last executing test programs: 6m33.693596978s ago: executing program 32 (id=96): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000a8e10d263a6ac90000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x8200) pipe(&(0x7f0000000000)) 6m29.108180386s ago: executing program 33 (id=110): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) 6m25.353327279s ago: executing program 34 (id=121): r0 = socket$inet(0x2, 0x4000000000000001, 0x9) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='sched_wake_idle_without_ipi\x00', r1}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001000000ff0300ac1414bbaaaaaaaaaa36ac"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 6m20.225673734s ago: executing program 35 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m38.805544028s ago: executing program 36 (id=613): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000180)={[{@errors_remount}, {@noblock_validity}]}, 0x84, 0x4ee, &(0x7f0000001180)="$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") r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 4m34.279188376s ago: executing program 37 (id=627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(0x0, 0x147842, 0x184) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4m30.183206279s ago: executing program 38 (id=641): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(r0, &(0x7f0000000c00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m27.749521833s ago: executing program 39 (id=650): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3a) 4m27.726157133s ago: executing program 4 (id=652): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 4m26.608388736s ago: executing program 4 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008005) r2 = socket(0x10, 0x803, 0x0) listen(r2, 0xc) io_uring_enter(0xffffffffffffffff, 0x54, 0xfffe0000, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 4m25.775038801s ago: executing program 4 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 4m25.481696549s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0xd16, 0x0, 0x0, 0x9}}, 0x120) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/179, 0xb3}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) 4m24.59793072s ago: executing program 4 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x4, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 4m22.87815842s ago: executing program 40 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x4, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 3m59.229928192s ago: executing program 9 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x2, 0x9, 0x6, 0x9}, {0x2, 0x80, 0x7}, {0x5, 0x1, 0x8}, {0x8, 0x7, 0x1, 0xffff968a}, {0xa, 0x2, 0x6, 0x3}]}, 0x10) 3m58.539581941s ago: executing program 0 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) fallocate(0xffffffffffffffff, 0x3, 0x1800, 0x10500) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'lo\x00'}) 3m58.377397449s ago: executing program 9 (id=659): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 3m57.665827763s ago: executing program 9 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 3m56.92375916s ago: executing program 0 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 3m56.86029242s ago: executing program 9 (id=663): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x3, &(0x7f00000003c0)=0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m55.687574528s ago: executing program 0 (id=667): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x220240, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m55.687247984s ago: executing program 9 (id=668): unshare(0x24060400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x109) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3m54.888494295s ago: executing program 41 (id=668): unshare(0x24060400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x109) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3m54.293709437s ago: executing program 0 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 3m53.491489188s ago: executing program 0 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) 3m53.326841499s ago: executing program 2 (id=674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x28, 0x80000) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x3, 0x453, &(0x7f0000000cc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x5002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f00000002c0)) link(&(0x7f0000000200)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 3m52.464941892s ago: executing program 0 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0) 3m51.155266775s ago: executing program 42 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0) 3m50.85369873s ago: executing program 2 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 3m49.497063829s ago: executing program 2 (id=681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a40"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a) r1 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) 3m49.18501142s ago: executing program 2 (id=682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 3m48.427736289s ago: executing program 2 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) 3m48.113643615s ago: executing program 3 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) writev(0xffffffffffffffff, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setgroups(0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fda"], 0xfe33) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000280)={0x6b8, 0xfffffff8, 0xfff, 0x9, 0x1a, "317a3a3ab90366593a928678fdfd00"}) r4 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020800030000000000000000000000181200000a273ef71a95bc2bfd9d14d11e00"/57, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m47.27995228s ago: executing program 2 (id=688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972", 0x6c}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) 3m47.246385275s ago: executing program 3 (id=689): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$eJzs3U1v28gdx/EfZfmxQFC0xSIIsvFs0gUcNFUkeeOFkR7KUpTNrSQKJF3Yp0W6sRdB5GybpEDjy9aXPgDtG+htL3voiyjQc899Az0WWLS3Ar2oIClKskRZip+Sdr8fI9GI/JPzJ4fRhBY5FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2tk1kzm1wG+eMj9d27zupoW7U+uVrPiPlpZ0PZ10/TuD2e/Ef93WzfTdTS3FL0s6+sY733z47WIhW/6UhM5Cr7vCF6+Onj7qdPafn622rnWW5S7FWCYqzLDUltvyQt9r2luu8ULfbG5slO9v10NT9xpuuBdGbtM4gVuI/MCsOXdNZXNz3bilPX+ntVWzG2428cPvV8vlDfPRYq/5739UCp1tr9HwWltJTDw7jlnsHyGu3TTm4Elnf31aknFQZZag6rSgarlarVSq1crGg80HH5bLxbEJ5REaixgctG9P4+MqXdAnN3B+hbj//7slNbSklna0K5P746imQL6aE+b3ZP3/+/fdU+sd7v+zXv76YPYNJf3/rfTdrUn9/4RcjEyyQN4ca8L0s/280Csd6akeqaOO9vX8Yta7enEZXu7PllSUPIXy5akpW1tyZXpTjDa1oQ2V9bG2VVcoo7o8NeQq1J5CRXLVTNokkCtbkXwFMlqTo7syqmhTm1qXkauS9uRrRy1tqSZb/+52uwd6kuz39VNyVBZUmSWo2D8Gx4Mm9f8//Txd4vX6f/z/6R87M8QAb1y3d/4/2VzexNXLywgAAAAAAFw0K/ntu5V8d/+upK7qXsMtv+m0AAAAAADABUq++b8Zv8zHpXdlTTj/7159bgAAAAAA4GJYyT12lqSV5KJ+a3An1CwXAeTeHAAAAAAAAN4uyff/txakbjK02qqs1zr/BwAAAAAA/wN+OzTGfjEbY7ebfa1fkBS2F60//3NRwbx13N79rnVox3Psw17M2BUAUf2GVVQ6UG8yXu+CpOSd4960euMD9wbBtNKBfaWvDqaN9W8FIwkszGW/vshJ4NrRUAIbxd47/V7vpTHv9ep9fFRQMietZaXuNdyS4zceVmTb1wqRuxv94tmTX0pBfzsPnnT2S5981nmc5HIcTzo+jPP4/EQ6hWm5vEzGW0juucjb4mXVsyp/12quWEm95Wz752QfFoYrmm37f63bacztlfR15ShrAVm/6hUqpaTJBlufjA5hDbKojG55XkNMyGIpyeJOGnNn7U76kuWXtsLS9+akamm8DYLhLKrDWUzfF9a/xvbFlCziY2E9zuIv8YomZLH+elmMtQgAvCkHg14oGcR8fIz90X73LJ9y03v3H56s5eUfu+kNh3NSsffdRHoT4qR+RfEn+loatpCO4l68kfOJXu71K0ua8IlePkfvFtf1p8EzkHpp9+YU+1n8p9vtPqwk9f5hpFf9Il7gi4n1ho3qXLwL7788/FkyAH7s0/1P959Vq+sb5Q/K5QdVzSeb0Xuh7wEA5Jj+jJ2TEUuD/qzfd3/QP6t+/I/309KJfvdb/UsKSvpEn6mjx7qXPUJgNb/elaHLEO6Nn7XGscvSaGxF9yae1SV96VBstR87r2yRk/9fGMSuX3YzAABwpW5P6YdH+/+8c/d72Xn32o3c8+6TffnoE4InxVaueE8AAPD14QZfWSvRb6wg8NofVzY3K3a07ZrAd35sAq+25RqvFbmBs223tlzTDvzId/yGaQda9GpuaMKddtsPIlP3A9P2Q283efK76T36PXSbdivynLDdcO3QNY7fimwnMjUvdEx750cNL9x2g2ThsO06Xt1z7MjzWyb0l+W4JWNC1x0K9GpuK/LqXlxsmXbgNe1gz/zEb+w0XVNzQyfw2pGfrjCry2vV/aCZrLak7mkPOgQA4Gvjxaujp486nf3npxSOlRay69FOCV7IW+Eb3kQAADCCXhoAAAAAAAAAAAAAAAAAAAAAgLffLPf/nVrIbgrMpswrJ1jqT/n5tZnWbGkw5cu/nSvDMxQKo1N6I+12py/+17RQzItZjgsLkjrZ7h+OOb7QrVidKVhpoXjx+3BZyjsSLq3wg4OTx+FYTDwzd9Zivy2K5//nkFd49uWEWdOPqMWT+3DhtA08WShKer5wjia4+s8iAFfrvwEAAP//pJI9bA==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000002ec0)=""/4092, 0x691) 3m45.849756755s ago: executing program 43 (id=688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972", 0x6c}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) 3m45.779317692s ago: executing program 3 (id=691): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1000, 0x7, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m45.077077341s ago: executing program 3 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 3m44.517350176s ago: executing program 3 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m42.811811593s ago: executing program 3 (id=699): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@local, 0x4e20, 0x2, 0xc5, 0x12d5c, 0x12d5c}}, 0x44) 3m41.460620524s ago: executing program 44 (id=699): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@local, 0x4e20, 0x2, 0xc5, 0x12d5c, 0x12d5c}}, 0x44) 42.936133061s ago: executing program 7 (id=1482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioperm(0x6, 0x4, 0x2) 42.257449339s ago: executing program 7 (id=1485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 41.362927016s ago: executing program 7 (id=1490): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006200000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x80000000007) 39.777711274s ago: executing program 7 (id=1498): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 32.681628769s ago: executing program 7 (id=1530): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 30.770005537s ago: executing program 7 (id=1539): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000004c40), &(0x7f0000004c80)={'syz', 0x0}, &(0x7f0000004cc0)=ANY=[@ANYBLOB="0100"], 0x29, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 28.89404142s ago: executing program 45 (id=1539): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000004c40), &(0x7f0000004c80)={'syz', 0x0}, &(0x7f0000004cc0)=ANY=[@ANYBLOB="0100"], 0x29, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 21.132827674s ago: executing program 8 (id=1577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1000, 0x7, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.23580368s ago: executing program 8 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "000000b72000", "0d07080d004fcfabd5e8ffff1a8600", "1112f5fd", "865703b7e43b34e4"}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r0) 19.729639897s ago: executing program 8 (id=1582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0xfc}}, 0x0) 19.201604523s ago: executing program 8 (id=1585): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 16.561523045s ago: executing program 8 (id=1593): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0) 15.845921627s ago: executing program 8 (id=1596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}, 0x20) 13.619904424s ago: executing program 46 (id=1596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}, 0x20) 8.030552357s ago: executing program 5 (id=1612): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x81, 0x0) socket(0x10, 0x803, 0x0) flistxattr(r0, 0x0, 0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000440)=""/81, 0x51}], 0x1) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, 0x0) connect$inet6(r3, 0x0, 0x0) listen(r3, 0x101) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) add_key$user(0x0, 0x0, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) fallocate(r0, 0x4, 0x6, 0x5d08763f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) 6.910995953s ago: executing program 6 (id=1616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB='\b\x00'], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.594715903s ago: executing program 5 (id=1617): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 6.22358723s ago: executing program 6 (id=1618): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 5.418170845s ago: executing program 6 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 4.844150031s ago: executing program 1 (id=1622): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 4.83738932s ago: executing program 6 (id=1623): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4.13761417s ago: executing program 6 (id=1624): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) ftruncate(r2, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 3.075004228s ago: executing program 5 (id=1625): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 3.002278934s ago: executing program 1 (id=1626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB='\b\x00'], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.238172968s ago: executing program 5 (id=1627): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00050000e3afe18bc7c7f00806935485f5b768401527d7f78a6f62cce98d127e44", @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00ffff000000002e0000000000005f"], 0x6c}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000002200)='./file0\x00', 0x80) 2.231862797s ago: executing program 1 (id=1628): ioctl$TCSETS(0xffffffffffffffff, 0x5410, &(0x7f0000000040)={0xfffffffd, 0x1000, 0x20000000, 0xfffffffc, 0x4, "00000400000000000000000100eaff00"}) 2.026078809s ago: executing program 5 (id=1629): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.885246439s ago: executing program 1 (id=1630): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.642174956s ago: executing program 6 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 1.564414313s ago: executing program 4 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x7930, &(0x7f00000008c0)={0x0, 0x7ffd, 0x8, 0x3, 0xfffffff9}, &(0x7f0000000840)=0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0x10a5, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) 1.437665872s ago: executing program 1 (id=1632): r0 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.121850976s ago: executing program 5 (id=1633): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 0s ago: executing program 1 (id=1634): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) kernel console output (not intermixed with test programs): x7f6a3f17ff19 code=0x7ffc0000 [ 473.718996][ T7806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.913891][ T7825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.148866][ T11] hsr_slave_0: left promiscuous mode [ 474.166349][ T11] hsr_slave_1: left promiscuous mode [ 474.175352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.183785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.194661][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.202463][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.220349][ T11] veth1_macvtap: left promiscuous mode [ 474.226334][ T11] veth0_macvtap: left promiscuous mode [ 474.232318][ T11] veth1_vlan: left promiscuous mode [ 474.238117][ T11] veth0_vlan: left promiscuous mode [ 474.544558][ T5787] Bluetooth: hci0: command tx timeout [ 475.125054][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.132015][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.191333][ T11] team0 (unregistering): Port device team_slave_1 removed [ 475.216072][ T11] team0 (unregistering): Port device team_slave_0 removed [ 475.660213][ T8013] bridge_slave_0: left allmulticast mode [ 475.668709][ T8013] bridge_slave_0: left promiscuous mode [ 475.679167][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.908217][ T8013] bridge_slave_1: left allmulticast mode [ 475.914477][ T8013] bridge_slave_1: left promiscuous mode [ 475.921352][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.947222][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.958071][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.970917][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.000466][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.012744][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.023122][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.068011][ T8013] bond0: (slave bond_slave_0): Releasing backup interface [ 476.120392][ T8013] bond0: (slave bond_slave_1): Releasing backup interface [ 476.173163][ T8013] team0: Port device team_slave_0 removed [ 476.212578][ T8013] team0: Port device team_slave_1 removed [ 476.226274][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.236212][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.285373][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.293583][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.603715][ T52] Bluetooth: hci0: command tx timeout [ 476.996279][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.168480][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.240810][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 477.811020][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.926328][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.118872][ T52] Bluetooth: hci2: command tx timeout [ 478.540044][ T11] bridge_slave_1: left allmulticast mode [ 478.546279][ T11] bridge_slave_1: left promiscuous mode [ 478.553306][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.622277][ T8047] loop3: detected capacity change from 0 to 164 [ 478.651197][ T11] bridge_slave_0: left allmulticast mode [ 478.662402][ T11] bridge_slave_0: left promiscuous mode [ 478.669973][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.686799][ T52] Bluetooth: hci0: command tx timeout [ 478.703290][ T8047] Unable to read rock-ridge attributes [ 478.981798][ T8047] Unable to read rock-ridge attributes [ 479.002520][ T8047] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 479.195274][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.229481][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.301873][ T11] bond0 (unregistering): Released all slaves [ 479.770108][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.778208][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.791887][ T7997] bridge_slave_0: entered allmulticast mode [ 479.801806][ T7997] bridge_slave_0: entered promiscuous mode [ 479.869151][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 480.204086][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.211618][ T5787] Bluetooth: hci2: command tx timeout [ 480.234604][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.250294][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.267730][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.270026][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.283042][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.290605][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 480.291026][ T7997] bridge_slave_1: entered allmulticast mode [ 480.304280][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.312107][ T7997] bridge_slave_1: entered promiscuous mode [ 480.753601][ T5787] Bluetooth: hci0: command tx timeout [ 480.793756][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.896091][ T11] hsr_slave_0: left promiscuous mode [ 480.926044][ T11] hsr_slave_1: left promiscuous mode [ 480.960871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.969264][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.017485][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.025424][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.071818][ T11] veth1_macvtap: left promiscuous mode [ 481.078472][ T11] veth0_macvtap: left promiscuous mode [ 481.086912][ T11] veth1_vlan: left promiscuous mode [ 481.092570][ T11] veth0_vlan: left promiscuous mode [ 481.778398][ T11] team0 (unregistering): Port device team_slave_1 removed [ 481.845466][ T11] team0 (unregistering): Port device team_slave_0 removed [ 482.152013][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.299673][ T5787] Bluetooth: hci2: command tx timeout [ 482.469678][ T5787] Bluetooth: hci4: command tx timeout [ 482.569240][ T8069] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 482.909035][ T7997] team0: Port device team_slave_0 added [ 483.015699][ T7997] team0: Port device team_slave_1 added [ 483.401366][ T4771] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.479543][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.487477][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.495586][ T8021] bridge_slave_0: entered allmulticast mode [ 483.505434][ T8021] bridge_slave_0: entered promiscuous mode [ 483.533343][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.533433][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.533612][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.634530][ T4771] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.691067][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.698930][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.699108][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.765561][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.766159][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.766830][ T8021] bridge_slave_1: entered allmulticast mode [ 483.770203][ T8021] bridge_slave_1: entered promiscuous mode [ 483.854343][ T4771] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.150747][ T4771] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.364672][ T5787] Bluetooth: hci2: command tx timeout [ 484.514111][ T5787] Bluetooth: hci4: command tx timeout [ 484.534208][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.598612][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.643582][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.653574][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.663554][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.681678][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.693621][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.706989][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.797894][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 484.927163][ T8021] team0: Port device team_slave_0 added [ 485.152257][ T7997] hsr_slave_0: entered promiscuous mode [ 485.205580][ T7997] hsr_slave_1: entered promiscuous mode [ 485.325199][ T8021] team0: Port device team_slave_1 added [ 485.350748][ T8084] loop1: detected capacity change from 0 to 512 [ 485.379397][ T4771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.463212][ T8084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.476773][ T8084] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.667277][ T4771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.706019][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.714662][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.745964][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.781306][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.788731][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.817446][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.055602][ T4771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.089122][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.302361][ T4771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.311771][ T8093] usb usb5: usbfs: process 8093 (syz.1.702) did not claim interface 0 before use [ 486.529538][ T8021] hsr_slave_0: entered promiscuous mode [ 486.549437][ T8021] hsr_slave_1: entered promiscuous mode [ 486.559214][ T8021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.571392][ T8021] Cannot create hsr debugfs directory [ 486.597047][ T52] Bluetooth: hci4: command tx timeout [ 486.731419][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.739471][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.751659][ T8051] bridge_slave_0: entered allmulticast mode [ 486.761561][ T8051] bridge_slave_0: entered promiscuous mode [ 486.813080][ T52] Bluetooth: hci1: command tx timeout [ 486.904143][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.911962][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.923930][ T8051] bridge_slave_1: entered allmulticast mode [ 486.934143][ T8051] bridge_slave_1: entered promiscuous mode [ 487.306071][ T4771] bridge_slave_1: left allmulticast mode [ 487.311995][ T4771] bridge_slave_1: left promiscuous mode [ 487.322472][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.347321][ T4771] bridge_slave_0: left allmulticast mode [ 487.353418][ T4771] bridge_slave_0: left promiscuous mode [ 487.360266][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.248285][ T4771] bond0 (unregistering): Released all slaves [ 488.280030][ T4771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.318088][ T4771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.333495][ T4771] bond0 (unregistering): Released all slaves [ 488.534944][ T8099] Falling back ldisc for ttyS3. [ 488.574175][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.673425][ T52] Bluetooth: hci4: command tx timeout [ 488.778994][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.835777][ T52] Bluetooth: hci1: command tx timeout [ 488.906130][ T8103] loop1: detected capacity change from 0 to 128 [ 489.168735][ T8051] team0: Port device team_slave_0 added [ 489.268942][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 489.318827][ T8051] team0: Port device team_slave_1 added [ 489.621316][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.628767][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.655275][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.691264][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.699675][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.728541][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.271865][ T7997] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 490.322058][ T7997] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 490.504092][ T4771] hsr_slave_0: left promiscuous mode [ 490.529580][ T4771] hsr_slave_1: left promiscuous mode [ 490.622385][ T4771] hsr_slave_0: left promiscuous mode [ 490.643821][ T4771] hsr_slave_1: left promiscuous mode [ 490.667560][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.675930][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.721034][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.729314][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.790565][ T4771] veth1_macvtap: left promiscuous mode [ 490.796877][ T4771] veth0_macvtap: left promiscuous mode [ 490.803258][ T4771] veth1_vlan: left promiscuous mode [ 490.808884][ T4771] veth0_vlan: left promiscuous mode [ 490.841244][ T4771] veth1_macvtap: left promiscuous mode [ 490.848559][ T4771] veth0_macvtap: left promiscuous mode [ 490.854838][ T4771] veth1_vlan: left promiscuous mode [ 490.860478][ T4771] veth0_vlan: left promiscuous mode [ 490.913373][ T52] Bluetooth: hci1: command tx timeout [ 492.457413][ T4771] team0 (unregistering): Port device team_slave_1 removed [ 492.485962][ T4771] team0 (unregistering): Port device team_slave_0 removed [ 492.808908][ T8051] hsr_slave_0: entered promiscuous mode [ 492.826850][ T8051] hsr_slave_1: entered promiscuous mode [ 492.836377][ T8051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.844385][ T8051] Cannot create hsr debugfs directory [ 492.945874][ T7997] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 492.996856][ T52] Bluetooth: hci1: command tx timeout [ 493.203329][ T7997] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 493.459635][ T8120] netlink: 104 bytes leftover after parsing attributes in process `syz.1.710'. [ 493.548077][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.558512][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.568910][ T8080] bridge_slave_0: entered allmulticast mode [ 493.578563][ T8080] bridge_slave_0: entered promiscuous mode [ 493.605648][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.615140][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.623160][ T8080] bridge_slave_1: entered allmulticast mode [ 493.632679][ T8080] bridge_slave_1: entered promiscuous mode [ 493.930365][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.987970][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.038340][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.046339][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.303329][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.339004][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.346912][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.514646][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.665657][ T8021] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.694009][ T8021] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.805020][ T8021] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.839847][ T8021] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.900379][ T8080] team0: Port device team_slave_0 added [ 494.978537][ T8080] team0: Port device team_slave_1 added [ 495.198553][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.205966][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.233196][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.312111][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.322222][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.350307][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.747514][ T8080] hsr_slave_0: entered promiscuous mode [ 495.760246][ T8080] hsr_slave_1: entered promiscuous mode [ 495.776158][ T8080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.784280][ T8080] Cannot create hsr debugfs directory [ 496.010854][ T8051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 496.177329][ T8051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 496.232407][ T8051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 496.335599][ T8051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.018811][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.278484][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.391805][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.539981][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.547892][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.668270][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.676206][ T4771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.952518][ T8080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.021631][ T8080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.095579][ T8080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.168206][ T8080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.371702][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.559387][ T8051] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.636185][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.644073][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.766268][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.774168][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.919311][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.149737][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.239205][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.247111][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.416460][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.424378][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.718639][ T8080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.770892][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.903676][ T7997] veth0_vlan: entered promiscuous mode [ 501.060539][ T7997] veth1_vlan: entered promiscuous mode [ 501.469389][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.521252][ T7997] veth0_macvtap: entered promiscuous mode [ 501.611730][ T7997] veth1_macvtap: entered promiscuous mode [ 501.828841][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.839839][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.856983][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.997108][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.010746][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.021427][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.032386][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.047835][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.148908][ T7997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.158203][ T7997] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.168415][ T7997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.177675][ T7997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.719046][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.791571][ T8194] tipc: Started in network mode [ 503.802479][ T8194] tipc: Node identity ac14140f, cluster identity 4711 [ 503.815495][ T8194] tipc: New replicast peer: 255.255.255.255 [ 503.825743][ T8194] tipc: Enabled bearer , priority 10 [ 503.927590][ T8021] veth0_vlan: entered promiscuous mode [ 504.000845][ T8021] veth1_vlan: entered promiscuous mode [ 504.102277][ T8021] veth0_macvtap: entered promiscuous mode [ 504.127108][ T8021] veth1_macvtap: entered promiscuous mode [ 504.452576][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.465956][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.476536][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.487346][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.502648][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.526183][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.537408][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.547585][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.558423][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.569679][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.580815][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.598537][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.677497][ T8021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.686859][ T8021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.696156][ T8021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.705398][ T8021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.728013][ T8051] veth0_vlan: entered promiscuous mode [ 504.831782][ T8051] veth1_vlan: entered promiscuous mode [ 504.944036][ T5863] tipc: Node number set to 2886997007 [ 505.158950][ T8051] veth0_macvtap: entered promiscuous mode [ 505.279879][ T8051] veth1_macvtap: entered promiscuous mode [ 505.443476][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.454391][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.464689][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.477939][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.490216][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.501480][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.516962][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.611830][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.625723][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.636815][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.647640][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.658089][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.668916][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.679150][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.691481][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.707245][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.771900][ T8051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.781775][ T8051] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.791059][ T8051] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.803926][ T8051] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.846043][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 505.846139][ T29] audit: type=1326 audit(2000000125.180:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 506.005608][ T29] audit: type=1326 audit(2000000125.290:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 506.028783][ T29] audit: type=1326 audit(2000000125.290:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 506.552225][ T8080] veth0_vlan: entered promiscuous mode [ 506.625554][ T8080] veth1_vlan: entered promiscuous mode [ 506.793979][ T8080] veth0_macvtap: entered promiscuous mode [ 506.848732][ T8080] veth1_macvtap: entered promiscuous mode [ 507.082500][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.093493][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.103688][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.114514][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.125837][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.137297][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.147558][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.159333][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.176481][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.322284][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.335135][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.345751][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.356682][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.367004][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.377938][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.388229][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.399850][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.412697][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.424360][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.441383][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.524412][ T8080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.536882][ T8080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.548280][ T8080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.557632][ T8080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.364900][ T8260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 510.427917][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.437029][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.549308][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.558243][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.043154][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.051248][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.351140][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.360664][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.251864][ T8294] loop7: detected capacity change from 0 to 2048 [ 513.455758][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.462082][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.464088][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.489555][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.620727][ T8294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.731452][ T29] audit: type=1800 audit(2000000133.060:340): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.737" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 513.754133][ T29] audit: type=1800 audit(2000000133.060:341): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.737" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 513.969880][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.979398][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.143544][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.151696][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.289489][ T4863] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 514.306119][ T4863] EXT4-fs (loop7): This should not happen!! Data will be lost [ 514.306119][ T4863] [ 514.320105][ T4863] EXT4-fs (loop7): Total free blocks count 0 [ 514.327134][ T4863] EXT4-fs (loop7): Free/Dirty block details [ 514.333486][ T4863] EXT4-fs (loop7): free_blocks=0 [ 514.338709][ T4863] EXT4-fs (loop7): dirty_blocks=0 [ 514.344239][ T4863] EXT4-fs (loop7): Block reservation details [ 514.350475][ T4863] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 514.452658][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.135935][ T8318] program syz.5.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.160038][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 515.199437][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 515.729328][ T8324] infiniband syz0: set active [ 515.735592][ T8324] infiniband syz0: added bond0 [ 516.189286][ T8324] RDS/IB: syz0: added [ 516.194918][ T8324] smc: adding ib device syz0 with port count 1 [ 516.201485][ T8324] smc: ib device syz0 port 1 has pnetid [ 516.651033][ T8346] netlink: 277 bytes leftover after parsing attributes in process `syz.7.752'. [ 516.748488][ T8340] loop8: detected capacity change from 0 to 2048 [ 517.228778][ T8351] loop6: detected capacity change from 0 to 512 [ 517.273341][ T8351] EXT4-fs: Ignoring removed nobh option [ 517.279359][ T8351] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.006998][ T8351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.029853][ T29] audit: type=1800 audit(2000000137.360:342): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.755" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 518.030600][ T8340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.167108][ T29] audit: type=1800 audit(2000000137.490:343): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.750" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 518.283341][ T29] audit: type=1800 audit(2000000137.540:344): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.750" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 519.210697][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.471415][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.206617][ T8378] loop7: detected capacity change from 0 to 128 [ 520.459189][ T8384] vxcan0: entered promiscuous mode [ 520.465003][ T8384] vlan2: entered promiscuous mode [ 520.474352][ T29] audit: type=1800 audit(2000000139.710:345): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.762" name="bus" dev="loop7" ino=1048660 res=0 errno=0 [ 520.565631][ T8384] vxcan0: left promiscuous mode [ 520.657651][ T8378] syz.7.762: attempt to access beyond end of device [ 520.657651][ T8378] loop7: rw=0, sector=121, nr_sectors = 119 limit=128 [ 521.160121][ T29] audit: type=1326 audit(2000000140.470:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.296698][ T3561] kworker/u8:13: attempt to access beyond end of device [ 521.296698][ T3561] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 521.308939][ T29] audit: type=1326 audit(2000000140.540:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.334480][ T29] audit: type=1326 audit(2000000140.550:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.361445][ T29] audit: type=1326 audit(2000000140.550:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.390416][ T29] audit: type=1326 audit(2000000140.550:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.415201][ T29] audit: type=1326 audit(2000000140.550:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.6.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f546977ff19 code=0x7ffc0000 [ 521.752035][ T29] audit: type=1326 audit(2000000141.080:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 521.781204][ T29] audit: type=1326 audit(2000000141.080:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 523.213597][ T8416] loop7: detected capacity change from 0 to 2048 [ 523.335042][ T8416] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 523.366721][ T8416] System zones: 0-7 [ 523.385105][ T8416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.893228][ T8437] loop1: detected capacity change from 0 to 128 [ 523.902454][ T8437] EXT4-fs: Ignoring removed nobh option [ 523.917060][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.782'. [ 523.929000][ T8429] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 523.985740][ T8437] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.015573][ T8437] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 524.166650][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.357380][ T29] audit: type=1326 audit(2000000143.680:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8440 comm="syz.8.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 524.564593][ T7806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.359504][ T8465] loop7: detected capacity change from 0 to 512 [ 526.422510][ T8465] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.793: invalid block [ 526.441436][ T8465] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.793: invalid indirect mapped block 4294967295 (level 1) [ 526.536123][ T8465] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.793: invalid indirect mapped block 4294967295 (level 1) [ 526.570797][ T8465] EXT4-fs (loop7): 2 truncates cleaned up [ 526.579126][ T8465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.782145][ T8471] loop6: detected capacity change from 0 to 2048 [ 526.938414][ T8471] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 526.963861][ T8471] System zones: 0-7 [ 526.970971][ T8471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.056101][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.384385][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.562200][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.800'. [ 527.785541][ T8483] netlink: 128 bytes leftover after parsing attributes in process `syz.1.802'. [ 528.384859][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 528.384948][ T29] audit: type=1326 audit(2000000147.720:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 528.523278][ T29] audit: type=1326 audit(2000000147.780:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 528.548766][ T29] audit: type=1326 audit(2000000147.780:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 528.572470][ T29] audit: type=1326 audit(2000000147.800:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.5.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 528.718855][ T8488] syz.7.799 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 529.634404][ T8502] sd 0:0:1:0: device reset [ 530.136596][ T8505] loop6: detected capacity change from 0 to 512 [ 530.285818][ T8505] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.809: invalid block [ 530.353370][ T8505] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.809: invalid indirect mapped block 4294967295 (level 1) [ 530.423584][ T8505] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.809: invalid indirect mapped block 4294967295 (level 1) [ 530.467937][ T8505] EXT4-fs (loop6): 2 truncates cleaned up [ 530.485286][ T8505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.005927][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.104182][ T8524] loop7: detected capacity change from 0 to 1024 [ 531.389216][ T8524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.713962][ T8537] sd 0:0:1:0: device reset [ 531.886422][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.348511][ T8542] loop6: detected capacity change from 0 to 512 [ 532.436246][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.8.827'. [ 533.164993][ T8558] netlink: '+}[@': attribute type 4 has an invalid length. [ 533.587667][ T8562] loop7: detected capacity change from 0 to 1024 [ 533.768265][ T8562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.849184][ T8571] sd 0:0:1:0: device reset [ 533.875858][ T8566] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 534.176655][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.285549][ T8575] loop8: detected capacity change from 0 to 128 [ 534.529210][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.841'. [ 534.614121][ T29] audit: type=1800 audit(2000000153.940:377): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.838" name="bus" dev="loop8" ino=1048661 res=0 errno=0 [ 535.401029][ T8597] sd 0:0:1:0: device reset [ 535.972719][ T8604] loop7: detected capacity change from 0 to 2048 [ 536.134357][ T8604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.297092][ T29] audit: type=1800 audit(2000000155.630:378): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.850" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 536.363103][ T29] audit: type=1800 audit(2000000155.690:379): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.850" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 536.577364][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.584314][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.707829][ T8617] loop1: detected capacity change from 0 to 128 [ 536.963957][ T29] audit: type=1800 audit(2000000156.180:380): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.854" name="bus" dev="loop1" ino=1048662 res=0 errno=0 [ 537.942257][ T8625] loop8: detected capacity change from 0 to 2048 [ 538.044595][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.070813][ T8633] loop6: detected capacity change from 0 to 1024 [ 538.132311][ T8625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.408657][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.430299][ T8633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.788750][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.813626][ T8645] @: renamed from bond0 (while UP) [ 539.562070][ T8658] loop7: detected capacity change from 0 to 164 [ 539.619872][ T8658] Unable to read rock-ridge attributes [ 539.643671][ T8658] Unable to read rock-ridge attributes [ 539.659338][ T8658] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 539.756151][ T8660] program syz.1.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.342545][ T8668] netlink: 192 bytes leftover after parsing attributes in process `syz.8.876'. [ 540.643705][ T8671] loop1: detected capacity change from 0 to 1024 [ 540.854961][ T8671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.248997][ T8684] netlink: 'syz.6.881': attribute type 1 has an invalid length. [ 541.459328][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.954443][ T5863] hid-generic 0000:0D16:0000.001A: unknown main item tag 0x0 [ 541.962480][ T5863] hid-generic 0000:0D16:0000.001A: unknown main item tag 0x0 [ 542.023141][ T5863] hid-generic 0000:0D16:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 543.004202][ T8709] program syz.5.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.539910][ T8714] loop8: detected capacity change from 0 to 1024 [ 543.714673][ T8714] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.185032][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.563116][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.902'. [ 544.782323][ T8741] loop6: detected capacity change from 0 to 128 [ 544.895578][ T8744] xt_hashlimit: max too large, truncated to 1048576 [ 544.919975][ T8741] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.934962][ T8741] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 545.779079][ T8756] loop7: detected capacity change from 0 to 1024 [ 545.801982][ T8754] program syz.5.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.826424][ T8051] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.085712][ T8764] loop6: detected capacity change from 0 to 128 [ 546.105921][ T8756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.490490][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.505927][ T8764] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.583638][ T8764] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.493133][ T29] audit: type=1326 audit(2000000166.820:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.543031][ T29] audit: type=1326 audit(2000000166.850:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.566760][ T29] audit: type=1326 audit(2000000166.850:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.595470][ T29] audit: type=1326 audit(2000000166.850:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.620238][ T29] audit: type=1326 audit(2000000166.850:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.643138][ T29] audit: type=1326 audit(2000000166.850:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.665932][ T29] audit: type=1326 audit(2000000166.850:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.694544][ T29] audit: type=1326 audit(2000000166.850:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.719225][ T29] audit: type=1326 audit(2000000166.850:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 547.742042][ T29] audit: type=1326 audit(2000000166.850:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7fc00000 [ 548.855470][ T8787] netlink: 16402 bytes leftover after parsing attributes in process `‡&/η'. [ 549.185624][ T8051] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.673510][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 551.121135][ T8824] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 554.081252][ T8852] loop1: detected capacity change from 0 to 512 [ 554.285909][ T8852] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.948: invalid block [ 554.383293][ T8852] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.948: invalid indirect mapped block 4294967295 (level 1) [ 554.438400][ T8852] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.948: invalid indirect mapped block 4294967295 (level 1) [ 554.481277][ T8852] EXT4-fs (loop1): 2 truncates cleaned up [ 554.489470][ T8852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.136470][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.518635][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 555.518726][ T29] audit: type=1326 audit(2000000174.850:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.549783][ T29] audit: type=1326 audit(2000000174.850:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.724301][ T29] audit: type=1326 audit(2000000174.970:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.748850][ T29] audit: type=1326 audit(2000000174.970:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.774753][ T29] audit: type=1326 audit(2000000174.970:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.799404][ T29] audit: type=1326 audit(2000000174.980:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.822265][ T29] audit: type=1326 audit(2000000175.030:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.846811][ T29] audit: type=1326 audit(2000000175.030:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.873312][ T29] audit: type=1326 audit(2000000175.030:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 555.897347][ T29] audit: type=1326 audit(2000000175.040:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 556.504545][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 556.514339][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 557.270847][ T8906] loop7: detected capacity change from 0 to 512 [ 557.432336][ T8905] loop1: detected capacity change from 0 to 2048 [ 557.480693][ T8906] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.970: invalid block [ 557.548075][ T8905] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 557.573211][ T8905] System zones: 0-7 [ 557.580072][ T8905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.587471][ T8906] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.970: invalid indirect mapped block 4294967295 (level 1) [ 557.700156][ T8906] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.970: invalid indirect mapped block 4294967295 (level 1) [ 557.844320][ T8906] EXT4-fs (loop7): 2 truncates cleaned up [ 557.852159][ T8906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.187442][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.391949][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.766837][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.981'. [ 558.776349][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.981'. [ 558.828232][ T8932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 559.484648][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.985'. [ 559.690173][ T8946] xt_connbytes: Forcing CT accounting to be enabled [ 559.697560][ T8946] Cannot find add_set index 0 as target [ 560.664440][ T8958] loop6: detected capacity change from 0 to 2048 [ 560.780826][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.234404][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.995'. [ 561.244580][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.995'. [ 561.741049][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1000'. [ 561.797162][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.844806][ T8974] loop8: detected capacity change from 0 to 512 [ 561.880433][ T8974] ext4: Unknown parameter 'seclabel' [ 562.794238][ T8986] loop6: detected capacity change from 0 to 512 [ 563.098260][ T8986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.998: bg 0: block 393: padding at end of block bitmap is not set [ 563.213789][ T8986] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 563.264196][ T8986] EXT4-fs (loop6): 2 truncates cleaned up [ 563.271986][ T8986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.285925][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 564.753910][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.872603][ T8994] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 565.281903][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'. [ 565.298736][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'. [ 567.354947][ T9006] loop7: detected capacity change from 0 to 512 [ 567.364406][ T9006] ext4: Unknown parameter 'seclabel' [ 568.676247][ T8982] Set syz1 is full, maxelem 65536 reached [ 569.120051][ T9013] loop7: detected capacity change from 0 to 1024 [ 569.226274][ T9013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.256276][ T9016] loop6: detected capacity change from 0 to 512 [ 569.377533][ T8] hid-generic 0000:0D16:0000.001B: unknown main item tag 0x0 [ 569.389211][ T8] hid-generic 0000:0D16:0000.001B: unknown main item tag 0x0 [ 569.449767][ T9016] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1019: bg 0: block 393: padding at end of block bitmap is not set [ 569.550046][ T8] hid-generic 0000:0D16:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 569.551499][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.577469][ T9016] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 569.746308][ T9016] EXT4-fs (loop6): 2 truncates cleaned up [ 569.754338][ T9016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.020111][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.593473][ T9037] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 570.602282][ T9037] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 570.611237][ T9037] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 570.833127][ T9040] loop8: detected capacity change from 0 to 512 [ 570.895680][ T9040] ext4: Unknown parameter 'seclabel' [ 571.003869][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 571.003961][ T29] audit: type=1326 audit(2000000190.330:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 571.036048][ T29] audit: type=1326 audit(2000000190.330:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 571.059977][ T29] audit: type=1326 audit(2000000190.330:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 571.708850][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1031'. [ 571.831441][ T9055] loop6: detected capacity change from 0 to 512 [ 572.031060][ T9055] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1033: bg 0: block 393: padding at end of block bitmap is not set [ 572.081168][ T9055] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 572.110020][ T9055] EXT4-fs (loop6): 2 truncates cleaned up [ 572.118298][ T9055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.301145][ T29] audit: type=1326 audit(2000000191.620:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 572.389669][ T29] audit: type=1326 audit(2000000191.660:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.1.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 572.750454][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.034736][ T29] audit: type=1326 audit(2000000192.260:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 573.059973][ T29] audit: type=1326 audit(2000000192.260:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 573.087189][ T29] audit: type=1326 audit(2000000192.270:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 573.111058][ T29] audit: type=1326 audit(2000000192.270:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 573.134208][ T29] audit: type=1326 audit(2000000192.270:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9072 comm="syz.8.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 573.435667][ T9078] loop6: detected capacity change from 0 to 128 [ 575.235126][ T9103] loop6: detected capacity change from 0 to 512 [ 576.225319][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 576.225413][ T29] audit: type=1326 audit(2000000195.210:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 576.260747][ T29] audit: type=1326 audit(2000000195.230:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 576.285812][ T29] audit: type=1326 audit(2000000195.260:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 576.308855][ T29] audit: type=1326 audit(2000000195.270:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 576.331926][ T29] audit: type=1326 audit(2000000195.270:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7ffc0000 [ 576.601115][ T9103] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1051: bg 0: block 393: padding at end of block bitmap is not set [ 576.728668][ T9103] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 576.829671][ T9103] EXT4-fs (loop6): 2 truncates cleaned up [ 576.840421][ T9103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.725422][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.304689][ T9132] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1058'. [ 582.990986][ T9144] loop1: detected capacity change from 0 to 512 [ 583.858559][ T9144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1068: bg 0: block 393: padding at end of block bitmap is not set [ 583.937029][ T9153] loop6: detected capacity change from 0 to 512 [ 583.970547][ T9153] EXT4-fs: Ignoring removed orlov option [ 583.994999][ T9156] loop7: detected capacity change from 0 to 128 [ 584.011325][ T9144] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 584.070379][ T9144] EXT4-fs (loop1): 2 truncates cleaned up [ 584.078423][ T9144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.167412][ T9156] FAT-fs (loop7): bogus logical sector size 0 [ 584.174571][ T9156] FAT-fs (loop7): Can't find a valid FAT filesystem [ 584.239774][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.278168][ T9153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 584.303223][ T9153] EXT4-fs (loop6): too many log groups per flexible block group [ 584.311848][ T9153] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 584.435023][ T9153] EXT4-fs (loop6): mount failed [ 584.692928][ T29] audit: type=1326 audit(2000000204.020:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 584.716030][ T29] audit: type=1326 audit(2000000204.050:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 584.738892][ T29] audit: type=1326 audit(2000000204.050:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 584.767868][ T29] audit: type=1326 audit(2000000204.080:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 584.792629][ T29] audit: type=1326 audit(2000000204.120:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 585.230265][ T29] audit: type=1326 audit(2000000204.150:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 585.253781][ T29] audit: type=1326 audit(2000000204.150:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 585.282549][ T29] audit: type=1326 audit(2000000204.180:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 585.307698][ T29] audit: type=1326 audit(2000000204.180:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 585.330633][ T29] audit: type=1326 audit(2000000204.200:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.7.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c5f97ff19 code=0x7ffc0000 [ 587.287929][ T9178] loop6: detected capacity change from 0 to 128 [ 587.317450][ T9189] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1085'. [ 587.469262][ T9188] loop1: detected capacity change from 0 to 512 [ 587.587424][ T9188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1084: bg 0: block 393: padding at end of block bitmap is not set [ 587.693929][ T9188] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 587.852582][ T9188] EXT4-fs (loop1): 2 truncates cleaned up [ 587.860516][ T9188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.009854][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.550135][ T9210] loop1: detected capacity change from 0 to 128 [ 588.602485][ T9210] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 588.686327][ T9214] loop7: detected capacity change from 0 to 512 [ 588.694020][ T9210] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 588.729276][ T9214] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 588.743324][ T9214] EXT4-fs (loop7): group descriptors corrupted! [ 589.021294][ T9214] bridge0: port 3(macvlan1) entered blocking state [ 589.028888][ T9214] bridge0: port 3(macvlan1) entered disabled state [ 589.036473][ T9214] macvlan1: entered allmulticast mode [ 589.042129][ T9214] veth1_vlan: entered allmulticast mode [ 589.060254][ T9214] macvlan1: entered promiscuous mode [ 589.070620][ T9214] bridge0: port 3(macvlan1) entered blocking state [ 589.077959][ T9214] bridge0: port 3(macvlan1) entered forwarding state [ 589.229776][ T9220] loop6: detected capacity change from 0 to 256 [ 589.247446][ T7806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.452601][ T9220] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 589.947288][ T9230] loop7: detected capacity change from 0 to 512 [ 590.130225][ T9230] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1102: bg 0: block 393: padding at end of block bitmap is not set [ 590.239234][ T9236] sd 0:0:1:0: device reset [ 590.260295][ T9230] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 590.319774][ T9230] EXT4-fs (loop7): 2 truncates cleaned up [ 590.330308][ T9230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.863705][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.879434][ T9244] loop8: detected capacity change from 0 to 128 [ 591.507251][ T9257] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1112'. [ 592.059906][ T9264] loop1: detected capacity change from 0 to 256 [ 592.268941][ T9264] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 592.726915][ T9273] sd 0:0:1:0: device reset [ 593.603481][ T9279] loop6: detected capacity change from 0 to 512 [ 593.884182][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 593.884276][ T29] audit: type=1326 audit(2000000213.180:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135617ff19 code=0x7fc00000 [ 594.059326][ T9279] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1120: bg 0: block 393: padding at end of block bitmap is not set [ 594.124215][ T9279] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 594.143771][ T9279] EXT4-fs (loop6): 2 truncates cleaned up [ 594.151671][ T9279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.744566][ T9297] loop1: detected capacity change from 0 to 128 [ 594.993516][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 595.082080][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.560614][ T9311] sd 0:0:1:0: device reset [ 596.584636][ T9323] netlink: 'syz.5.1140': attribute type 3 has an invalid length. [ 596.758286][ T9327] loop7: detected capacity change from 0 to 512 [ 596.966364][ T9327] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1142: bg 0: block 393: padding at end of block bitmap is not set [ 597.037475][ T9327] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 597.114585][ T9327] EXT4-fs (loop7): 2 truncates cleaned up [ 597.122498][ T9327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.568410][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.928987][ T9344] sd 0:0:1:0: device reset [ 598.043850][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.050747][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.300256][ T9350] loop6: detected capacity change from 0 to 128 [ 598.657753][ T9356] fuse: Unknown parameter 'τΈ…€}8' [ 599.077176][ T9365] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1157'. [ 599.233671][ T9368] loop1: detected capacity change from 0 to 512 [ 599.563658][ T9368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1158: bg 0: block 393: padding at end of block bitmap is not set [ 599.631558][ T9368] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 599.665137][ T9368] EXT4-fs (loop1): 2 truncates cleaned up [ 599.673416][ T9368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.038805][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.091452][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 600.448566][ T9383] loop6: detected capacity change from 0 to 256 [ 600.563217][ T9383] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 601.211542][ T9399] tmpfs: Bad value for 'mpol' [ 601.373523][ T9403] loop8: detected capacity change from 0 to 256 [ 601.457819][ T9406] loop7: detected capacity change from 0 to 512 [ 601.668248][ T9406] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1173: bg 0: block 393: padding at end of block bitmap is not set [ 601.782592][ T9406] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 601.824124][ T9406] EXT4-fs (loop7): 2 truncates cleaned up [ 601.831971][ T9406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.475248][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.595326][ T9422] loop6: detected capacity change from 0 to 256 [ 602.846582][ T9422] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 603.088937][ T9429] sctp: [Deprecated]: syz.7.1178 (pid 9429) Use of int in max_burst socket option deprecated. [ 603.088937][ T9429] Use struct sctp_assoc_value instead [ 603.620855][ T9438] loop6: detected capacity change from 0 to 256 [ 605.184444][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 606.947034][ T9480] loop6: detected capacity change from 0 to 256 [ 607.703368][ T9487] 9pnet_fd: Insufficient options for proto=fd [ 610.299995][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 610.490275][ T9518] 9pnet_fd: Insufficient options for proto=fd [ 612.610382][ T5863] hid-generic 0000:0D16:0000.001C: unknown main item tag 0x0 [ 612.620437][ T5863] hid-generic 0000:0D16:0000.001C: unknown main item tag 0x0 [ 612.678919][ T5863] hid-generic 0000:0D16:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 613.305879][ T9550] 9pnet_fd: Insufficient options for proto=fd [ 613.919464][ T9556] loop1: detected capacity change from 0 to 256 [ 615.478558][ T9579] sd 0:0:1:0: device reset [ 615.663412][ T9583] 9pnet_fd: Insufficient options for proto=fd [ 617.342504][ T9609] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 617.495556][ T9610] program syz.5.1256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.074890][ T9619] loop1: detected capacity change from 0 to 512 [ 618.518803][ T9619] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1260: bg 0: block 393: padding at end of block bitmap is not set [ 618.585430][ T9619] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 618.647186][ T9619] EXT4-fs (loop1): 2 truncates cleaned up [ 618.655326][ T9619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.588247][ T9638] loop8: detected capacity change from 0 to 512 [ 619.703349][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.804227][ T9638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.817759][ T9638] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.025887][ T9649] program syz.5.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.587200][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.135142][ T9681] loop8: detected capacity change from 0 to 256 [ 622.465678][ T9687] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 624.926044][ T9715] loop7: detected capacity change from 0 to 256 [ 625.113260][ T8] hid-generic 0000:0D16:0000.001D: unknown main item tag 0x0 [ 625.121154][ T8] hid-generic 0000:0D16:0000.001D: unknown main item tag 0x0 [ 625.189832][ T9726] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 625.208998][ T8] hid-generic 0000:0D16:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 626.419142][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1306'. [ 627.057961][ T9751] loop7: detected capacity change from 0 to 256 [ 627.202053][ T5863] hid-generic 0000:0D16:0000.001E: unknown main item tag 0x0 [ 627.210211][ T5863] hid-generic 0000:0D16:0000.001E: unknown main item tag 0x0 [ 627.271693][ T5863] hid-generic 0000:0D16:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 629.213117][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1323'. [ 629.791719][ T9780] loop8: detected capacity change from 0 to 128 [ 630.904824][ T9787] program syz.5.1329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.138826][ T9792] loop7: detected capacity change from 0 to 256 [ 633.781532][ T9821] program syz.6.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.180560][ T9830] loop1: detected capacity change from 0 to 256 [ 635.403336][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1356'. [ 635.776003][ T9854] loop7: detected capacity change from 0 to 128 [ 635.906823][ T9854] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.934365][ T9854] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 636.002592][ T9859] program syz.1.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.229925][ T9863] loop6: detected capacity change from 0 to 256 [ 636.328893][ T7997] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 637.930373][ T9889] program syz.8.1375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.515089][ T9897] loop8: detected capacity change from 0 to 256 [ 638.528797][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1379'. [ 641.219167][ T9927] loop8: detected capacity change from 0 to 256 [ 641.418033][ T9933] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1393'. [ 642.581007][ T29] audit: type=1326 audit(2000000261.850:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.609969][ T29] audit: type=1326 audit(2000000261.850:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.634876][ T29] audit: type=1326 audit(2000000261.860:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.657749][ T29] audit: type=1326 audit(2000000261.860:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.680741][ T29] audit: type=1326 audit(2000000261.870:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.709497][ T29] audit: type=1326 audit(2000000261.880:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.734293][ T29] audit: type=1326 audit(2000000261.890:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.758364][ T29] audit: type=1326 audit(2000000262.090:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 642.781205][ T29] audit: type=1326 audit(2000000262.090:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 643.114432][ T29] audit: type=1326 audit(2000000262.160:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9942 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 644.635002][ T9954] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1403'. [ 646.936970][ T9975] loop6: detected capacity change from 0 to 2048 [ 647.343598][ T9975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.356864][ T9975] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.425338][ T9995] loop8: detected capacity change from 0 to 128 [ 649.065118][ T9995] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.143962][ T9995] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 649.190978][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.389344][ T8021] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.370345][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1430'. [ 651.432261][T10029] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 652.064337][ T8] hid-generic 0000:0D16:0000.001F: unknown main item tag 0x0 [ 652.072343][ T8] hid-generic 0000:0D16:0000.001F: unknown main item tag 0x0 [ 652.129454][ T8] hid-generic 0000:0D16:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 654.025605][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1442'. [ 654.049067][T10067] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 655.681170][ T5863] hid-generic 0000:0D16:0000.0020: unknown main item tag 0x0 [ 655.689231][ T5863] hid-generic 0000:0D16:0000.0020: unknown main item tag 0x0 [ 655.731127][ T5863] hid-generic 0000:0D16:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 656.208358][T10087] netlink: 'syz.8.1451': attribute type 10 has an invalid length. [ 656.345193][T10092] loop6: detected capacity change from 0 to 1024 [ 656.401345][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.417818][T10087] bond0: (slave team0): Enslaving as an active interface with an up link [ 656.555120][T10092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.880105][T10092] EXT4-fs (loop6): shut down requested (0) [ 656.990321][T10099] syz.6.1453 (10099) used greatest stack depth: 4296 bytes left [ 657.338012][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.294882][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1465'. [ 659.304815][T10127] IPVS: Error joining to the multicast group [ 659.437313][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.445172][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.332221][T10155] loop1: detected capacity change from 0 to 2048 [ 661.896136][T10155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.115130][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 662.115230][ T29] audit: type=1800 audit(2000000281.450:529): pid=10155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1477" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 662.668554][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.773457][ T29] audit: type=1326 audit(2000000283.100:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.800815][ T29] audit: type=1326 audit(2000000283.100:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.825123][ T29] audit: type=1326 audit(2000000283.100:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.850357][ T29] audit: type=1326 audit(2000000283.100:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.874305][ T29] audit: type=1326 audit(2000000283.100:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.899387][ T29] audit: type=1326 audit(2000000283.110:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.925399][ T29] audit: type=1326 audit(2000000283.110:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 663.982152][ T29] audit: type=1326 audit(2000000283.310:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 664.067887][ T29] audit: type=1326 audit(2000000283.360:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.8.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f1d80b7ff19 code=0x7ffc0000 [ 664.841725][T10193] loop8: detected capacity change from 0 to 2048 [ 665.088306][T10193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.858783][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.112180][T10211] loop7: detected capacity change from 0 to 512 [ 666.228375][T10211] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.1498: casefold flag without casefold feature [ 666.299897][T10211] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1498: couldn't read orphan inode 15 (err -117) [ 666.366258][T10211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.343277][T10211] loop7: detected capacity change from 512 to 0 [ 667.407411][T10236] loop8: detected capacity change from 0 to 1024 [ 667.423467][T10237] syz.7.1498: attempt to access beyond end of device [ 667.423467][T10237] loop7: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 667.438128][T10237] syz.7.1498: attempt to access beyond end of device [ 667.438128][T10237] loop7: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 667.452146][T10237] syz.7.1498: attempt to access beyond end of device [ 667.452146][T10237] loop7: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 667.466096][T10237] syz.7.1498: attempt to access beyond end of device [ 667.466096][T10237] loop7: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 667.479942][T10237] syz.7.1498: attempt to access beyond end of device [ 667.479942][T10237] loop7: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 667.501599][T10237] syz.7.1498: attempt to access beyond end of device [ 667.501599][T10237] loop7: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 667.517810][T10237] syz.7.1498: attempt to access beyond end of device [ 667.517810][T10237] loop7: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 667.531631][T10237] syz.7.1498: attempt to access beyond end of device [ 667.531631][T10237] loop7: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 667.546014][T10237] EXT4-fs error (device loop7): ext4_get_inode_loc:4573: inode #20: block 9: comm syz.7.1498: unable to read itable block [ 667.559314][T10237] syz.7.1498: attempt to access beyond end of device [ 667.559314][T10237] loop7: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 667.575492][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.584946][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.592007][T10237] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: IO failure [ 667.607957][T10237] syz.7.1498: attempt to access beyond end of device [ 667.607957][T10237] loop7: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 667.624008][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.632983][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.640052][T10237] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #20: comm syz.7.1498: mark_inode_dirty error [ 667.651922][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.660662][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.668443][T10237] EXT4-fs error (device loop7): ext4_get_inode_loc:4573: inode #20: block 9: comm syz.7.1498: unable to read itable block [ 667.681720][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.699426][T10236] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 667.699616][T10236] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 667.699876][T10236] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 667.712240][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.738165][T10237] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: IO failure [ 667.747369][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.756063][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.763218][T10237] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #20: comm syz.7.1498: mark_inode_dirty error [ 667.775149][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.783800][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.801597][T10237] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.1498: Error while async write back metadata [ 667.814789][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.824016][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.831079][T10237] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.1498: Error while async write back metadata [ 667.844270][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.852992][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.860476][T10237] EXT4-fs error (device loop7): ext4_get_inode_loc:4573: inode #20: block 9: comm syz.7.1498: unable to read itable block [ 667.866897][T10236] EXT4-fs error (device loop8): ext4_get_journal_inode:5809: inode #5: comm syz.8.1505: unexpected bad inode w/o EXT4_IGET_BAD [ 667.873627][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.873745][T10237] EXT4-fs (loop7): I/O error while writing superblock [ 667.910781][T10237] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: IO failure [ 667.922336][T10237] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 667.980789][T10236] EXT4-fs (loop8): no journal found [ 667.986537][T10236] EXT4-fs (loop8): can't get journal size [ 668.057325][T10236] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 668.113794][T10239] loop1: detected capacity change from 0 to 2048 [ 668.311539][T10239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.588346][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 668.588436][ T29] audit: type=1800 audit(2000000287.880:553): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1507" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 668.622431][ T29] audit: type=1800 audit(2000000287.880:554): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1507" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 668.764792][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.270756][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.472559][ T29] audit: type=1326 audit(2000000288.780:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.495966][ T29] audit: type=1326 audit(2000000288.780:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.520913][ T29] audit: type=1326 audit(2000000288.780:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.544373][ T29] audit: type=1326 audit(2000000288.780:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.570036][ T29] audit: type=1326 audit(2000000288.780:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.594155][ T29] audit: type=1326 audit(2000000288.780:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.618947][ T29] audit: type=1326 audit(2000000288.790:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 669.642424][ T29] audit: type=1326 audit(2000000288.790:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 670.174989][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1515'. [ 670.590501][T10274] loop8: detected capacity change from 0 to 128 [ 671.388310][T10284] loop6: detected capacity change from 0 to 128 [ 672.584747][T10291] loop8: detected capacity change from 0 to 2048 [ 672.878064][ T7997] bio_check_eod: 74 callbacks suppressed [ 672.878147][ T7997] syz-executor: attempt to access beyond end of device [ 672.878147][ T7997] loop7: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 672.900952][ T7997] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 673.019327][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.019327][ T3498] loop7: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 673.033861][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.033861][ T3498] loop7: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 673.048003][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.048003][ T3498] loop7: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 673.060232][T10291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.062038][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.062038][ T3498] loop7: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 673.090896][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.090896][ T3498] loop7: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 673.105987][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.105987][ T3498] loop7: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 673.123273][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.123273][ T3498] loop7: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 673.138319][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.138319][ T3498] loop7: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 673.152326][ T3498] EXT4-fs error: 21 callbacks suppressed [ 673.152410][ T3498] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4558: inode #20: block 9: comm kworker/u8:11: unable to read itable block [ 673.172935][ T3498] kworker/u8:11: attempt to access beyond end of device [ 673.172935][ T3498] loop7: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 673.188972][ T3498] buffer_io_error: 22 callbacks suppressed [ 673.189054][ T3498] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 673.204513][ T3498] EXT4-fs: 24 callbacks suppressed [ 673.204591][ T3498] EXT4-fs (loop7): I/O error while writing superblock [ 673.298642][ T7997] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.463857][ T7997] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 673.472648][ T7997] EXT4-fs (loop7): I/O error while writing superblock [ 674.581874][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.729468][ T4966] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.111599][ T4966] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.346127][T10321] tmpfs: Unknown parameter '00000000000000000000000' [ 675.468649][ T4966] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.659874][ T4966] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.957088][ T4966] macvlan1: left allmulticast mode [ 675.962538][ T4966] veth1_vlan: left allmulticast mode [ 675.968404][ T4966] macvlan1: left promiscuous mode [ 675.975749][ T4966] bridge0: port 3(macvlan1) entered disabled state [ 675.999803][ T4966] bridge_slave_1: left allmulticast mode [ 676.006168][ T4966] bridge_slave_1: left promiscuous mode [ 676.013184][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.027785][ T4966] bridge_slave_0: left allmulticast mode [ 676.034726][ T4966] bridge_slave_0: left promiscuous mode [ 676.041417][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.547975][ T4966] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.584409][ T4966] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.618925][ T4966] @ (unregistering): Released all slaves [ 677.096221][ T4966] IPVS: stopping master sync thread 9609 ... [ 677.114100][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.170566][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.183245][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.198847][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.215134][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 677.225095][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.448315][T10330] loop6: detected capacity change from 0 to 2048 [ 677.741181][T10330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.811710][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 678.886578][ T4966] hsr_slave_0: left promiscuous mode [ 678.995524][ T4966] hsr_slave_1: left promiscuous mode [ 679.035091][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.043357][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.080604][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.098516][T10352] loop8: detected capacity change from 0 to 1024 [ 679.116863][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.126883][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.142270][T10352] EXT4-fs: Ignoring removed nobh option [ 679.149752][T10352] EXT4-fs: Ignoring removed orlov option [ 679.191234][ T4966] veth1_macvtap: left promiscuous mode [ 679.197395][ T4966] veth0_macvtap: left promiscuous mode [ 679.203691][ T4966] veth1_vlan: left promiscuous mode [ 679.209230][ T4966] veth0_vlan: left promiscuous mode [ 679.240246][T10352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.428884][T10357] tmpfs: Unknown parameter '00000000000000000000000' [ 679.537031][ T5787] Bluetooth: hci0: command tx timeout [ 680.218211][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 680.255711][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 680.547006][ T8021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.599728][T10326] chnl_net:caif_netlink_parms(): no params data found [ 681.603063][ T5787] Bluetooth: hci0: command tx timeout [ 682.008823][T10385] loop8: detected capacity change from 0 to 256 [ 682.112131][T10388] tmpfs: Unknown parameter '00000000000000000000000' [ 682.269475][T10385] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 683.100338][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.108478][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.116547][T10326] bridge_slave_0: entered allmulticast mode [ 683.129376][T10326] bridge_slave_0: entered promiscuous mode [ 683.263396][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.271181][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.279225][T10326] bridge_slave_1: entered allmulticast mode [ 683.288817][T10326] bridge_slave_1: entered promiscuous mode [ 683.605214][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.633734][ T5787] Bluetooth: hci0: command tx timeout [ 683.687637][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.086389][T10326] team0: Port device team_slave_0 added [ 684.128106][T10326] team0: Port device team_slave_1 added [ 684.205694][T10415] tmpfs: Unknown parameter '00000000000000000000000' [ 684.355132][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.368779][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.400299][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.553125][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.560518][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.593638][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.639874][T10417] loop6: detected capacity change from 0 to 256 [ 684.780379][T10417] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 685.012208][T10326] hsr_slave_0: entered promiscuous mode [ 685.091651][T10326] hsr_slave_1: entered promiscuous mode [ 685.716598][ T5787] Bluetooth: hci0: command tx timeout [ 686.235023][T10326] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.448212][T10326] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.688428][T10326] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.823378][T10440] loop8: detected capacity change from 0 to 512 [ 686.887265][T10444] tmpfs: Unknown parameter '00000000000000000000000' [ 686.974698][T10326] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.086989][T10440] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.1585: casefold flag without casefold feature [ 687.111420][T10440] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1585: couldn't read orphan inode 15 (err -117) [ 687.189120][T10440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.374795][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 687.374882][ T29] audit: type=1800 audit(2000000306.710:564): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1585" name="file1" dev="loop8" ino=19 res=0 errno=0 [ 687.432553][T10326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.468025][T10326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.504177][T10326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.606107][T10450] netlink: 'syz.5.1589': attribute type 4 has an invalid length. [ 687.633075][T10326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.834727][T10440] loop8: detected capacity change from 512 to 0 [ 687.853888][T10452] bio_check_eod: 1 callbacks suppressed [ 687.853980][T10452] syz.8.1585: attempt to access beyond end of device [ 687.853980][T10452] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 687.879006][T10452] syz.8.1585: attempt to access beyond end of device [ 687.879006][T10452] loop8: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 687.893365][T10452] syz.8.1585: attempt to access beyond end of device [ 687.893365][T10452] loop8: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 687.907385][T10452] syz.8.1585: attempt to access beyond end of device [ 687.907385][T10452] loop8: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 687.921346][T10452] syz.8.1585: attempt to access beyond end of device [ 687.921346][T10452] loop8: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 687.937829][T10452] syz.8.1585: attempt to access beyond end of device [ 687.937829][T10452] loop8: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 687.952361][T10452] syz.8.1585: attempt to access beyond end of device [ 687.952361][T10452] loop8: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 687.970231][T10452] syz.8.1585: attempt to access beyond end of device [ 687.970231][T10452] loop8: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 687.984972][T10452] EXT4-fs error (device loop8): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.8.1585: unable to read itable block [ 687.998454][T10452] syz.8.1585: attempt to access beyond end of device [ 687.998454][T10452] loop8: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 688.012172][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.020946][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.028187][T10452] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: IO failure [ 688.039412][T10452] syz.8.1585: attempt to access beyond end of device [ 688.039412][T10452] loop8: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 688.054227][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.062967][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.073353][T10452] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #19: comm syz.8.1585: mark_inode_dirty error [ 688.086232][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.094930][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.102463][T10452] EXT4-fs error (device loop8): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.8.1585: unable to read itable block [ 688.116115][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.124855][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.131900][T10452] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: IO failure [ 688.143398][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.151947][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.160052][T10452] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #19: comm syz.8.1585: mark_inode_dirty error [ 688.175225][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.184978][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.211468][T10452] EXT4-fs error (device loop8): ext4_check_bdev_write_error:225: comm syz.8.1585: Error while async write back metadata [ 688.224689][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.233892][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.240949][T10452] EXT4-fs error (device loop8): ext4_check_bdev_write_error:225: comm syz.8.1585: Error while async write back metadata [ 688.254030][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.262579][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.276816][T10452] EXT4-fs error (device loop8): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.8.1585: unable to read itable block [ 688.291796][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.300468][T10452] EXT4-fs (loop8): I/O error while writing superblock [ 688.307663][T10452] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: IO failure [ 688.316819][T10452] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 688.517785][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.571012][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.600190][T10461] loop1: detected capacity change from 0 to 512 [ 688.643283][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.651090][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.670270][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.678189][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.767776][T10461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 688.949682][ T8021] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 688.980487][T10326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.996732][T10326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.113722][T10461] EXT4-fs (loop1): 1 truncate cleaned up [ 689.121776][T10461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.413739][T10470] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1594'. [ 689.423350][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1594'. [ 689.796932][ T3561] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.935743][ T7806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.991356][ T3561] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.228477][ T3561] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.419260][ T3561] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.778678][ T3561] bridge_slave_1: left allmulticast mode [ 690.785255][ T3561] bridge_slave_1: left promiscuous mode [ 690.792180][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.811651][ T3561] bridge_slave_0: left allmulticast mode [ 690.817914][ T3561] bridge_slave_0: left promiscuous mode [ 690.825026][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.359578][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.377795][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.406165][ T3561] bond0 (unregistering): (slave team0): Releasing backup interface [ 691.427348][ T3561] bond0 (unregistering): Released all slaves [ 691.636526][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.680871][ T3561] IPVS: stopping master sync thread 8824 ... [ 691.705312][ T3561] IPVS: stopping backup sync thread 10067 ... [ 692.508254][ T3561] hsr_slave_0: left promiscuous mode [ 692.577162][ T3561] hsr_slave_1: left promiscuous mode [ 692.840371][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.850922][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.899265][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.907469][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.240819][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.243760][ T3561] veth1_macvtap: left promiscuous mode [ 693.254121][ T3561] veth0_macvtap: left promiscuous mode [ 693.260105][ T3561] veth1_vlan: left promiscuous mode [ 693.265875][ T3561] veth0_vlan: left promiscuous mode [ 693.311802][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1604'. [ 693.322237][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1604'. [ 693.354190][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.367134][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.411877][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.424528][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 693.434557][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.020051][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 694.058745][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 694.086819][T10497] loop6: detected capacity change from 0 to 8192 [ 695.100596][ T29] audit: type=1326 audit(2000000314.430:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 695.282130][ T29] audit: type=1326 audit(2000000314.530:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 695.306382][ T29] audit: type=1326 audit(2000000314.530:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 695.467783][ T29] audit: type=1326 audit(2000000314.770:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ebd17ff19 code=0x7ffc0000 [ 695.623565][ T5787] Bluetooth: hci2: command tx timeout [ 696.231279][T10326] veth0_vlan: entered promiscuous mode [ 696.430057][T10326] veth1_vlan: entered promiscuous mode [ 696.993441][T10521] loop6: detected capacity change from 0 to 128 [ 697.072471][T10326] veth0_macvtap: entered promiscuous mode [ 697.099302][T10326] veth1_macvtap: entered promiscuous mode [ 697.244848][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.258080][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.269032][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.279957][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.293556][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.305354][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.320499][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.479416][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.493584][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.505057][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.515917][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.526183][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.537037][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.547255][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.560345][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.576791][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.643983][T10326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.654466][T10326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.666104][T10326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.673412][ T5787] Bluetooth: hci2: command tx timeout [ 697.676030][T10326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.729197][T10495] chnl_net:caif_netlink_parms(): no params data found [ 698.328821][T10534] netlink: 'syz.1.1613': attribute type 4 has an invalid length. [ 699.066849][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.074752][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1616'. [ 699.074921][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1616'. [ 699.094427][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.102391][T10495] bridge_slave_0: entered allmulticast mode [ 699.114389][T10495] bridge_slave_0: entered promiscuous mode [ 699.211195][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.219643][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.231914][T10495] bridge_slave_1: entered allmulticast mode [ 699.241856][T10495] bridge_slave_1: entered promiscuous mode [ 699.676856][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.726182][ T5787] Bluetooth: hci2: command tx timeout [ 699.805979][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.108653][T10563] loop1: detected capacity change from 0 to 732 [ 700.243760][T10495] team0: Port device team_slave_0 added [ 700.297385][T10495] team0: Port device team_slave_1 added [ 700.624274][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.633830][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.664186][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.848327][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.855933][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.887386][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.327083][T10576] loop1: detected capacity change from 0 to 128 [ 701.356878][T10495] hsr_slave_0: entered promiscuous mode [ 701.419702][T10495] hsr_slave_1: entered promiscuous mode [ 701.463502][ T29] audit: type=1800 audit(2000000320.750:569): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1622" name="bus" dev="loop1" ino=1048688 res=0 errno=0 [ 701.515213][T10495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.523482][T10495] Cannot create hsr debugfs directory [ 701.694994][T10579] loop6: detected capacity change from 0 to 512 [ 701.910086][ T5787] Bluetooth: hci2: command tx timeout [ 703.046572][T10579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.060064][T10579] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.110755][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'. [ 703.123481][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'. [ 703.347444][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.355702][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.639402][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.647876][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.675333][T10495] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 703.725625][T10495] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 703.806823][T10495] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 703.912367][T10495] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 704.054526][ T8051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.071530][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.293358][T10495] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.387744][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.395638][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.509019][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.517034][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.730753][ T4863] ===================================================== [ 705.738311][ T4863] BUG: KMSAN: uninit-value in nci_ntf_packet+0x1a36/0x3ce0 [ 705.745956][ T4863] nci_ntf_packet+0x1a36/0x3ce0 [ 705.753085][ T4863] nci_rx_work+0x408/0x6f0 [ 705.757803][ T4863] process_scheduled_works+0xae0/0x1c40 [ 705.764484][ T4863] worker_thread+0xea7/0x14f0 [ 705.769475][ T4863] kthread+0x3e2/0x540 [ 705.774704][ T4863] ret_from_fork+0x6d/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 705.779368][ T4863] ret_from_fork_asm+0x1a/0x30 [ 705.790710][ T4863] [ 705.793507][ T4863] Uninit was created at: [ 705.798115][ T4863] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 705.804544][ T4863] kmalloc_reserve+0x13d/0x4a0 [ 705.810431][ T4863] __alloc_skb+0x363/0x7b0 [ 705.815220][ T4863] virtual_ncidev_write+0x67/0x380 [ 705.820624][ T4863] vfs_write+0x48a/0x1540 [ 705.825379][ T4863] ksys_write+0x240/0x4b0 [ 705.829992][ T4863] __x64_sys_write+0x93/0xe0 [ 705.835047][ T4863] x64_sys_call+0x3161/0x3c30 [ 705.840033][ T4863] do_syscall_64+0xcd/0x1e0 [ 705.844987][ T4863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.851171][ T4863] [ 705.855694][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:26 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 705.868109][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 705.878646][ T4863] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 705.889179][ T4863] ===================================================== [ 705.897943][ T4863] Disabling lock debugging due to kernel taint [ 705.904413][ T4863] Kernel panic - not syncing: kmsan.panic set ... [ 705.911022][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: kworker/u8:26 Tainted: G B 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 705.923720][ T4863] Tainted: [B]=BAD_PAGE [ 705.928020][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 705.938264][ T4863] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 705.944095][ T4863] Call Trace: [ 705.947516][ T4863] [ 705.950573][ T4863] dump_stack_lvl+0x216/0x2d0 [ 705.955488][ T4863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 705.961512][ T4863] dump_stack+0x1e/0x24 [ 705.965891][ T4863] panic+0x4e2/0xcf0 [ 705.970019][ T4863] ? kmsan_get_metadata+0xd1/0x1c0 [ 705.975354][ T4863] kmsan_report+0x2c7/0x2d0 [ 705.980053][ T4863] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 705.986121][ T4863] ? pick_eevdf+0x56e/0x13e0 [ 705.990949][ T4863] ? __msan_warning+0x95/0x120 [ 705.995977][ T4863] ? nci_ntf_packet+0x1a36/0x3ce0 [ 706.001218][ T4863] ? nci_rx_work+0x408/0x6f0 [ 706.006052][ T4863] ? process_scheduled_works+0xae0/0x1c40 [ 706.012027][ T4863] ? worker_thread+0xea7/0x14f0 [ 706.017131][ T4863] ? kthread+0x3e2/0x540 [ 706.021567][ T4863] ? ret_from_fork+0x6d/0x90 [ 706.026376][ T4863] ? ret_from_fork_asm+0x1a/0x30 [ 706.031558][ T4863] ? ret_from_fork_asm+0x1a/0x30 [ 706.036748][ T4863] ? kmsan_get_metadata+0x13e/0x1c0 [ 706.042154][ T4863] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 706.048745][ T4863] ? kmsan_get_metadata+0x13e/0x1c0 [ 706.054145][ T4863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 706.060166][ T4863] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 706.066207][ T4863] ? kmsan_get_metadata+0x13e/0x1c0 [ 706.071604][ T4863] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 706.078191][ T4863] ? kmsan_get_metadata+0x13e/0x1c0 [ 706.083587][ T4863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 706.089615][ T4863] __msan_warning+0x95/0x120 [ 706.094460][ T4863] nci_ntf_packet+0x1a36/0x3ce0 [ 706.099521][ T4863] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 706.106114][ T4863] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 706.112454][ T4863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 706.118480][ T4863] nci_rx_work+0x408/0x6f0 [ 706.123161][ T4863] ? __pfx_nci_rx_work+0x10/0x10 [ 706.128341][ T4863] process_scheduled_works+0xae0/0x1c40 [ 706.134188][ T4863] worker_thread+0xea7/0x14f0 [ 706.139142][ T4863] kthread+0x3e2/0x540 [ 706.143411][ T4863] ? __pfx_worker_thread+0x10/0x10 [ 706.148786][ T4863] ? __pfx_kthread+0x10/0x10 [ 706.153576][ T4863] ret_from_fork+0x6d/0x90 [ 706.158212][ T4863] ? __pfx_kthread+0x10/0x10 [ 706.163005][ T4863] ret_from_fork_asm+0x1a/0x30 [ 706.168061][ T4863] [ 706.171596][ T4863] Kernel Offset: disabled [ 706.176019][ T4863] Rebooting in 86400 seconds..