (loop7): no journal found [ 569.393100][T15979] EXT4-fs (loop7): can't get journal size [ 569.420858][T15979] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 569.586936][T15972] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 569.793491][T15995] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 569.913468][T15999] loop9: detected capacity change from 0 to 128 [ 569.959008][T15999] syz.9.3622: attempt to access beyond end of device [ 569.959008][T15999] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 570.172600][T15182] EXT4-fs (loop7): unmounting filesystem. [ 571.017771][T16017] loop4: detected capacity change from 0 to 128 [ 571.478497][T16031] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 571.560701][T16037] loop5: detected capacity change from 0 to 512 [ 571.600925][ T26] audit: type=1800 audit(1733419729.777:2137): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3628" name="file0" dev="loop4" ino=1048823 res=0 errno=0 [ 571.606625][T16040] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 571.645733][T16037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 571.669071][T16037] EXT4-fs (loop5): orphan cleanup on readonly fs [ 571.685200][T16040] FAT-fs (loop4): Filesystem has been set read-only [ 571.693548][T16040] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 571.706947][T16040] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 571.717330][ T26] audit: type=1800 audit(1733419729.907:2138): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3628" name="file1" dev="loop4" ino=1048824 res=0 errno=0 [ 571.735999][T16019] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 571.746724][T16040] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 571.763985][T16037] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3635: bg 0: block 328: padding at end of block bitmap is not set [ 571.861537][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 571.872327][T16044] loop3: detected capacity change from 0 to 128 [ 571.891110][T16037] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 571.919350][T16044] syz.3.3636: attempt to access beyond end of device [ 571.919350][T16044] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 571.933212][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 571.949444][T16037] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3635: invalid indirect mapped block 65280 (level 0) [ 571.991054][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 572.005936][T16037] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.3635: attempt to clear invalid blocks 33619980 len 1 [ 572.038336][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 572.059599][T16037] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3635: invalid indirect mapped block 1819239214 (level 0) [ 572.086635][T16047] loop9: detected capacity change from 0 to 1024 [ 572.102016][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 572.108617][T16037] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3635: invalid indirect mapped block 1819239214 (level 1) [ 572.124412][T16047] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 572.168250][T16047] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 572.171145][T16037] EXT4-fs (loop5): Remounting filesystem read-only [ 572.222054][T16047] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #5: comm syz.9.3637: unexpected bad inode w/o EXT4_IGET_BAD [ 572.236700][T16037] EXT4-fs (loop5): 1 orphan inode deleted [ 572.267017][T16037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 572.272898][T16047] EXT4-fs (loop9): no journal found [ 572.329185][T16047] EXT4-fs (loop9): can't get journal size [ 572.332092][T16037] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.3635: Unrecognised inode hash code 15 [ 572.364525][T16047] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 572.373225][T16037] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3635: Corrupt directory, running e2fsck is recommended [ 572.460673][T14777] EXT4-fs (loop5): unmounting filesystem. [ 573.081048][T16074] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 573.356953][T11292] EXT4-fs (loop9): unmounting filesystem. [ 573.545373][T16087] loop9: detected capacity change from 0 to 128 [ 573.592766][ T26] audit: type=1800 audit(1733419731.777:2139): pid=16087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3650" name="file1" dev="loop9" ino=1048826 res=0 errno=0 [ 573.722571][T16089] loop5: detected capacity change from 0 to 128 [ 573.825939][T16089] syz.5.3652: attempt to access beyond end of device [ 573.825939][T16089] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 573.869878][T16091] loop4: detected capacity change from 0 to 512 [ 573.894195][T16091] journal_path: Lookup failure for './file0' [ 573.906271][T16091] EXT4-fs: error: could not find journal device path [ 574.001337][T16080] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 574.151409][T16098] loop4: detected capacity change from 0 to 128 [ 574.513627][T16108] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 574.584128][T16110] loop3: detected capacity change from 0 to 1024 [ 574.598966][T16110] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 574.664998][T16110] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 574.698642][T16110] EXT4-fs error (device loop3): ext4_get_journal_inode:5734: inode #5: comm syz.3.3660: unexpected bad inode w/o EXT4_IGET_BAD [ 574.726985][T16110] EXT4-fs (loop3): no journal found [ 574.733323][T16110] EXT4-fs (loop3): can't get journal size [ 574.750493][T16110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 574.842622][ T26] audit: type=1326 audit(1733419733.027:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 574.881593][ T26] audit: type=1326 audit(1733419733.047:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 574.905888][ T26] audit: type=1326 audit(1733419733.057:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 574.928822][ T26] audit: type=1326 audit(1733419733.087:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 574.965225][ T26] audit: type=1326 audit(1733419733.087:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 574.991583][ T26] audit: type=1326 audit(1733419733.087:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 575.027334][ T26] audit: type=1326 audit(1733419733.207:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 575.060465][ T26] audit: type=1326 audit(1733419733.207:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 575.101561][ T26] audit: type=1326 audit(1733419733.207:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 575.176195][T16124] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 575.224174][T16124] FAT-fs (loop4): Filesystem has been set read-only [ 575.249209][T16124] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 575.287159][T16124] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 575.434611][T16134] loop5: detected capacity change from 0 to 128 [ 575.629509][T13995] EXT4-fs (loop3): unmounting filesystem. [ 575.884680][T11021] tipc: Subscription rejected, illegal request [ 576.088903][T16155] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 576.271971][T16157] loop7: detected capacity change from 0 to 764 [ 576.469846][T16166] loop9: detected capacity change from 0 to 128 [ 576.703042][T16169] loop7: detected capacity change from 0 to 1024 [ 576.737230][T16169] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 576.761861][T16169] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 576.762633][T16153] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 576.817470][T16169] EXT4-fs error (device loop7): ext4_get_journal_inode:5734: inode #5: comm syz.7.3676: unexpected bad inode w/o EXT4_IGET_BAD [ 576.873254][T16169] EXT4-fs (loop7): no journal found [ 576.885005][T16169] EXT4-fs (loop7): can't get journal size [ 576.935530][T16169] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 577.035111][T16180] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3680'. [ 577.240513][T16180] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3680'. [ 577.405721][T16180] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3680'. [ 577.506457][T16201] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 577.736992][T16208] loop9: detected capacity change from 0 to 128 [ 577.779470][T15182] EXT4-fs (loop7): unmounting filesystem. [ 577.788437][T16210] loop5: detected capacity change from 0 to 128 [ 577.856021][T16210] syz.5.3688: attempt to access beyond end of device [ 577.856021][T16210] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 578.354209][T16224] syz.7.3694[16224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.354310][T16224] syz.7.3694[16224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.446366][T16227] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 578.468038][T16227] FAT-fs (loop9): Filesystem has been set read-only [ 578.474820][T16227] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 578.484979][T16227] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 578.497743][T16227] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 578.753374][T16214] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 578.952798][T16234] futex_wake_op: syz.7.3696 tries to shift op by 144; fix this program [ 578.993733][T16236] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 579.359388][T16253] dccp_close: ABORT with 84 bytes unread [ 579.393508][T16251] loop7: detected capacity change from 0 to 128 [ 579.438232][T16251] syz.7.3703: attempt to access beyond end of device [ 579.438232][T16251] loop7: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 579.699037][T16265] loop7: detected capacity change from 0 to 128 [ 579.985948][T16271] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 580.153866][T16278] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 580.164202][T16278] FAT-fs (loop7): Filesystem has been set read-only [ 580.171003][T16278] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 580.181978][T16278] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 580.193968][T16278] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 580.210809][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 580.210826][ T26] audit: type=1800 audit(1733419738.337:2171): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3707" name="file0" dev="loop7" ino=1048836 res=0 errno=0 [ 580.241917][ T26] audit: type=1800 audit(1733419738.377:2172): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3707" name="file1" dev="loop7" ino=1048837 res=0 errno=0 [ 580.734117][T16289] loop9: detected capacity change from 0 to 128 [ 580.777262][T16289] syz.9.3716: attempt to access beyond end of device [ 580.777262][T16289] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 581.065680][T16276] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 581.217981][T16306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 581.342234][ T26] audit: type=1326 audit(1733419739.527:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.406242][ T26] audit: type=1326 audit(1733419739.547:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.516224][ T26] audit: type=1326 audit(1733419739.557:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.549049][ T26] audit: type=1326 audit(1733419739.557:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.609448][ T26] audit: type=1326 audit(1733419739.557:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.659229][ T26] audit: type=1326 audit(1733419739.557:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.691645][ T26] audit: type=1326 audit(1733419739.557:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 581.716655][ T26] audit: type=1326 audit(1733419739.557:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16307 comm="syz.7.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6657ff19 code=0x7ffc0000 [ 582.113048][T16328] dccp_close: ABORT with 84 bytes unread [ 582.168924][T16330] loop9: detected capacity change from 0 to 128 [ 582.620477][T16337] loop7: detected capacity change from 0 to 128 [ 582.690913][T16337] syz.7.3732: attempt to access beyond end of device [ 582.690913][T16337] loop7: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 582.730764][T16341] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 582.741977][T16341] FAT-fs (loop9): Filesystem has been set read-only [ 582.748783][T16341] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 582.758969][T16341] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 582.771007][T16341] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 583.070200][T16344] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 583.215659][T16346] smc: net device bond0 applied user defined pnetid SYZ0 [ 583.232178][T16346] smc: net device bond0 erased user defined pnetid SYZ0 [ 583.416990][T16340] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 584.310981][T16372] loop9: detected capacity change from 0 to 128 [ 584.328711][T16374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 584.343649][T16372] syz.9.3746: attempt to access beyond end of device [ 584.343649][T16372] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 585.489525][T16392] loop3: detected capacity change from 0 to 128 [ 585.890028][ T26] kauditd_printk_skb: 305 callbacks suppressed [ 585.890044][ T26] audit: type=1800 audit(1733419744.067:2486): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3752" name="file0" dev="loop3" ino=1048843 res=0 errno=0 [ 585.956482][T16378] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 585.992012][T16404] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 586.081915][T16404] FAT-fs (loop3): Filesystem has been set read-only [ 586.090839][T16404] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 586.151623][T16404] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 586.222639][ T26] audit: type=1800 audit(1733419744.407:2487): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3752" name="file1" dev="loop3" ino=1048844 res=0 errno=0 [ 586.319850][T16410] loop5: detected capacity change from 0 to 128 [ 586.397150][T16412] loop4: detected capacity change from 0 to 512 [ 586.508157][T16414] loop9: detected capacity change from 0 to 1024 [ 586.537527][T16414] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 586.559988][T16414] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 586.589297][T16414] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #5: comm syz.9.3761: unexpected bad inode w/o EXT4_IGET_BAD [ 586.620300][T16412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 586.642140][T16414] EXT4-fs (loop9): no journal found [ 586.647399][T16414] EXT4-fs (loop9): can't get journal size [ 586.653399][T16412] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.673939][T16414] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 586.733925][T16412] EXT4-fs error (device loop4): ext4_xattr_block_find:1828: inode #15: comm syz.4.3760: corrupted xattr block 32 [ 586.897084][T13567] EXT4-fs (loop4): unmounting filesystem. [ 587.076205][T16423] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 587.086591][T16423] FAT-fs (loop5): Filesystem has been set read-only [ 587.094214][T16423] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 587.104366][T16423] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 587.116317][T16423] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 587.171688][ T26] audit: type=1800 audit(1733419745.257:2488): pid=16423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3758" name="file0" dev="loop5" ino=1048845 res=0 errno=0 [ 587.321642][ T26] audit: type=1800 audit(1733419745.297:2489): pid=16423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3758" name="file1" dev="loop5" ino=1048846 res=0 errno=0 [ 587.577293][T11292] EXT4-fs (loop9): unmounting filesystem. [ 587.826058][ T9839] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.733971][ T9839] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.780979][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.801078][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.893495][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.903981][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.912040][ T4255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.921052][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.990622][T16444] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3770'. [ 589.039973][ T9839] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.061004][T16440] dccp_close: ABORT with 32 bytes unread [ 589.143181][T16448] loop5: detected capacity change from 0 to 128 [ 589.169660][T16448] syz.5.3772: attempt to access beyond end of device [ 589.169660][T16448] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 589.186137][ T26] audit: type=1326 audit(1733419747.367:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.280988][ T26] audit: type=1326 audit(1733419747.397:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.351265][ T26] audit: type=1326 audit(1733419747.397:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.374467][ T26] audit: type=1326 audit(1733419747.397:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.397610][ T26] audit: type=1326 audit(1733419747.397:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.486562][T16453] loop9: detected capacity change from 0 to 1024 [ 589.496016][T16453] EXT4-fs: Ignoring removed mblk_io_submit option [ 589.512401][ T26] audit: type=1326 audit(1733419747.397:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16449 comm="syz.4.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 589.813686][T16453] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 590.029116][ T9839] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.101283][T16459] serio: Serial port pts0 [ 590.131411][T16461] loop4: detected capacity change from 0 to 128 [ 590.273112][T11292] EXT4-fs (loop9): unmounting filesystem. [ 590.435069][T16466] loop5: detected capacity change from 0 to 1024 [ 590.503983][T16466] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 590.521554][T16466] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 590.539769][T16471] loop9: detected capacity change from 0 to 128 [ 590.559979][T16466] EXT4-fs error (device loop5): ext4_get_journal_inode:5734: inode #5: comm syz.5.3775: unexpected bad inode w/o EXT4_IGET_BAD [ 590.588314][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 590.609306][T16466] EXT4-fs (loop5): no journal found [ 590.618386][T16466] EXT4-fs (loop5): can't get journal size [ 590.653187][T16466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 590.813069][T16475] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 590.823562][T16475] FAT-fs (loop4): Filesystem has been set read-only [ 590.830375][T16475] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 590.840576][T16475] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 590.852567][T16475] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 590.892845][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 590.892864][ T26] audit: type=1800 audit(1733419748.997:2498): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3774" name="file0" dev="loop4" ino=1048848 res=0 errno=0 [ 590.972751][ T4255] Bluetooth: hci2: command 0x0409 tx timeout [ 591.148010][ T26] audit: type=1800 audit(1733419749.027:2499): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3774" name="file1" dev="loop4" ino=1048849 res=0 errno=0 [ 591.159905][T16479] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 591.168298][ T26] audit: type=1800 audit(1733419749.327:2500): pid=16479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3776" name="file0" dev="loop9" ino=1048850 res=0 errno=0 [ 591.244917][T16436] chnl_net:caif_netlink_parms(): no params data found [ 591.409665][T16479] FAT-fs (loop9): Filesystem has been set read-only [ 591.446675][T16479] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 591.493030][T16479] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 591.525561][ T26] audit: type=1800 audit(1733419749.707:2501): pid=16479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3776" name="file1" dev="loop9" ino=1048851 res=0 errno=0 [ 592.382446][T14777] EXT4-fs (loop5): unmounting filesystem. [ 592.515685][T16493] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3781'. [ 592.749458][ T26] audit: type=1326 audit(1733419750.927:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.3.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 592.930888][ T26] audit: type=1326 audit(1733419751.017:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.3.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 592.978641][ T26] audit: type=1326 audit(1733419751.017:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.3.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 593.127893][T16507] loop4: detected capacity change from 0 to 1024 [ 593.137878][T16507] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.163216][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 593.448495][T16507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 593.573370][ T26] audit: type=1326 audit(1733419751.017:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.3.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 593.720537][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.741624][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.775402][T16516] loop3: detected capacity change from 0 to 128 [ 593.788131][T16436] device bridge_slave_0 entered promiscuous mode [ 593.938873][T16512] syz.3.3786: attempt to access beyond end of device [ 593.938873][T16512] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 593.985430][T13567] EXT4-fs (loop4): unmounting filesystem. [ 594.069002][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.089147][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.091209][T16521] loop5: detected capacity change from 0 to 128 [ 594.104863][T16436] device bridge_slave_1 entered promiscuous mode [ 594.350486][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.458147][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.566110][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'. [ 594.748689][T16436] team0: Port device team_slave_0 added [ 594.990395][T16539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 595.000833][T16539] FAT-fs (loop5): Filesystem has been set read-only [ 595.007657][T16539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 595.017841][T16539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 595.029651][T16539] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 595.092267][ T26] audit: type=1800 audit(1733419753.167:2506): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3788" name="file0" dev="loop5" ino=1048853 res=0 errno=0 [ 595.186682][ T26] audit: type=1800 audit(1733419753.217:2507): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3788" name="file1" dev="loop5" ino=1048854 res=0 errno=0 [ 595.211562][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 595.402957][T16436] team0: Port device team_slave_1 added [ 595.843223][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.851887][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.933218][T16561] loop3: detected capacity change from 0 to 128 [ 595.941804][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.958794][T16562] loop4: detected capacity change from 0 to 128 [ 596.012289][T16562] syz.4.3799: attempt to access beyond end of device [ 596.012289][T16562] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 596.245390][ T9839] device hsr_slave_0 left promiscuous mode [ 596.263077][ T9839] device hsr_slave_1 left promiscuous mode [ 596.270236][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.299299][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.323464][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.332016][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.342368][ T9839] device bridge_slave_1 left promiscuous mode [ 596.348783][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.380720][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 596.380737][ T26] audit: type=1800 audit(1733419754.557:2519): pid=16567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3800" name="file0" dev="loop3" ino=1048856 res=0 errno=0 [ 596.385491][T16567] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 596.419771][ T9839] device bridge_slave_0 left promiscuous mode [ 596.429152][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.463314][T16567] FAT-fs (loop3): Filesystem has been set read-only [ 596.470200][T16567] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 596.504082][T16567] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 596.546653][ T26] audit: type=1800 audit(1733419754.727:2520): pid=16567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3800" name="file1" dev="loop3" ino=1048857 res=0 errno=0 [ 596.596183][ T9839] device veth1_macvtap left promiscuous mode [ 596.609388][ T9839] device veth0_macvtap left promiscuous mode [ 596.626423][ T9839] device veth1_vlan left promiscuous mode [ 596.642549][ T9839] device veth0_vlan left promiscuous mode [ 597.291880][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 597.514779][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3804'. [ 597.655813][ T9839] team0 (unregistering): Port device team_slave_1 removed [ 597.708295][ T9839] team0 (unregistering): Port device team_slave_0 removed [ 597.762757][ T9839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.819980][ T9839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.139855][ T26] audit: type=1326 audit(1733419756.307:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.196215][ T26] audit: type=1326 audit(1733419756.327:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.241371][ T26] audit: type=1326 audit(1733419756.327:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.271716][ T26] audit: type=1326 audit(1733419756.327:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.301240][ T26] audit: type=1326 audit(1733419756.327:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.327463][T16579] loop9: detected capacity change from 0 to 128 [ 598.336829][ T26] audit: type=1326 audit(1733419756.327:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.377739][ T26] audit: type=1326 audit(1733419756.327:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.422315][ T26] audit: type=1326 audit(1733419756.327:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.9.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 598.686647][T16581] loop9: detected capacity change from 0 to 128 [ 598.709012][ T9839] bond0 (unregistering): Released all slaves [ 598.881237][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.894398][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.920801][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.938269][T16564] device batadv1 entered promiscuous mode [ 598.949440][T16564] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 598.994836][T16575] smc: net device bond0 applied user defined pnetid S [ 599.141127][T16436] device hsr_slave_0 entered promiscuous mode [ 599.166042][T16436] device hsr_slave_1 entered promiscuous mode [ 599.175367][T16584] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 599.242719][T16436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.257265][T16436] Cannot create hsr debugfs directory [ 599.355741][T16584] FAT-fs (loop9): Filesystem has been set read-only [ 599.441787][T16584] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 599.551654][T16584] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 600.026217][T16611] loop5: detected capacity change from 0 to 128 [ 600.328774][T16611] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 600.339051][T16611] FAT-fs (loop5): Filesystem has been set read-only [ 600.345860][T16611] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 600.356034][T16611] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 600.367630][T16611] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 601.280952][T16630] loop4: detected capacity change from 0 to 128 [ 601.503083][T16636] loop5: detected capacity change from 0 to 1024 [ 601.512711][T16636] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.837470][T16636] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 601.893634][T16630] syz.4.3819: attempt to access beyond end of device [ 601.893634][T16630] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 602.357669][T14777] EXT4-fs (loop5): unmounting filesystem. [ 602.703529][T16648] loop4: detected capacity change from 0 to 164 [ 602.861081][T16436] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.903233][T16436] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.930587][T16656] loop3: detected capacity change from 0 to 128 [ 602.976066][T16436] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.091904][T16436] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.207985][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 603.208004][ T26] audit: type=1800 audit(1733419761.387:2569): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3824" name="file0" dev="loop3" ino=1048864 res=0 errno=0 [ 603.208448][T16656] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 603.245546][T16656] FAT-fs (loop3): Filesystem has been set read-only [ 603.252372][T16656] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 603.262564][T16656] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 603.281162][ T26] audit: type=1800 audit(1733419761.457:2570): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3824" name="file1" dev="loop3" ino=1048865 res=0 errno=0 [ 603.661654][ T26] audit: type=1326 audit(1733419761.817:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 603.737832][ T26] audit: type=1326 audit(1733419761.827:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 603.761155][ T26] audit: type=1326 audit(1733419761.827:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 603.801510][ T26] audit: type=1326 audit(1733419761.827:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 603.834735][ T26] audit: type=1326 audit(1733419761.827:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 603.954426][T16680] loop9: detected capacity change from 0 to 1024 [ 603.964235][T16680] EXT4-fs: Ignoring removed mblk_io_submit option [ 604.206379][T16680] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 604.336094][T16436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.514675][ T26] audit: type=1326 audit(1733419761.827:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 604.622310][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.639044][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.667442][T16436] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.685872][ T26] audit: type=1326 audit(1733419761.827:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 604.710440][ T26] audit: type=1326 audit(1733419761.827:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16673 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559777ff19 code=0x7ffc0000 [ 604.758076][T16690] loop4: detected capacity change from 0 to 128 [ 604.758493][T11292] EXT4-fs (loop9): unmounting filesystem. [ 604.852675][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.862214][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.870756][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.877918][T11931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.020035][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.102316][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.167475][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.185479][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.192654][T11931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.234084][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.251113][T16704] loop9: detected capacity change from 0 to 128 [ 605.264649][T16705] loop5: detected capacity change from 0 to 164 [ 605.528724][T16704] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 605.539639][T16704] FAT-fs (loop9): Filesystem has been set read-only [ 605.546491][T16704] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 605.556666][T16704] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 605.569584][T16704] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 605.579929][T16700] device wireguard0 entered promiscuous mode [ 605.684796][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.722955][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.788466][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.837925][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 605.848711][T16713] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 605.873544][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 605.910285][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.937983][T16712] netlink: 'syz.9.3838': attribute type 4 has an invalid length. [ 605.970723][T10055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.001772][T16713] FAT-fs (loop4): Filesystem has been set read-only [ 606.008600][T16713] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 606.063283][T10055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.098958][T16713] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 606.197572][T16436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.284326][T16436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.312411][T10055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.334940][T10055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.394646][T16722] device batadv0 entered promiscuous mode [ 606.426578][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.671313][T16732] loop3: detected capacity change from 0 to 512 [ 606.748296][T16732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 606.795346][T16732] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.033319][T13995] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /169/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 607.104303][T13995] EXT4-fs (loop3): Remounting filesystem read-only [ 607.241393][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.256876][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.309154][T16436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.447628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 607.470545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.527563][T16013] EXT4-fs (loop3): unmounting filesystem. [ 607.754182][T16750] loop9: detected capacity change from 0 to 128 [ 607.807039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.824579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.847483][T16749] syz.9.3844: attempt to access beyond end of device [ 607.847483][T16749] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 607.859282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.885380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.986675][T16436] device veth0_vlan entered promiscuous mode [ 608.042272][T16436] device veth1_vlan entered promiscuous mode [ 608.117205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 608.152838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 608.186296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 608.232790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.276084][T16436] device veth0_macvtap entered promiscuous mode [ 608.306210][T16436] device veth1_macvtap entered promiscuous mode [ 608.348476][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.371125][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.384056][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.421928][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.456158][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.491603][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.515669][T16436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.542018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 608.556971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 608.587637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 608.615619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 608.650905][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.697424][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.727682][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.748437][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.758512][T16436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.773421][T16436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.798094][T16436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.809485][T16763] netlink: 'syz.4.3850': attribute type 1 has an invalid length. [ 608.875131][T16763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.931087][T16766] bond1: (slave gretap1): making interface the new active one [ 608.955698][T16766] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 608.967029][T16768] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3851'. [ 608.981392][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 608.998084][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 609.043368][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 609.081247][T16436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.091129][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.108732][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.117291][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.119324][T16436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.141678][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.151291][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 609.158350][T16436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.158389][T16436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.184954][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 609.242111][T16786] netlink: 'syz.5.3853': attribute type 1 has an invalid length. [ 609.282943][T16786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.335781][T11935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.359224][T11935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.383417][T16789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.390609][T16789] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 609.424119][T16789] bond1: (slave vcan1): Error -95 calling set_mac_address [ 609.470755][T16791] loop4: detected capacity change from 0 to 128 [ 609.491682][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 609.507493][T11935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.526398][T11935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.575566][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 609.910633][T16799] loop5: detected capacity change from 0 to 128 [ 610.012651][T16797] syz.5.3856: attempt to access beyond end of device [ 610.012651][T16797] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 610.130689][T16805] loop9: detected capacity change from 0 to 1024 [ 610.140370][T16805] EXT4-fs: Ignoring removed mblk_io_submit option [ 610.833407][T16805] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 610.911692][T11941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.970121][T16782] chnl_net:caif_netlink_parms(): no params data found [ 611.018000][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 611.018017][ T26] audit: type=1800 audit(1733419769.197:2588): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3854" name="file0" dev="loop4" ino=1048875 res=0 errno=0 [ 611.018953][T16814] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 611.113614][T11941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.211647][ T4255] Bluetooth: hci3: command 0x0409 tx timeout [ 611.277837][T11292] EXT4-fs (loop9): unmounting filesystem. [ 611.301237][T16820] syz.5.3858[16820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.301355][T16820] syz.5.3858[16820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.310884][T16814] FAT-fs (loop4): Filesystem has been set read-only [ 611.359746][T16814] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 611.438190][T11941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.454716][T16814] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 611.516933][ T26] audit: type=1800 audit(1733419769.697:2589): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3854" name="file1" dev="loop4" ino=1048876 res=0 errno=0 [ 611.703489][T11941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.922317][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.924896][T16845] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 611.929606][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.986174][T16782] device bridge_slave_0 entered promiscuous mode [ 612.023240][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.060377][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.088487][T16782] device bridge_slave_1 entered promiscuous mode [ 612.170691][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.214759][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.238353][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 612.258194][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 612.454511][T16782] team0: Port device team_slave_0 added [ 612.472775][T16782] team0: Port device team_slave_1 added [ 612.686357][T16863] loop5: detected capacity change from 0 to 128 [ 613.293465][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 613.403167][T16863] syz.5.3869: attempt to access beyond end of device [ 613.403167][T16863] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 613.493518][T16865] bridge0: port 3(erspan0) entered blocking state [ 613.500027][T16865] bridge0: port 3(erspan0) entered disabled state [ 613.508017][T16865] device erspan0 entered promiscuous mode [ 613.515380][T16865] bridge0: port 3(erspan0) entered blocking state [ 613.522100][T16865] bridge0: port 3(erspan0) entered forwarding state [ 613.592138][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.599127][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.730277][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.813039][T16879] dccp_close: ABORT with 84 bytes unread [ 613.831328][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.860760][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.958552][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.970074][T16882] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 614.324175][T16782] device hsr_slave_0 entered promiscuous mode [ 614.360990][T16893] loop9: detected capacity change from 0 to 1024 [ 614.405167][T16782] device hsr_slave_1 entered promiscuous mode [ 614.418368][T16782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.439761][T16782] Cannot create hsr debugfs directory [ 614.647084][T16893] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 615.371761][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 615.414636][T11292] EXT4-fs (loop9): unmounting filesystem. [ 616.483234][T16933] loop5: detected capacity change from 0 to 128 [ 616.539253][T16933] syz.5.3886: attempt to access beyond end of device [ 616.539253][T16933] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 616.777146][T11941] bridge0: port 3(erspan0) entered disabled state [ 616.839418][T16941] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 616.897636][T11941] device erspan0 left promiscuous mode [ 616.938032][T11941] bridge0: port 3(erspan0) entered disabled state [ 616.958557][T16931] netlink: 'syz.1.3885': attribute type 10 has an invalid length. [ 616.978080][T16931] device geneve0 entered promiscuous mode [ 617.011261][T16931] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 617.500485][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 618.479864][T16982] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 618.756332][T16994] loop9: detected capacity change from 0 to 128 [ 618.865217][T16978] device batadv1 entered promiscuous mode [ 618.883753][T16994] syz.9.3904: attempt to access beyond end of device [ 618.883753][T16994] loop9: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 618.919742][T16978] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.034922][T11941] device hsr_slave_0 left promiscuous mode [ 620.052281][T11941] device hsr_slave_1 left promiscuous mode [ 620.059540][ T26] audit: type=1326 audit(1733419778.237:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.093637][T11941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.113570][T11941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.114659][ T26] audit: type=1326 audit(1733419778.267:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.146293][T11941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.168829][T11941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.202807][T11941] device bridge_slave_1 left promiscuous mode [ 620.228624][ T26] audit: type=1326 audit(1733419778.267:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.234082][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.297974][T11941] device bridge_slave_0 left promiscuous mode [ 620.298294][T17026] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 620.319532][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.331584][ T26] audit: type=1326 audit(1733419778.267:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.427290][ T26] audit: type=1326 audit(1733419778.267:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.459546][T11941] device veth1_macvtap left promiscuous mode [ 620.482759][T11941] device veth0_macvtap left promiscuous mode [ 620.499099][T11941] device veth1_vlan left promiscuous mode [ 620.524146][ T26] audit: type=1326 audit(1733419778.267:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.541562][T11941] device veth0_vlan left promiscuous mode [ 620.602965][ T26] audit: type=1326 audit(1733419778.267:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.632724][T17036] loop9: detected capacity change from 0 to 1024 [ 620.658400][T17036] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 620.691869][T17036] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 620.726061][ T26] audit: type=1326 audit(1733419778.267:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.758302][T17036] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #5: comm syz.9.3916: unexpected bad inode w/o EXT4_IGET_BAD [ 620.787587][ T26] audit: type=1326 audit(1733419778.267:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.806395][T17036] EXT4-fs (loop9): no journal found [ 620.810539][ T26] audit: type=1326 audit(1733419778.277:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f252b77ff19 code=0x7ffc0000 [ 620.844223][T17043] loop4: detected capacity change from 0 to 128 [ 620.857601][T17036] EXT4-fs (loop9): can't get journal size [ 620.893928][T17043] syz.4.3918: attempt to access beyond end of device [ 620.893928][T17043] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 620.914511][T17036] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 622.126594][T11941] team0 (unregistering): Port device team_slave_1 removed [ 622.207899][T11941] team0 (unregistering): Port device team_slave_0 removed [ 622.273999][T11941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.351315][T11941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.005847][T11941] bond0 (unregistering): Released all slaves [ 623.344267][T17075] device batadv1 entered promiscuous mode [ 623.359966][T17075] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 623.482526][T11292] EXT4-fs (loop9): unmounting filesystem. [ 623.540215][T16782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.606056][T17081] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3923'. [ 623.644098][T16782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.686208][T16782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.737634][T16782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.920364][T17090] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 624.092233][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.182207][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.189226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.198312][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.258430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.288138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.314454][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.321647][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.334193][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.337761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.356650][T17108] loop4: detected capacity change from 0 to 128 [ 624.419653][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.438840][T17108] syz.4.3931: attempt to access beyond end of device [ 624.438840][T17108] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 624.467982][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.475165][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.512924][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.530433][T17111] loop9: detected capacity change from 0 to 1024 [ 624.572409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.588589][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.636701][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.647238][T17111] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 624.671612][T17111] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 624.694869][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.709079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.730744][T17111] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #5: comm syz.9.3932: unexpected bad inode w/o EXT4_IGET_BAD [ 624.730805][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.751204][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.787670][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.809749][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.823040][T17111] EXT4-fs (loop9): no journal found [ 624.828548][T17111] EXT4-fs (loop9): can't get journal size [ 624.834705][T16782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.887013][T16782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.919581][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.920944][T17111] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 624.950834][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.096988][T17123] device batadv1 entered promiscuous mode [ 625.109131][T17123] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 625.629288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.637541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.666407][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.677333][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 625.677351][ T26] audit: type=1326 audit(1733419783.857:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.5.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 625.771619][ T26] audit: type=1326 audit(1733419783.897:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.5.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 625.845095][ T26] audit: type=1326 audit(1733419783.917:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.5.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 625.850994][T17139] device syzkaller0 entered promiscuous mode [ 625.896421][ T26] audit: type=1326 audit(1733419784.067:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.5.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 625.949086][ T26] audit: type=1326 audit(1733419784.067:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17116 comm="syz.5.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 625.982503][T11292] EXT4-fs (loop9): unmounting filesystem. [ 626.070565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.091699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.313802][T17150] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 627.504627][T17191] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 628.217246][T17213] loop5: detected capacity change from 0 to 128 [ 628.461580][ T26] audit: type=1326 audit(1733419786.637:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 628.511565][ T26] audit: type=1326 audit(1733419786.637:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 628.569846][ T26] audit: type=1326 audit(1733419786.637:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 628.625040][ T26] audit: type=1326 audit(1733419786.637:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 628.671851][ T26] audit: type=1326 audit(1733419786.637:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17218 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d41b7ff19 code=0x7ffc0000 [ 628.911390][T17228] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 629.398183][T17238] loop5: detected capacity change from 0 to 1024 [ 629.457997][T17238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 629.490133][T17238] EXT4-fs (loop5): shut down requested (0) [ 629.596206][T14777] EXT4-fs (loop5): unmounting filesystem. [ 630.535696][T17252] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 631.215668][T17266] syz.5.3976[17266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 631.215776][T17266] syz.5.3976[17266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 631.487527][T17272] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 631.645659][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 631.657544][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.670479][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.697339][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.731295][T16782] device veth0_vlan entered promiscuous mode [ 631.963889][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3985'. [ 632.006412][T16782] device veth1_vlan entered promiscuous mode [ 632.144074][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.182534][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.213380][T16782] device veth0_macvtap entered promiscuous mode [ 632.223656][T17287] loop4: detected capacity change from 0 to 512 [ 632.249651][T17287] EXT4-fs: Ignoring removed orlov option [ 632.264284][T16782] device veth1_macvtap entered promiscuous mode [ 632.273909][T17292] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 632.283517][T17287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.341977][T17287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 632.364219][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.385255][T17287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 632.410926][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.422049][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.433199][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.449370][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.460678][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.472534][T16782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.483547][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.494747][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.504818][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.516016][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.526012][T16782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.536760][T17287] __quota_error: 15 callbacks suppressed [ 632.536776][T17287] Quota error (device loop4): write_blk: dquota write failed [ 632.556383][T16782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.585066][T16782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.592783][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.600652][T17287] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 632.611880][T17287] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm +}[@: Failed to acquire dquot type 1 [ 632.623451][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.634244][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.643454][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.662714][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.674758][T17287] EXT4-fs (loop4): 1 truncate cleaned up [ 632.681388][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.702198][T17287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 632.743305][T17302] team0: Device ipvlan2 failed to register rx_handler [ 632.751069][T17287] EXT4-fs: Ignoring removed orlov option [ 632.761900][T17287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 632.770648][T17287] EXT4-fs error (device loop4): __ext4_remount:6449: comm +}[@: Abort forced by user [ 632.863407][T16782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.874642][T16782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.884055][T16782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.893818][T16782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.910036][T13567] EXT4-fs (loop4): unmounting filesystem. [ 633.136271][T11924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.185958][T11924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.220348][T11941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.252589][T11021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 633.276107][T11941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.315768][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 633.408499][T17326] loop4: detected capacity change from 0 to 128 [ 633.503904][T17326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 633.514135][T17331] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 633.524127][T17326] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 633.669143][T17334] loop0: detected capacity change from 0 to 128 [ 633.984896][T13567] EXT4-fs (loop4): unmounting filesystem. [ 634.085042][T17345] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 634.096127][T17345] FAT-fs (loop0): Filesystem has been set read-only [ 634.102979][T17345] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 634.113132][T17345] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 634.125443][T17345] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 634.142933][ T26] audit: type=1800 audit(1733419792.267:2652): pid=17345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3847" name="file0" dev="loop0" ino=1048886 res=0 errno=0 [ 634.240092][ T26] audit: type=1800 audit(1733419792.307:2653): pid=17345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3847" name="file1" dev="loop0" ino=1048887 res=0 errno=0 [ 634.360056][ T26] audit: type=1326 audit(1733419792.467:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 634.433083][ T26] audit: type=1326 audit(1733419792.497:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 634.460294][ T26] audit: type=1326 audit(1733419792.497:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 634.616166][ T26] audit: type=1326 audit(1733419792.507:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 634.750709][ T26] audit: type=1326 audit(1733419792.507:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 634.868250][ T26] audit: type=1326 audit(1733419792.507:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.9.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3c677ff19 code=0x7ffc0000 [ 635.266734][T17375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 635.468972][T17383] netlink: 'syz.5.4016': attribute type 5 has an invalid length. [ 635.544642][T17385] loop9: detected capacity change from 0 to 128 [ 636.019401][T17395] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 637.099417][T17416] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 637.420610][T17429] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 637.431177][T17429] FAT-fs (loop9): Filesystem has been set read-only [ 637.438162][T17429] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 637.448353][T17429] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 637.460255][T17429] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 637.561754][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4032'. [ 637.580691][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4031'. [ 637.601911][T17436] x_tables: ip_tables: udp match: only valid for protocol 17 [ 639.281218][T17469] device syzkaller0 entered promiscuous mode [ 639.841893][T17490] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 640.134465][T17493] loop4: detected capacity change from 0 to 128 [ 640.226957][T17493] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 640.264067][T17493] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 640.457110][T17493] ------------[ cut here ]------------ [ 640.462631][T17493] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 640.476297][T17493] WARNING: CPU: 0 PID: 17493 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 640.486324][T17493] Modules linked in: [ 640.490259][T17493] CPU: 0 PID: 17493 Comm: syz.4.4041 Not tainted 6.1.119-syzkaller #0 [ 640.498434][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.508517][T17493] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 640.514271][T17493] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 640.533910][T17493] RSP: 0018:ffffc90003daf410 EFLAGS: 00010046 [ 640.540010][T17493] RAX: f8d0020c4b6be900 RBX: ffffffff90c4d7a0 RCX: 0000000000080000 [ 640.548014][T17493] RDX: ffffc9000ccaa000 RSI: 00000000000066d4 RDI: 00000000000066d5 [ 640.556015][T17493] RBP: ffffc90003daf510 R08: ffffffff8152b88e R09: fffff520007b5de1 [ 640.564016][T17493] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 640.572012][T17493] R13: 1ffff920007b5e90 R14: ffff888055e970e0 R15: ffffffff974dff41 [ 640.580009][T17493] FS: 00007f252c4ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 640.588955][T17493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.595547][T17493] CR2: 000055556d6e15c8 CR3: 0000000060623000 CR4: 00000000003506f0 [ 640.603555][T17493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.611532][T17493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 640.619508][T17493] Call Trace: [ 640.622794][T17493] [ 640.625731][T17493] ? __warn+0x15a/0x520 [ 640.629908][T17493] ? look_up_lock_class+0xc2/0x140 [ 640.635025][T17493] ? report_bug+0x2af/0x500 [ 640.639971][T17493] ? look_up_lock_class+0xc2/0x140 [ 640.645094][T17493] ? handle_bug+0x3d/0x70 [ 640.649444][T17493] ? exc_invalid_op+0x16/0x40 [ 640.654136][T17493] ? asm_exc_invalid_op+0x16/0x20 [ 640.659177][T17493] ? __warn_printk+0x28e/0x350 [ 640.663951][T17493] ? look_up_lock_class+0xc2/0x140 [ 640.669071][T17493] register_lock_class+0x100/0x990 [ 640.674212][T17493] ? is_dynamic_key+0x260/0x260 [ 640.679087][T17493] ? mark_lock+0x9a/0x340 [ 640.683443][T17493] __lock_acquire+0xd3/0x1f80 [ 640.688151][T17493] lock_acquire+0x1f8/0x5a0 [ 640.692675][T17493] ? ext4_move_extents+0x3a0/0xe10 [ 640.697801][T17493] ? read_lock_is_recursive+0x10/0x10 [ 640.703192][T17493] ? __might_sleep+0xb0/0xb0 [ 640.707787][T17493] ? rwsem_write_trylock+0x166/0x210 [ 640.713084][T17493] ? inode_owner_or_capable+0x210/0x210 [ 640.718650][T17493] ? clear_nonspinnable+0x60/0x60 [ 640.723688][T17493] down_write_nested+0x39/0x60 [ 640.728461][T17493] ? ext4_move_extents+0x3a0/0xe10 [ 640.733579][T17493] ext4_move_extents+0x3a0/0xe10 [ 640.738528][T17493] ? rcu_read_lock_any_held+0xb3/0x160 [ 640.743995][T17493] ? ext4_double_up_write_data_sem+0x30/0x30 [ 640.749990][T17493] ext4_ioctl+0x3a8d/0x5f60 [ 640.754505][T17493] ? kasan_set_track+0x4b/0x70 [ 640.759281][T17493] ? security_file_ioctl+0x6d/0xa0 [ 640.764397][T17493] ? __se_sys_ioctl+0x47/0x160 [ 640.769183][T17493] ? do_syscall_64+0x3b/0xb0 [ 640.773792][T17493] ? ext4_fileattr_set+0x1770/0x1770 [ 640.779096][T17493] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 640.783969][T17493] ? __x64_compat_sys_ioctl+0x80/0x80 [ 640.789347][T17493] ? __lock_acquire+0x1f80/0x1f80 [ 640.794384][T17493] ? lockdep_hardirqs_on+0x94/0x130 [ 640.799590][T17493] ? __kmem_cache_free+0x25c/0x3c0 [ 640.804710][T17493] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 640.810357][T17493] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 640.816005][T17493] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 640.821655][T17493] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 640.827137][T17493] ? __fget_files+0x28/0x4a0 [ 640.831741][T17493] ? __fget_files+0x28/0x4a0 [ 640.836338][T17493] ? __fget_files+0x435/0x4a0 [ 640.841186][T17493] ? __fget_files+0x28/0x4a0 [ 640.845787][T17493] ? bpf_lsm_file_ioctl+0x5/0x10 [ 640.850732][T17493] ? security_file_ioctl+0x7d/0xa0 [ 640.855974][T17493] ? ext4_fileattr_set+0x1770/0x1770 [ 640.861273][T17493] __se_sys_ioctl+0xf1/0x160 [ 640.865869][T17493] do_syscall_64+0x3b/0xb0 [ 640.870298][T17493] ? clear_bhb_loop+0x45/0xa0 [ 640.874987][T17493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.880891][T17493] RIP: 0033:0x7f252b77ff19 [ 640.885448][T17493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.905078][T17493] RSP: 002b:00007f252c4ff058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.913546][T17493] RAX: ffffffffffffffda RBX: 00007f252b945fa0 RCX: 00007f252b77ff19 [ 640.921544][T17493] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000006 [ 640.929524][T17493] RBP: 00007f252b7f3986 R08: 0000000000000000 R09: 0000000000000000 [ 640.937520][T17493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.945496][T17493] R13: 0000000000000000 R14: 00007f252b945fa0 R15: 00007ffc01c92df8 [ 640.953488][T17493] [ 640.956512][T17493] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 640.963816][T17493] CPU: 0 PID: 17493 Comm: syz.4.4041 Not tainted 6.1.119-syzkaller #0 [ 640.971985][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.982055][T17493] Call Trace: [ 640.985419][T17493] [ 640.988384][T17493] dump_stack_lvl+0x1e3/0x2cb [ 640.993112][T17493] ? nf_tcp_handle_invalid+0x642/0x642 [ 640.998595][T17493] ? panic+0x764/0x764 [ 641.002683][T17493] ? vscnprintf+0x59/0x80 [ 641.007021][T17493] panic+0x318/0x764 [ 641.010920][T17493] ? __warn+0x169/0x520 [ 641.015083][T17493] ? memcpy_page_flushcache+0xfc/0xfc [ 641.020493][T17493] __warn+0x348/0x520 [ 641.024478][T17493] ? look_up_lock_class+0xc2/0x140 [ 641.029591][T17493] report_bug+0x2af/0x500 [ 641.033929][T17493] ? look_up_lock_class+0xc2/0x140 [ 641.039046][T17493] handle_bug+0x3d/0x70 [ 641.043214][T17493] exc_invalid_op+0x16/0x40 [ 641.047728][T17493] asm_exc_invalid_op+0x16/0x20 [ 641.052589][T17493] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 641.058312][T17493] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 641.077917][T17493] RSP: 0018:ffffc90003daf410 EFLAGS: 00010046 [ 641.083986][T17493] RAX: f8d0020c4b6be900 RBX: ffffffff90c4d7a0 RCX: 0000000000080000 [ 641.091978][T17493] RDX: ffffc9000ccaa000 RSI: 00000000000066d4 RDI: 00000000000066d5 [ 641.099949][T17493] RBP: ffffc90003daf510 R08: ffffffff8152b88e R09: fffff520007b5de1 [ 641.107921][T17493] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 641.115893][T17493] R13: 1ffff920007b5e90 R14: ffff888055e970e0 R15: ffffffff974dff41 [ 641.123890][T17493] ? __warn_printk+0x28e/0x350 [ 641.128667][T17493] register_lock_class+0x100/0x990 [ 641.133794][T17493] ? is_dynamic_key+0x260/0x260 [ 641.138652][T17493] ? mark_lock+0x9a/0x340 [ 641.142993][T17493] __lock_acquire+0xd3/0x1f80 [ 641.147683][T17493] lock_acquire+0x1f8/0x5a0 [ 641.152196][T17493] ? ext4_move_extents+0x3a0/0xe10 [ 641.157311][T17493] ? read_lock_is_recursive+0x10/0x10 [ 641.162693][T17493] ? __might_sleep+0xb0/0xb0 [ 641.167285][T17493] ? rwsem_write_trylock+0x166/0x210 [ 641.172580][T17493] ? inode_owner_or_capable+0x210/0x210 [ 641.178139][T17493] ? clear_nonspinnable+0x60/0x60 [ 641.183186][T17493] down_write_nested+0x39/0x60 [ 641.187973][T17493] ? ext4_move_extents+0x3a0/0xe10 [ 641.193109][T17493] ext4_move_extents+0x3a0/0xe10 [ 641.198073][T17493] ? rcu_read_lock_any_held+0xb3/0x160 [ 641.203561][T17493] ? ext4_double_up_write_data_sem+0x30/0x30 [ 641.209643][T17493] ext4_ioctl+0x3a8d/0x5f60 [ 641.214158][T17493] ? kasan_set_track+0x4b/0x70 [ 641.218938][T17493] ? security_file_ioctl+0x6d/0xa0 [ 641.224049][T17493] ? __se_sys_ioctl+0x47/0x160 [ 641.228811][T17493] ? do_syscall_64+0x3b/0xb0 [ 641.233422][T17493] ? ext4_fileattr_set+0x1770/0x1770 [ 641.238747][T17493] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 641.243600][T17493] ? __x64_compat_sys_ioctl+0x80/0x80 [ 641.248974][T17493] ? __lock_acquire+0x1f80/0x1f80 [ 641.254013][T17493] ? lockdep_hardirqs_on+0x94/0x130 [ 641.259215][T17493] ? __kmem_cache_free+0x25c/0x3c0 [ 641.264331][T17493] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 641.269977][T17493] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 641.275626][T17493] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 641.281314][T17493] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 641.286812][T17493] ? __fget_files+0x28/0x4a0 [ 641.291419][T17493] ? __fget_files+0x28/0x4a0 [ 641.296034][T17493] ? __fget_files+0x435/0x4a0 [ 641.300893][T17493] ? __fget_files+0x28/0x4a0 [ 641.305486][T17493] ? bpf_lsm_file_ioctl+0x5/0x10 [ 641.310445][T17493] ? security_file_ioctl+0x7d/0xa0 [ 641.315560][T17493] ? ext4_fileattr_set+0x1770/0x1770 [ 641.320857][T17493] __se_sys_ioctl+0xf1/0x160 [ 641.325452][T17493] do_syscall_64+0x3b/0xb0 [ 641.329895][T17493] ? clear_bhb_loop+0x45/0xa0 [ 641.334583][T17493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.340482][T17493] RIP: 0033:0x7f252b77ff19 [ 641.344914][T17493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.364516][T17493] RSP: 002b:00007f252c4ff058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.372930][T17493] RAX: ffffffffffffffda RBX: 00007f252b945fa0 RCX: 00007f252b77ff19 [ 641.380905][T17493] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000006 [ 641.388877][T17493] RBP: 00007f252b7f3986 R08: 0000000000000000 R09: 0000000000000000 [ 641.396862][T17493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.404832][T17493] R13: 0000000000000000 R14: 00007f252b945fa0 R15: 00007ffc01c92df8 [ 641.412810][T17493] [ 641.416155][T17493] Kernel Offset: disabled [ 641.420484][T17493] Rebooting in 86400 seconds..